20424 matches found
C-DATA ONU4FERW OS Command Injection Vulnerability
C-DATA ONU4FERW is used for data management.C-DATA ONU4FERW is vulnerable to OS command injection, which can be exploited by attackers to execute arbitrary commands via the FormImportomCashell function...
PT-2023-5341 · Glibc +9 · Glibc +9
Name of the Vulnerable Software and Affected Versions: glibc affected versions not specified Description: A flaw was found in glibc, where the gaih inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is...
CLSA-2022-1646085735 Fix of CVE: CVE-2021-45078
CVE-2021-45078: Fix out-of-bounds write in stabxcoffbuiltintype in stabs.c...
CVE-2021-44334
David Brackeen ok-file-formats 97f78ca is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurs in function okjpgconvertYCbCrtoRGB in "/okjpg.c:513"...
CVE-2021-44132
A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13X139 allows attackers to execute arbitrary commands via a crafted file...
CVE-2021-44132
A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13X139 allows attackers to execute arbitrary commands via a crafted file...
Command injection
A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13X139 allows attackers to execute arbitrary commands via a crafted file...
CVE-2021-44132
A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13X139 allows attackers to execute arbitrary commands via a crafted file...
CVE-2021-44132
C-DATA ONU4FERW vulnerable to OS command injection in the function FormImportOMCIShell (V2.1.13_X139). A crafted file can trigger arbitrary commands. CVSSv3.1 shows base score 7.8 (HIGH) with local access and user interaction required; confidentiality, integrity, and availability are all HIGH aff...
CVE-2021-44132: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13X139 allows attackers to execute arbitrary commands via a crafted file...
UBUNTU-CVE-2022-24599
In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero byte...
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2022-1164)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Backdoor.Win32.Acropolis.10 Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/c3e2bbe5dca96687422f2b4e8c80f4ce.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Acropolis.10 Vulnerability: Insecure Permissions Description: The malware writes a PE...
libxml2 Resource Management Error Vulnerability (CNVD-2022-21487)
libxml2 is an open source library for parsing XML documents. It is written in C and can be called by multiple languages, such as C, C, XSH. libxml2 suffers from a resource management error vulnerability that can be exploited by attackers to threaten alerts that affect software or systems...
CVE-2022-23608
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions up to and including 2.11.1 when in a dialog set or forking scenario, a hash key shared by multiple UAC dialogs can...
Security Bulletin: GNU C library (glibc) vulnerability affects Tivoli Storage Productivity Center (CVE-2015-0235)
Summary GNU C library glibc vulnerability that has been referred to as GHOST affects Tivoli Storage Productivity Center. Vulnerability Details Vulnerability Details CVEID: CVE-2015-0235 DESCRIPTION:The gethostbyname functions of the GNU C Library glibc are vulnerable to a buffer overflow. By...
PT-2022-1907 · Unknown +10 · Cyrus-Sasl +10
Name of the Vulnerable Software and Affected Versions: Cyrus SASL versions 2.1.17 through 2.1.27 Description: The issue is related to the implementation of the authentication mechanism in Cyrus SASL, where the SQL query structure is not properly protected. This could allow a remote attacker to...
openSUSE: Security Advisory for json-c (openSUSE-SU-2022:0184-2)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Backdoor.Win32.Agent.baol Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/1f84a5305b65d7f6aa3afa7e2f2bda0e.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.baol Vulnerability: Insecure Permissions Description: The malware writes severa...