Fortinet FortiManager and Fortinet FortiAnalyzer Environment Issue Vulnerability

Fortinet FortiManager is a centralized network security management platform from Fortinet, Inc. Fortinet FortiAnalyzer is a centralized network security reporting solution that allows for centralized management of any number of Fortinet devices and the ability to group devices into different...

Updated screen packages fix security vulnerability

Felix Weinmann reported a flaw in the handling of combining characters in screen, which can result in denial of service, or potentially the execution of arbitrary code via a specially crafted UTF-8 character sequence CVE-2021-26937...

MGASA-2021-0109 Updated screen packages fix security vulnerability

Felix Weinmann reported a flaw in the handling of combining characters in screen, which can result in denial of service, or potentially the execution of arbitrary code via a specially crafted UTF-8 character sequence CVE-2021-26937...

Xterm Input Validation Error Vulnerability

XTerm is a terminal emulator on the X Window System used to provide multiple independent SHELL inputs and outputs. An input validation error vulnerability exists in Xterm that originates from allowing remote attackers to cause a denial of service segmentation error or possibly have unspecified...

MGASA-2021-0094 Updated xterm package fixes security vulnerability

xterm through Patch 365 allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafted UTF-8 character sequence. CVE-2021-27135...

[SECURITY] [DSA 4861-1] screen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4861-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 21, 2021 https://www.debian.org/security/faq -...

Denial Of Service (DoS)

screen is vulnerable to denial of service DoS. The vulnerability exists in encoding.c through an invalid write access via a crafted UTF-8 character sequence...

Design/Logic Flaw

xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...

CVE-2021-27135

xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...

Command injection

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...

CVE-2021-26937

CVE-2021-26937 affects the GNU Screen utility. The vulnerability exists in encoding.c when handling combining characters/UTF-8 sequences, and can enable a remote attacker to cause a denial of service (invalid write access and crash) or, in some advisories, potentially arbitrary code execution. Af...

CVE-2021-26937

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...

CVE-2021-26937

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...

CVE-2021-26937

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...

CVE-2014-4650

The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as...

EulerOS 2.0 SP5 : icu (EulerOS-SA-2019-2159)

According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The Regular Expressions package in International Components for Unicode ICU 52 before SVN revision 292944, as used in Google Chrome before...

EulerOS 2.0 SP3 : icu (EulerOS-SA-2019-2248)

According to the version of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The collator implementation in i18n/ucol.cpp in International Components for Unicode ICU 52 through SVN revision 293126, as used in Google Chrome befo...

CVE-2016-4852

YoruFukurou NightOwl before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing from the CoreText CTFramesetter API on OS X 10.9, which allows remote attackers to cause a denial of service application crash via a crafted emoji character sequence...

CVE-2016-4852

YoruFukurou NightOwl before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing from the CoreText CTFramesetter API on OS X 10.9, which allows remote attackers to cause a denial of service application crash via a crafted emoji character sequence...

Android - libutils UTF16 to UTF8 Conversion Heap Buffer Overflow

Exploit for Android platform in category remote exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=840 There's an inconsistency between the way that the two functions in libutils/Unicode.cpp handle invalid surrogate pairs in UTF16, resulting in a mismatch between the size...