NEO Blockchain Node Client NEO-CLI Has RPC Interface Exposure Vulnerability

NEO is a non-profit community-based blockchain project. It is a distributed network that uses blockchain technology and digital identity to digitize assets, and smart contracts to automate the management of digital assets to achieve a "smart economy". An RPC interface exposure vulnerability exist...

PT-2018-2834

Name of the Vulnerable Software and Affected Versions cvsps affected versions not specified Description The issue is caused by a buffer overflow when processing command line parameters, which can be exploited to cause a denial of service by inputting a specially crafted sequence of data into the...

PT-2018-2928

Name of the Vulnerable Software and Affected Versions gnupg affected versions not specified Description The issue is related to a data encryption utility, gpg, from the gnupg package, and is connected to null pointer dereference errors. Exploitation of this issue could allow an attacker to cause ...

PT-2018-2836

Name of the Vulnerable Software and Affected Versions h5dump affected versions not specified Description The issue is caused by a buffer overflow when processing command line parameters in the h5dump program for viewing hdf5 files. Exploitation of this issue may allow an attacker to cause a denia...

PT-2018-19345

Уязвимость утилиты подключения к сканерам с использованием параллельного порта umax pp связана с ошибками сегментирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании приложения путем ввода в командную строку специально сформированной последовательности данных...

PT-2018-19344

Уязвимость фильтра аудиоданных roarfilt связана с ошибками сегментирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании приложения путем ввода в командную строку специально сформированной последовательности данных...

PT-2018-2837

Name of the Vulnerable Software and Affected Versions h5ls affected versions not specified Description The issue is caused by a buffer overflow when processing command line parameters, which can lead to a denial of service. This occurs when a specially crafted sequence of data is input into the...

PT-2018-2916

Name of the Vulnerable Software and Affected Versions fly-fm affected versions not specified Description The issue is caused by a buffer overflow when processing command line parameters in the fly-mineapps utility of the fly-fm file manager. Exploitation of this issue may allow an attacker to cau...

PT-2018-2918

Name of the Vulnerable Software and Affected Versions signtool affected versions not specified Description The issue is caused by a buffer overflow when processing command line parameters. This can be exploited to cause a denial of service by inputting a specially crafted sequence of data into th...

PT-2018-2812

Name of the Vulnerable Software and Affected Versions Firebird mendex affected versions not specified Description The issue is related to buffer overflow errors when processing command line arguments, which can be exploited to cause a denial of service by inputting specific parameters that trigge...

PT-2018-2925

Name of the Vulnerable Software and Affected Versions dvipos affected versions not specified Description The issue is caused by segmentation errors in the position calculation tool for DVI files in dvipos. Exploitation of this issue may allow an attacker to cause a denial of service by inputting ...

PT-2018-2929

Name of the Vulnerable Software and Affected Versions gtbl from groff package affected versions not specified Description The issue is related to a null pointer dereference error at address 0x0000000000409400 in the gtbl utility. Exploitation of this issue may allow an attacker to cause a denial ...

PT-2018-2923

Name of the Vulnerable Software and Affected Versions xkbevd affected versions not specified Description The xkbevd daemon vulnerability is caused by segmentation faults. Exploitation of this issue may allow an attacker to cause a denial of service in the daemon by inputting a specially crafted...

PT-2018-19343

Уязвимость компонента Virtual Distributed Ethernet Switch vde l3 связана с ошибками сегментирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании приложения путем ввода в командную строку специально сформированной последовательности данных...

PT-2018-2816

Name of the Vulnerable Software and Affected Versions linux-headers affected versions not specified Description The issue is caused by a buffer overflow when processing command line parameters, potentially allowing an attacker to cause a denial of service by inputting a specially crafted command...

PT-2018-19340

Уязвимость утилиты восстановления поврежденных архивов bzip2recover связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании приложения путем ввода в командную строку специально сформированной последовательности данных...

PT-2018-2835

Name of the Vulnerable Software and Affected Versions isql-fb affected versions not specified Description The issue is caused by a buffer overflow when processing command line parameters in the isql-fb utility for Firebird databases. Exploitation of this issue may allow an attacker to cause a...

PT-2018-2831

Name of the Vulnerable Software and Affected Versions TeX Live dvips affected versions not specified Description The issue is caused by a buffer overflow when processing command line parameters, which can lead to a denial of service or allow an attacker to execute arbitrary code by inputting a...

PT-2018-2917

Name of the Vulnerable Software and Affected Versions gostsum affected versions not specified Description The issue is caused by a buffer overflow when processing command line parameters, which can lead to a denial of service by reading memory at a null pointer. An attacker can exploit this by...

PT-2018-2924

Name of the Vulnerable Software and Affected Versions genrb affected versions not specified Description The issue is related to incorrect initialization in the genrb file conversion tool. Exploitation of this issue may allow an attacker to cause a denial of service by inputting a specially crafte...