Lucene search
+L

8 matches found

OSV
OSV
added 2026/06/30 1:19 p.m.5 views

UBUNTU-CVE-2026-58011

A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the gdatetimegetymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the gdatetimeaddfull function is processed. This flaw can corrupt the date output and potentially cause logic errors...

7.5CVSS5.7AI score0.0036EPSS
SaveExploits1References3
OSV
OSV
added 2026/06/30 12:57 p.m.3 views

CVE-2026-58011 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime

A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the gdatetimegetymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the gdatetimeaddfull function is processed. This flaw can corrupt the date output and potentially cause logic errors...

6.5CVSS5.9AI score0.0036EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2026/06/30 12:0 a.m.6 views

PT-2026-53870

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description An out-of-bounds read of 2 bytes can occur in the g date time get ymd function within the glib/gdatetime.c file. This happens when the system processes an invalid GDateTime object created by the...

8.2CVSS5.8AI score0.0036EPSS
SaveExploits2References30
NVD
NVD
added 2024/04/23 5:15 a.m.39 views

CVE-2024-21511

Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function...

9.8CVSS9.6AI score0.01025EPSS
SaveExploits0References4
OSV
OSV
added 2024/04/23 5:0 a.m.19 views

CVE-2024-21511

Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function...

9.8CVSS7.4AI score0.01025EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2024/04/23 5:0 a.m.13 views

CVE-2024-21511

Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function...

9.8CVSS9.6AI score0.01025EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/04/23 12:0 a.m.8 views

mysql2 安全漏洞

MySQL2 is a MySQL client for Node.js by Andrey Sidorov, a personal developer. A security vulnerability exists in mysql2 2 versions prior to 3.9.7, which originates from an arbitrary code injection via an incorrect cleanup of the timezone parameter in the readCodeFor function by calling the native...

9.8CVSS7.6AI score0.01025EPSS
SaveExploits0References5
CNVD
CNVD
added 2017/02/10 12:0 a.m.3 views

GStreamer Denial of Service Vulnerability (CNVD-2017-01488)

GStreamer is a set of frameworks for handling streaming media. A denial of service vulnerability exists in the gstdatetimenewfromiso8601string function in GStreamer gst/gstdatetime.c. A remote attacker can cause a denial of service out-of-bounds heap read via a malformed datetime string...

7.5CVSS7.5AI score0.04574EPSS
SaveExploits0References1
Rows per page
Query Builder