CVE-2023-0790 Uncaught Exception in thorsten/phpmyfaq

Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

CVE-2023-0790

CVE-2023-0790 affects the PHPMyFAQ project, specifically versions prior to 3.1.11. The vulnerability is described as an uncaught exception in the GitHub repository thorsten/phpmyfaq. The available connected sources corroborate the issue and identify 3.1.11 as the fixed version. Impact details in ...

CVE-2023-0790 Uncaught Exception in thorsten/phpmyfaq

Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

CVE-2023-0790 Uncaught Exception in thorsten/phpmyfaq

Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

PT-2023-16531 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.11 Description: The issue is related to an Uncaught Exception in the GitHub repository thorsten/phpmyfaq. Recommendations: For versions prior to 3.1.11, update to version 3.1.11 or later to resolve the...

Debian dla-3315 : libsox-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3315 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3315-1 [email protected]...

The vulnerability of JavaScript Node.js in a cross-platform execution environment, related to improper handling of exceptional situations, allows a violator to trigger a service failure.

The vulnerability of JavaScript Node.js’ cross-platform execution environment is related to incorrect exception handling in the src/nodeoptions-inl.h file when an invalid command-line argument is provided as input. Exploiting this vulnerability can allow a remote attacker to cause an application ...

The vulnerability of the Linux operating system’s kernel memory management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Linux kernel’s memory management system is related to the lack of randomization in exception handling stacks. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

ALPINE-CVE-2023-23931

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects such as bytes to b...

AZL-35127 CVE-2023-23931 affecting package python-cryptography for versions less than 3.3.2-5

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects such as bytes to b...

Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf

Previously, Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers: pycon outbuf = b"\x00" 32 c = ciphers.CipherAESb"\x00" 32, modes.ECB.encryptor c.updateintob"\x00" 16, outbuf 16 outbuf...

CVE-2023-23931 Cipher.update_into can corrupt memory in pyca cryptography

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects such as bytes to b...

CVE-2023-23931

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects such as bytes to b...

CVE-2023-23931 Cipher.update_into can corrupt memory in pyca cryptography

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects such as bytes to b...

CVE-2023-23931

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects such as bytes to b...

CVE-2023-23931 Cipher.update_into can corrupt memory in pyca cryptography

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects such as bytes to b...

Zyxel NWA110AX 代码问题漏洞

The Zyxel NWA110AX is a wireless access point from China Hopkins Zyxel. A security vulnerability exists in Zyxel NWA110AX firmware versions prior to 6.50ABTG.0C0, which stems from an incorrectly checked exception. An attacker could exploit the vulnerability to cause a Denial of Service DoS of the...

PT-2023-2766 · Pypi +10 · Cryptography +10

Name of the Vulnerable Software and Affected Versions: cryptography versions 1.8 through the latest version before the fix Description: The issue is related to the Cipher.update into function in the cryptography package, which would accept Python objects that implement the buffer protocol but...

py-cryptography -- allows programmers to misuse an API

alex reports: Previously, Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects such as bytes to be mutated, thus violating fundamental rules of Python. This is a soundness bug -- it allows...

Denial Of Service (DoS)

sox is vulnerable to Denial of Service DoS attacks. A floating-point exception in lsxaiffstartwrite function in aiff.c in libsox.a allows remote attackers to cause an application crash...