GHSA-HW7C-3RFG-P46J google.golang.org/protobuf vulnerable to panic leading to denial of service

Parsing invalid messages can panic. Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic...

GO-2023-1631 Panic when parsing invalid messages in google.golang.org/protobuf

Parsing invalid messages can panic. Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic...

OPENSUSE-SU-2023:0071-1 Security update for peazip

This update for peazip fixes the following issues: peazip was updated to 9.1.0: Major restyle in application's look & feel and themes, and many usability improvements for the file manager, and archiving / extraction screens. The scripting engine was refined, with the ability to adapt the syntax f...

CVE-2023-25596 Authenticated Sensitive Information Disclosure in ClearPass Policy Manager

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network...

Description of the security update for SharePoint Server 2019: March 14, 2023 (KB5002358)

None None...

PT-2023-19680 · Canonical +9 · Golang-Github-Golang-Protobuf-1-3 +7

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises when parsing invalid messages, which can cause a panic. Specifically, parsing a text-format message that contains a potential number...

Security update for peazip (moderate)

openSUSE Security Update: Security update for peazip Announcement ID: openSUSE-SU-2023:0071-1 Rating: moderate References: 1202690 1208468 Cross-References: CVE-2023-24785 CVSS scores: CVE-2023-24785 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports...

SAMSUNG Mobile Chipset 安全漏洞

SAMSUNG Mobile Chipset is a family of chips from Samsung South Korea. A security vulnerability exists in the SAMSUNG Mobile Chipset baseband module, which results in a denial of service due to the chipset not properly checking the format type specified by the Session Description Protocol SDP modu...

PT-2023-19371

Name of the Vulnerable Software and Affected Versions Samsung Exynos Modem 5123 Samsung Exynos Modem 5300 Samsung Exynos 980 Samsung Exynos 1080 Samsung Exynos Auto T512 Description The Samsung Exynos Modem chipsets do not properly check format types specified by the Session Description Protocol...

CVE-2023-24033

The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly check format types specified by the Session Description Protocol SDP module, which can lead to a denial of service...

CVE-2023-24033

CVE-2023-24033 concerns Samsung Exynos Modem baseband chips (e.g., Exynos Modem 5123/5300, Exynos 980/1080, Exynos Auto T512) where the SDP format-type checks are flawed, enabling network-based DoS or remote code execution without user interaction on affected devices. Public disclosures from Goog...

Fedora: Security Advisory for tkimg (FEDORA-2023-6c1200da3d)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 38 Update: tkimg-1.4.14-3.fc38

This package contains a collection of image format handlers for the Tk photo image type, and a new image type, pixmaps...

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in the fact that operations are performed outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an...

CVE-2022-43902

IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. IBM X-Force ID: 240832...

CVE-2023-27853

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device...

CVE-2023-27853

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device...

Format string

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device...

CVE-2023-27853

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 has a format string vulnerability in its SOAP service that could allow arbitrary code execution. Root cause: uncontrolled format strings in SOAP. Affected versions: before 1.0.10.94. Impact: remote code execution on the device. Remediation: updat...

CVE-2023-27853

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device...