CVE-2020-8006

The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time control of the device as root. The ocpp1.5 and pwrstudio binaries on the charging station do not use a number of common exploitation mitigations. In...

OESA-2024-1419 libdwarf security update

Libdwarf is a library of functions to provide read/write DWARF debugging records. Security Fixes: A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to deallocfree an allocation twice, potentially causing unpredictable and various...

CVE-2024-3622

A flaw was found when using mirror-registry to install Quay. It uses a default secret, which is stored in plain-text format in one of the configuration template files. This issue may lead to all instances of Quay deployed using mirror-registry to have the same secret key. This flaw allows a...

UBUNTU-CVE-2021-47216

In the Linux kernel, the following vulnerability has been resolved: scsi: advansys: Fix kernel pointer leak Pointers should be printed with %p or %px rather than cast to 'unsigned long' and printed with %lx. Change %lx to %p to print the hashed pointer...

CVE-2024-23080

Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBasedLocale. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may...

[SECURITY] Fedora 39 Update: python-pillow-10.3.0-1.fc39

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

Denial Of Service (DoS)

libmojolicious-perl is vulnerable to Denial Of Service DoS. The vulnerability due to a flaw in format detection within the mojolicious module, allowing attackers to cause a denial of service condition...

PT-2024-19662

Name of the Vulnerable Software and Affected Versions Time4J Base version 5.9.3 Description A NullPointerException was discovered in Time4J Base via the component net.time4j.format.internal.FormatUtils::useDefaultWeekmodelLocale. However, the existence of this issue is disputed by multiple third...

PT-2024-19659

Name of the Vulnerable Software and Affected Versions Joda Time version 2.12.5 Description A NullPointerException was reportedly discovered in Joda Time via the component org.joda.time.format.PeriodFormat::wordBasedLocale. However, this finding is disputed by multiple third parties who question t...

PT-2024-2888 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions 20.4R1 through 20.4R3-S8 Junos OS versions 21.2 through 21.2R3-S6 Junos OS versions 21.3 through 21.3R3-S4 Junos OS versions 21.4 through 21.4R3-S4 Junos OS versions 22.1 through 22.1R3-S3 Junos OS versions 22.2 through...

CVE-2024-23083

The Time4J Base version v5.9.3 may contain a NullPointerException within the component net.time4j.format.internal.FormatUtils::useDefaultWeekmodel(Locale). However, the existence of this vulnerability is disputed by multiple third parties who claim there is insufficient evidence and that the dete...

CVE-2023-48784

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6.4 all versions command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or...

CVE-2023-48784

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6.4 all versions command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or...

CVE-2023-48784

CVE-2023-48784: Fortinet FortiOS contains a use of externally-controlled format string vulnerability (CWE-134) in the CLI that may allow a local privileged attacker with super-admin/CLI access to execute arbitrary code via specially crafted requests. Affected: FortiOS 7.4.1 and below, 7.2.7 and b...

CVE-2023-48784

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6.4 all versions command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or...

CVE-2023-48784

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6.4 all versions command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or...

PT-2024-3562 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.4.1 and below FortiOS versions 7.2.7 and below FortiOS versions 7.0.14 and below FortiOS versions 6.4.15 and below Description: A use of externally-controlled format string vulnerability in FortiOS command line interface ma...

PT-2024-3580

Name of the Vulnerable Software and Affected Versions Lenovo ThinkSystem, ThinkAgile, NeXtScale, and Lenovo CP-CB-10 affected versions not specified SMM/SMM2 and FPC affected versions not specified Description A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an...

PT-2024-5060 · Siemens · Scalance W786-1 Rj45 +22

Name of the Vulnerable Software and Affected Versions: SCALANCE W1748-1 M12 6GK5748-1GY01-0AA0 SCALANCE W1748-1 M12 6GK5748-1GY01-0TA0 SCALANCE W1788-1 M12 6GK5788-1GY01-0AA0 SCALANCE W1788-2 EEC M12 6GK5788-2GY01-0TA0 SCALANCE W1788-2 M12 6GK5788-2GY01-0AA0 SCALANCE W1788-2IA M12...

OpenImageIO Heap Buffer Overflow DoS

The vulnerability in the src/gif.imageio/gifinput.cpp file of the OpenImageIO library relates to the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...