CVE-2023-22941 Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, an improperly-formatted ‘INGESTEVAL’ parameter in a Field Transformation crashes the Splunk daemon splunkd...

SAMSUNG Mobile devices 格式化字符串错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR Jan-2023 Release 1, which originates from the use of an externally formatted control character in STST TA that...

sslh 格式化字符串错误漏洞

sslh is an application protocol multiplexer by the individual developer Yves Rutschle. sslh suffers from a Formatted String Error vulnerability that stems from the manipulation of the parameter msginfo of the hexdump function of its Packet Dumping Handler component resulting in a formatted string...

CVE-2022-44031

Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization of the blockquote syntax in Textile-formatted fields...

IBM WebSphere Application Server Liberty Denial of Service Vulnerability

IBM WebSphere Application Server Liberty is a Java application server built on top of the Open Liberty project from International Business Machines IBM. IBM WebSphere Application Server Liberty has a denial-of-service vulnerability that stems from a flaw in the parser of text-formatted data, whic...

CVE-2022-36864

Improper access control and intent redirection in Samsung Email prior to 6.1.70.20 allows attacker to access specific formatted file and execute privileged behavior...

CVE-2022-36864

Improper access control and intent redirection in Samsung Email prior to 6.1.70.20 allows attacker to access specific formatted file and execute privileged behavior...

CVE-2022-36864

Improper access control and intent redirection in Samsung Email prior to 6.1.70.20 allows attacker to access specific formatted file and execute privileged behavior...

Fortinet FortiGate和Fortinet FortiOS 格式化字符串错误漏洞

Fortinet FortiOS and Fortinet FortiGate are both products of the U.S. Fiat Fortinet Inc. Fortinet FortiOS is a set of security operating system dedicated to the FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and...

[SECURITY] Fedora 36 Update: golang-github-liamg-tml-0.6.0-3.fc36

A Go module and standalone binary to make the output of colored/formatted text in the terminal easier and more readable...

[SECURITY] Fedora 35 Update: golang-github-liamg-tml-0.3.0-4.fc35

A Go module and standalone binary to make the output of colored/formatted text in the terminal easier and more readable...

Information Disclosure

github.com/argoproj/argo-cd is vulnerable to information disclosure. The vulnerability exists because the YAML-formatted secrets are mounted as files on the repo-server which allows a malicious attacker to read the contents of the files...

Directory traversal

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.7.0 and prior to versions 2.1.15m 2.2.9, and 2.3.4 is vulnerable to a symlink following bug allowing a malicious user with repository write access to leak sensitive files from Argo CD's...

CVE-2022-24974

Links may not be rewritten according to policy in some specially formatted emails...

CVE-2022-24974

Links may not be rewritten according to policy in some specially formatted emails...

Laurent Rineau CGAL Code Execution Vulnerability (CNVD-2022-32783)

Laurent Rineau CGAL is an open source application from Laurent Rineau. Providing access to geometric algorithms in the form of C libraries, Laurent Rineau CGAL suffers from a security vulnerability that could be exploited by an attacker to provide specially formatted malformed files to cause...

Laurent Rineau CGAL 输入验证错误漏洞

Laurent Rineau CGAL is an open source application by Laurent Rineau. It provides easy access to efficient and reliable geometric algorithms in the form of C libraries. CGAL libcgal suffers from a code execution vulnerability that stems from a specially formatted file that could lead to...

Laurent Rineau CGAL 输入验证错误漏洞

Laurent Rineau CGAL is an open source application from Laurent Rineau. Laurent Rineau CGAL has a code execution vulnerability that can be exploited by attackers to cause out-of-bounds reads and type obfuscation via specially formatted error files, leading to code execution...

Updated ntfs-3g packages fix security vulnerability

Security vulnerabilities were identified in the open source NTFS-3G and NTFSPROGS software. These vulnerabilities may allow an attacker using a maliciously crafted NTFS-formatted image file or external storage to potentially execute arbitrary privileged code, if the attacker has either local acce...

Trendnet AC2600 TEW-827DRU Command Injection Vulnerability (CNVD-2022-03198)

Trendnet AC2600 TEW-827DRU is a wireless router.The Trendnet AC2600 TEW-827DRU is vulnerable to a security flaw that could be exploited by attackers to inject commands as root user by providing incorrectly formatted parameters...