glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read

In the GNU C Library aka glibc or libc6 through 2.29, proceednextnode in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match...

Moderate: Red Hat Security Advisory: cpio security update

An update for cpio is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

cpio security update

An update is available for cpio. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cpio packages provide the GNU cpio utility for creating and extracting...

Moderate: cpio security update

The cpio packages provide the GNU cpio utility for creating and extracting archives, or copying files from one place to another. Security Fixes: cpio: improper input validation when writing tar header fields leads to unexpected tar generation CVE-2019-14866 For more details about the security...

GNU LibreDWG Null Pointer Dereference Vulnerability (CNVD-2021-36631)

LibreDWG is a free C library for reading and writing DWG files. A null pointer dereference vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can pass the outputTEXT ... /... /programs/dwg2SVG.c:114 to exploit the vulnerability and cause the application to crash...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36647)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability by reading2004sectionrevhistory ... /... /src/decode.c:3051 to exploit the vulnerability and cause a heap buffer...

Unspecified vulnerability in GNU LibreDWG memcpy-param-overlap

LibreDWG is a free C library for reading and writing DWG files. The read2004sectionheader in GNU LibreDWG version 0.10 ... /... /src/decode.c:2580 contains a security vulnerability in memcpy-param-overlap. An attacker can exploit this vulnerability to execute arbitrary code...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36629)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can exploit this vulnerability via the outputTEXT ... /... /programs/dwg2SVG.c:114 to cause a heap buffer overflow...

GNU LibreDWG Null Pointer Dereference Vulnerability (CNVD-2021-36641)

LibreDWG is a free C library for reading and writing DWG files. A null pointer dereference vulnerability exists in GNU LibreDWG version 0.10. An attacker can read2004compressedsection ... /... /src/decode.c:2337 to exploit the vulnerability and cause a denial of service...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36635)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can exploit this vulnerability via htmlescape ... /... /programs/escape.c:51 to exploit the vulnerability and cause a heap buffer overflow...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36634)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can exploit this vulnerability via htmlescape ... /... /programs/escape.c:48 to exploit the vulnerability and cause a heap buffer overflow...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36646)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via the bitreadB ... /... /src/bits.c:135 to exploit the vulnerability and cause a heap buffer overflow...

GNU LibreDWG Null Pointer Dereference Vulnerability (CNVD-2021-36640)

LibreDWG is a free C library for reading and writing DWG files. A null pointer dereference vulnerability exists in GNU LibreDWG version 0.10. An attacker can obtain a null pointer dereference via the getbmp ... /... /programs/dwgbmp.c:164 to cause a denial of service...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36643)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via the read2004sectionappinfo ... /... /src/decode.c:2842 to exploit the vulnerability and cause a heap buffer...

GNU LibreDWG Memory Leak Vulnerability

LibreDWG is a free C library for reading and writing DWG files. GNU LibreDWG version 0.10 in dwgdecodeeed ... /... A memory leak vulnerability exists in /src/decode.c:3638. An attacker could cause a memory leak by exploiting this vulnerability via specially crafted input...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36645)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via the bitsearchsentinel ... /... /src/bits.c:1985 to cause a heap buffer overflow...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36637)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via the bitcalcCRC ... /... /src/bits.c:2213 to exploit the vulnerability and cause a heap buffer overflow...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36636)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability by reading2004compressedsection ... /... /src/decode.c:2379 to cause a heap buffer overflow...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36638)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability by reading2004compressedsection ... /... /src/decode.c:2417 to cause a heap buffer overflow...

EgavilanMedia PHPCRUD 1.0 - (First Name) SQL Injection Vulnerability

Exploit Title: EgavilanMedia PHPCRUD 1.0 - 'First Name' SQL Injection Exploit Author: Dimitrios Mitakos Vendor Homepage: https://egavilanmedia.com Software Link: https://egavilanmedia.com/crud-operation-with-php-mysql-bootstrap-and-dompdf/ Version: 1.0 Tested on: Debian GNU/Linux 10 Vulnerable...