PT-2020-17527 · Rust · Stack Crate

Name of the Vulnerable Software and Affected Versions: stack crate versions prior to 0.3.1 Description: The issue is related to the ArrayVec in the stack crate, where the insert method allows insertion of an element into the array object at a specified index. Due to a missing check on the upper...

Foxit Reader XFAScriptObject insert Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the insert method o...

SQL Injection Vulnerability in zabbix

zabbix is an open source enterprise performance monitoring solution. A SQL injection vulnerability exists in the insert method of the profileIdx2 parameter in zabbix's jsrpc. An attacker can log in to the zabbix management system without authorization, and can also directly obtain operational...