Vulnerability of the njs_utf8_next() function (src/njs_utf8.h) in the njs interpreter of the nginx server, allowing a attacker to execute arbitrary code

The vulnerability of the njsutf8next function src/njsutf8.h in the njs interpreter of the nginx server is related to the execution of an operation outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Vulnerability of the njs_djb_hash() function (src/njs_djb_hash.c) in the njs interpreter of the nginx server, allowing a hacker to execute arbitrary code

The vulnerability of the njsdjbhash function src/njsdjbhash.c in the njs interpreter of the nginx server is related to the execution of an operation outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Vulnerability of the njs_value_property() function (njs_value.c) in the njs interpreter of the nginx server, allowing a hacker to execute arbitrary code

The vulnerability of the njsvalueproperty function njsvalue.c in the njs interpreter of the nginx server is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the njs_vmcode_interpreter function (src/njs_vmcode.c) in the njs interpreter of the nginx server allows a hacker to cause a service failure.

The vulnerability of the njsvmcodeinterpreter function src/njsvmcode.c in the njs interpreter of the nginx server involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

CVE-2021-44170

A stack-based buffer overflow vulnerability CWE-121 in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments...

Stack overflow

A stack-based buffer overflow vulnerability CWE-121 in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments...

CVE-2021-44170

A stack-based buffer overflow vulnerability CWE-121 in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments...

PT-2022-3708 · Nginx · Nginx Njs

Name of the Vulnerable Software and Affected Versions: Nginx NJS version 0.7.4 Description: The issue is related to a buffer overflow in the njs value property function of the njs interpreter in the Nginx server. This could allow a remote attacker to execute arbitrary code. The problem is caused ...

[SECURITY] Fedora 35 Update: golang-mvdan-sh-3-3.4.3-4.fc35

A shell parser, formatter, and interpreter. Supports POSIX Shell, Bash, and mksh...

The vulnerability of the njs_value_own_enumerate() function in the njs interpreter of the nginx server allows a hacker to cause a service failure.

The vulnerability of the njsvalueownenumerate function in the njs interpreter of the nginx server is related to the execution of an operation outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Protect

A stack-based buffer overflow vulnerability CWE-121 in the command line interpreter of FortiOS and FortiProxy may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments...

The vulnerability of the mysqlnd/pdo function (mysqlnd_wireprotocol.c) in the PHP programming language interpreter allows a hacker to execute arbitrary code.

The vulnerability of the mysqlnd/pdo function mysqlndwireprotocol.c in the PHP programming language interpreter is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

[SECURITY] Fedora 35 Update: python3-docs-3.10.5-1.fc35

The python3-docs package contains documentation on the Python 3 programming language and interpreter...

Nginx 资源管理错误漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx Inc. in the United States. njs is one of the scripting language components that supports extended NGINX functionality. A security vulnerability exists in Nginx NJS version v0.7.2, which stems from a...

[SECURITY] Fedora 36 Update: python3-docs-3.10.5-1.fc36

The python3-docs package contains documentation on the Python 3 programming language and interpreter...

USN-5396-2: Ghostscript vulnerability

USN-5396-1 addressed a vulnerability in Ghostscript. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a special...

The vulnerability of PowerShell command interpreters, related to deficiencies in access control, allows attackers to execute arbitrary code.

The vulnerability of PowerShell command interpreters is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the Python programming language interpreter arises from memory management errors after memory is freed, allowing attackers to execute operating system commands.

The vulnerability of the Python programming language interpreter arises from a mistake in memory management after the memory is freed. Exploiting this vulnerability allows an attacker to execute operating system commands through the Python interpreter, bypassing the standard mechanism for importi...

The vulnerability of the njs_vmcode_array component in the njs interpreter of the nginx server allows a hacker to cause a service failure.

The vulnerability of the njsvmcodearray component /src/njsvmcode.c. of the njs interpreter on the nginx server is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Out-of-bounds Read in Facebook Hermes

An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a denial of service attack or possible further memory corruption via crafted JavaScript. Note that this is only exploitable if the application...