The vulnerability of the Python interpreter, related to errors in the conversion of data types `int` and `str`, allows attackers to trigger a service failure due to algorithmic complexity.

The vulnerability of the Python interpreter is related to errors during the conversion of data types int and str. Exploiting this vulnerability can allow an attacker to trigger a service failure due to the computational complexity involved...

CVE-2022-29058

An improper neutralization of special elements CWE-89 used in an OS command vulnerability CWE-78 in the command line interpreter of FortiAP 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0, FortiAP-S 6.0.0 through 6.4.7, FortiAP-W2 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0 and FortiAP-U 5.4....

Debian: Security Advisory (DLA-3096-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-99-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROS-20220826-01

A vulnerability in the phpurlparseex function of the PHP programming language interpreter is related to insufficient validation of incoming requests. Exploitation of the vulnerability could allow a remote attacker to launch an SSRF attack Vulnerability in the SOAP extension of the PHP interpreter...

The vulnerability of the Python programming language’s cryptographic interpreter package allows a hacker to execute arbitrary code.

The vulnerability of the Python programming language’s cryptography interpreter is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by sending specially crafted data...

The vulnerability of the njs_string_offset function (src/njs_string.c) in the njs interpreter of the nginx server allows a hacker to increase their privileges.

The vulnerability of the njsstringoffset function in the njsstring.c file of the nginx njs interpreter involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to increase their privileges...

The vulnerability of the njs_array_convert_to_slow_array function (src/njs_array.c) in the NJS interpreter of the nginx server allows a attacker to increase their privileges.

The vulnerability of the njsarrayconverttoslowarray function src/njsarray.c in the njs interpreter of the nginx server involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Format string

A format string vulnerability CWE-134 in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0 through 6.1.5, FortiADC version 6.2.0 through 6.2.1, FortiProxy version 1.0.0 through 1.0.7, FortiProxy version 1.1.0 through 1.1.6, FortiProxy version 1.2.0 throu...

CVE-2022-22299

A format string vulnerability CWE-134 in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0 through 6.1.5, FortiADC version 6.2.0 through 6.2.1, FortiProxy version 1.0.0 through 1.0.7, FortiProxy version 1.1.0 through 1.1.6, FortiProxy version 1.2.0 throu...

CVE-2022-22299

A format string vulnerability CWE-134 in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0 through 6.1.5, FortiADC version 6.2.0 through 6.2.1, FortiProxy version 1.0.0 through 1.0.7, FortiProxy version 1.1.0 through 1.1.6, FortiProxy version 1.2.0 throu...

[SECURITY] Fedora 36 Update: golang-mvdan-sh-3-3.4.3-5.fc36

A shell parser, formatter, and interpreter. Supports POSIX Shell, Bash, and mksh...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the core interpreter of sqclass.cpp, which may lead to Arbitrary Code Execution if a victim executes an attacker-controlled squirrel script. Remediation Upgrade squirrel to version 3.2 or higher. References - GitH...

CVE-2022-34529

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component CompileMemoryCopyFill...

The vulnerability of the njs_default_module_loader function in the njs interpreter of the nginx server allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the njsdefaultmoduleloader function /src/njs/src/njsmodule.c in the njs interpreter of the nginx server is caused by an overflow of the stack buffer. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the JetBrains Kotlin programming language interpreter arises from incorrect default access rights settings, allowing attackers to exploit the system to disclose protected information.

The vulnerability of the JetBrains Kotlin programming language interpreter is related to incorrect default access rights settings. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

CVE-2022-31207

The Omron SYSMAC Cx product family PLCs CS series, CJ series, and CP series through 2022-05-18 lack cryptographic authentication. They utilize the Omron FINS 9600/TCP protocol for engineering purposes, including downloading projects and control logic to the PLC. This protocol has authentication...

The vulnerability of the implementation of the singlevar() function in the Lua interpreter allows a hacker to execute arbitrary code.

The vulnerability of the singlevar function implementation in Lua interpreters is related to a buffer out-of-bound read error in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the `hash_new_from_values()` function in the Ruby Mruby interpreter allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the hashnewfromvalues function in the Ruby Mruby interpreter is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...

Vulnerability of the njs_value_own_enumerate() function (src/njs_value.c) in the njs interpreter of the nginx server, allowing a hacker to execute arbitrary code

The vulnerability of the njsvalueownenumerate function src/njsvalue.c in the njs interpreter of the nginx server is related to the execution of an operation outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...