CVE-2024-41435

YugabyteDB v2.21.1.0 was discovered to contain a buffer overflow via the "insert into" parameter...

CVE-2024-41435

CVE-2024-41435 affects YugabyteDB v2.21.1.0, with a buffer overflow in the insert into parameter. Multiple sources confirm the issue and classify the impact as high (CVSSv3.1: 7.5, Network attack vector, no privileges or user interaction required; availability impact is High). Red Hat and PT-Se...

CVE-2024-43958

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gianni Porto IntoTheDark allows Reflected XSS.This issue affects IntoTheDark: from n/a through 1.0.5...

CVE-2024-43958 WordPress Into The Dark theme <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Gianni Porto IntoTheDark allows Reflected XSS.This issue affects IntoTheDark: from n/a through 1.0.5...

WordPress Into The Dark theme <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by justakazh Patchstack Alliance in WordPress Theme IntoTheDark versions = 1.0.5...

PT-2024-6828 · Sap · Sap Shared Service Framework

Name of the Vulnerable Software and Affected Versions: SAP Shared Service Framework affected versions not specified Description: The issue is related to insufficient authorization procedures in the SAP Shared Service Framework, allowing a remote attacker to elevate their privileges. An...

akbr patch-into was discovered to contain a prototype pollution via the function patchInto

akbr patch-into version 1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

GHSA-GH4X-QV3P-M9PM akbr patch-into was discovered to contain a prototype pollution via the function patchInto

akbr patch-into version 1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38991

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

patch-into security holes

patch-into is a library by akbr individual developers. A security vulnerability exists in patch-into version v1.0.1, which originates from the inclusion of prototype contamination via the function patchInto, which allows attackers to execute arbitrary code or cause a denial of service DoS by...

CVE-2024-38991

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

akbr patch-into was discovered to contain a prototype pollution via the function patchInto

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38991

CVE-2024-38991 affects the npm library akbr patch-into, version 1.0.1 . The root cause is a prototype pollution flaw in the function patchInto , which can allow an attacker to inject arbitrary properties. This leads to potential remote arbitrary code execution or Denial of Service (DoS) as descri...

An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into mishandle certain buffer-length checks a random number generator may be seeded with too little data.

...

Cipher.update_into can corrupt memory in pyca cryptography

...

SUSE CVE-2023-52741

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix use-after-free in rdata-readintopages When the network status is unstable, use-after-free may occur when read data from the server. BUG: KASAN: use-after-free in readpagesfillpages+0x14c/0x7e0 Call Trace:...

CVE-2024-5035

creationtimestamp| type| source ---|---|--- 2024-05-28 08:57:30+00:00| published-proof-of-concept| Telegram/CrtkvWmm9Q7zVSud1FLKU-PDNNuRSTl6FkdwQ8YTfCoc6A 2024-05-28 09:01:26+00:00| published-proof-of-concept| Telegram/UVHMifNZAdaoCPDPpgVMFGyVxaemy-c-e78QjGB-LMdrfo 2024-05-28 09:11:39+00:00|...

python-cryptography: memory corruption via immutable objects

A vulnerability was found in python-cryptography. In affected versions, Cipher.updateinto would accept Python objects which implement the buffer protocol but provide only immutable buffers. This issue allows immutable objects such as bytes to be mutated, thus violating the fundamental rules of...

DEBIAN-CVE-2023-52741

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix use-after-free in rdata-readintopages When the network status is unstable, use-after-free may occur when read data from the server. BUG: KASAN: use-after-free in readpagesfillpages+0x14c/0x7e0 Call Trace:...

UBUNTU-CVE-2023-52741

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix use-after-free in rdata-readintopages When the network status is unstable, use-after-free may occur when read data from the server. BUG: KASAN: use-after-free in readpagesfillpages+0x14c/0x7e0 Call Trace:...