105 matches found
AZL-8411 CVE-2021-46667 affecting package mariadb for versions less than 10.6.7-1
MariaDB before 10.6.5 has a sqllex.cc integer overflow, leading to an application crash...
ALPINE-CVE-2021-46659
MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...
CVE-2021-46168
Spin v6.5.1 was discovered to contain an out-of-bounds write in lex at spinlex.c...
CVE-2021-46168
Spin v6.5.1 was discovered to contain an out-of-bounds write in lex at spinlex.c...
CVE-2021-46168
Spin v6.5.1 was discovered to contain an out-of-bounds write in lex at spinlex.c...
UBUNTU-CVE-2021-46168
Spin v6.5.1 was discovered to contain an out-of-bounds write in lex at spinlex.c...
CVE-2021-46168
CVE-2021-46168 affects Spin v6.5.1, where an out-of-bounds write is triggered in the lex() function (spinlex.c). The vulnerability is evidenced across multiple sources (e.g., NVD, Red Hat, OSV, CVE records) with CVSS metrics indicating Moderate to High impact on availability locally, and no confi...
CVE-2021-46168
Spin v6.5.1 was discovered to contain an out-of-bounds write in lex at spinlex.c...
Spin缓冲区错误漏洞
Spin is an open source software verification tool . It is used for explicit state logic model checking. A security vulnerability exists in Spin that stems from an out-of-bounds write found to be included in spinlex.c's lex...
Lex Li vscode-restructuredtext access control error vulnerability
Lex Li vscode-restructuredtext is a Lex Li open source application. This extension provides rich reStructuredText language support for Visual Studio Code.An access control error vulnerability exists in versions prior to Lex Li vscode-restructuredtext 146.0.0, which stems from the inclusion of an...
ALPINE-CVE-2020-24240
GNU Bison before 3.7.1 has a use-after-free in obstackfree in lib/obstack.c called from gramlex when a '\0' byte is encountered. NOTE: there is a risk only if Bison is used with untrusted input, and the observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug...
OSV-2020-734 Heap-buffer-overflow in Sass::Prelexer::quoted_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15890 Crash type: Heap-buffer-overflow READ 1 Crash state: Sass::Prelexer::quotedstring char const Sass::Parser::lex& Sass::Parser::parsevalueschema...
OSV-2020-685 Global-buffer-overflow in backup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18464 Crash type: Global-buffer-overflow READ 1 Crash state: backup peek lexconfig...
OSV-2020-279 Global-buffer-overflow in lex_multiline_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18562 Crash type: Global-buffer-overflow READ 3 Crash state: lexmultilinestring lexnext parsekeyvalue...
lex-connect.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1065879 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting lex-connect.net website an...
Honeywell MIDAS-E-LEX Gas Detector Detection
Binary data 762171.prm...
eur-lex.europa.eu XSS vulnerability
Open Bug Bounty ID: OBB-644746 Description| Value ---|--- Affected Website:| eur-lex.europa.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
LibSass 'lex' Function Denial of Service Vulnerability
LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the 'lex' function of the parser.hpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability to cause a denial of service stack consumption with the help of...