CVE-2021-46503

Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x8664-linux-gnu/libasan.so.4+0x79732. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46503

CVE-2021-46503 affects Jsish v3.5.0 and is described as a heap-use-after-free vulnerability that can cause a Denial of Service (DoS). The issue is reported in the context of Jsish’s C implementation; no exploit details or attack vectors are provided in the linked documents. Connected sources cons...

CVE-2021-46487

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via /lib/x8664-linux-gnu/libc.so.6+0x18e506. This vulnerability can lead to a Denial of Service DoS...

PT-2022-12782

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A SEGV issue was found in Cesanta MJS, which can cause a Denial of Service DoS. The issue is related to the "/lib/x86 64-linux-gnu/libc.so.6+0x45a1f" endpoint. Recommendations For version 2.20.0, at the...

PT-2022-12733

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description The issue is related to a SEGV vulnerability that can be triggered via the /lib/x86 64-linux-gnu/libc.so.6+0x18e506 endpoint, potentially leading to a Denial of Service DoS. Recommendations For Jsish version...

PT-2022-12788

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability that can be triggered via /lib/x86 64-linux-gnu/libc.so.6+0x4b44b, leading to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, at the...

PT-2022-12747

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap-use-after-free issue was discovered, which can lead to a Denial of Service DoS. The issue is related to the API endpoint, however no specific endpoint is mentioned, but it involves the library /usr/lib/x8...

PT-2022-12748

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap-use-after-free issue was discovered in Jsish, which can lead to a Denial of Service DoS. The issue is related to the /usr/lib/x86 64-linux-gnu/libasan.so.4+0x79732 endpoint. Recommendations For Jsish...

CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

CVE-2022-23935: Improper Neutralization of Special Elements used in an OS Command

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection...

CVE-2021-24906

The Protect WP Admin WordPress plugin before 3.6.2 does not check for authorisation in the lib/pwa-deactivate.php file, which could allow unauthenticated users to disable the plugin and therefore the protection offered via a crafted request...

CVE-2021-26706

An issue was discovered in libmem.c in Micrium uC/OS uC/LIB 1.38.x and 1.39.00. The following memory allocation functions do not check for integer overflow when allocating a pool whose size exceeds the address space: MemPoolCreate, MemDynPoolCreate, and MemDynPoolCreateHW. Because these functions...

CVE-2021-26706

An issue was discovered in libmem.c in Micrium uC/OS uC/LIB 1.38.x and 1.39.00. The following memory allocation functions do not check for integer overflow when allocating a pool whose size exceeds the address space: MemPoolCreate, MemDynPoolCreate, and MemDynPoolCreateHW. Because these functions...

CVE-2021-26706: Integer Overflow or Wraparound

An issue was discovered in libmem.c in Micrium uC/OS uC/LIB 1.38.x and 1.39.00. The following memory allocation functions do not check for integer overflow when allocating a pool whose size exceeds the address space: MemPoolCreate, MemDynPoolCreate, and MemDynPoolCreateHW. Because these functions...

CVE-2021-24906: Missing Authorization

The Protect WP Admin WordPress plugin before 3.6.2 does not check for authorisation in the lib/pwa-deactivate.php file, which could allow unauthenticated users to disable the plugin and therefore the protection offered via a crafted request...

PT-2022-9788

Name of the Vulnerable Software and Affected Versions Micrium uC/OS uC/LIB versions 1.38.x through 1.39.00 Description An issue was discovered in the memory allocation functions Mem PoolCreate, Mem DynPoolCreate, and Mem DynPoolCreateHW in lib mem.c. These functions do not check for integer...

PT-2022-7175

Name of the Vulnerable Software and Affected Versions SysAid versions prior to 22.1.64 SysAid versions prior to 22.2.20 Description The issue is related to an incorrect restriction of a directory path with limited access in the /lib/tinymce/examples/index.html component of the SysAid software. Th...

GHSA-GP6J-VX54-5PMF Incorrect validation of parties IDs leaks secret keys in Secret-sharing scheme

Summary In the threshold signature scheme, participants start by dividing secrets into shares using a secret sharing scheme. The Verifiable Secret Sharing scheme generates shares from the user’s IDs but does not properly validate them. Using a malicious ID will make other users reveal their secre...

Malicious code in lib-bb-html-sanitizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 74072bddc9908e0147976fde0680c197ac5b38167bfcdf14afc5f79f23749f72 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

ROS-2-2201

2.2201 Denial of Service in libX11CVE-2021-31535 1. Vulnerability Description: The vulnerability allows a local user to execute a denial of service DoS attack. The vulnerability exists due to insufficient validation of color names in the XLookupColor function. A local user can launch a specially...