3358 matches found
CVE-2021-23402: Improperly Controlled Modification of Object Prototype Attributes
All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality...
CVE-2021-34187
main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter...
CVE-2021-34187: Improper Neutralization of Special Elements used in an SQL Command
main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter...
CVE-2021-23396
All versions of package lutils are vulnerable to Prototype Pollution via the main merge function...
PT-2021-15489 · Lutils · Lutils
Name of the Vulnerable Software and Affected Versions: lutils versions prior to a fixed version Description: The issue concerns Prototype Pollution via the main merge function. This allows for potential manipulation of the prototype, which can lead to various security issues. Recommendations: For...
CVE-2021-27887: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS vulnerability in the main dashboard of Ellipse APM versions allows an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim’s browser. This issue affects: Hitachi ABB Power Grids Ellipse APM 5.3...
CVE-2021-26197
An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...
UBUNTU-CVE-2021-26197
An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...
Design/Logic Flaw
An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...
CVE-2021-26197
An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...
CVE-2021-26197
An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...
CVE-2021-26197
An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...
CVE-2021-26197
An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...
CVE-2021-26197
Removed by vendor...
CVE-2021-26197: Improper Check for Unusual or Exceptional Conditions
An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...
JerryScript 代码问题漏洞
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in JerryScript 2.4.0, which originates from a SEGV in mainprintunhandledexception in the main-utils.c file.No detailed vulnerability details are available at this time...
The vulnerability of the main() function in the Exim message forwarding agent lies in the fact that it allows writing beyond the buffer boundaries in memory. This enables a hacker to increase their privileges within the system and execute arbitrary code.
The vulnerability of the main function in the Exim message forwarding agent is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges within the system and execute arbitrary code...
Important: Red Hat Security Advisory: glib2 security update
An update for glib2 is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact...
DEBIAN-CVE-2021-3548
A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy inside the main function. This possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution...
CVE-2021-3548
A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy inside the main function. This possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution...