GitLab Enterprise Edition 跨站请求伪造漏洞

GitLab Enterprise Edition EE is a content management system from GitLab Corporation. A cross-site request forgery vulnerability exists in GitLab Enterprise Edition, which allows an attacker to force a user with an active SAML session to approve MR via CSRF.The affected versions are as follows: 16...

PT-2024-31862 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 16.7 through 16.9.6 GitLab EE versions 16.10 through 16.10.4 GitLab EE versions 16.11 through 16.11.1 Description: An issue has been discovered in GitLab EE, where an attacker could force a user with an active SAML session ...

PT-2024-40770 · Git +1 · Trafficserver

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value". The crash state includes functions such as ink filepath merge, layout relative, and...

crmeb 安全漏洞

Zhongbang CRMEB is an open source e-commerce management system from Zhongbang Networks Zhongbang in Xi'an, China. A security vulnerability exists in crmebjava v1.3.4, which was discovered via the mergeList method of the com.zbkj.front.pub.ImageMergeController class to contain a server-side reques...

CVE-2024-23912

Out-of-bounds Read vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MCOpenFile function is used to read a malformed DICOM data, it might result in over-reading memory buffer and could cause memory access violation...

CVE-2024-23914

Use of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MCOpenAssociation function is used to open DICOM Association and gets DICOM Application Context Name with illegal characters, it might result in an unhandled exception...

CVE-2024-23914

The CVE-2024-23914 entry concerns an externally-controlled format string vulnerability in Merative Merge DICOM Toolkit C/C++ on Windows. The flaw arises when MC_Open_Association() processes a DICOM Application Context Name containing illegal characters, potentially triggering an unhandled excepti...

CVE-2024-23914

Use of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MCOpenAssociation function is used to open DICOM Association and gets DICOM Application Context Name with illegal characters, it might result in an unhandled exception...

CVE-2024-23913

CVE-2024-23913 affects Merative Merge DICOM Toolkit C/C++ on Windows. Root cause: out-of-range pointer offset in the deprecated MC_XML_To_Message() when reading malformed DICOM XML, leading to a memory access violation (reported as a DoS-like condition). Affected versions: v5.6.0 through v5.17.0....

CVE-2024-23913

Use of Out-of-range Pointer Offset vulnerability in Merge DICOM Toolkit C/C++ on Windows. When deprecated MCXMLToMessage function is used to read a malformed DICOM XML file, it might result in memory access violation...

CVE-2024-23913

Use of Out-of-range Pointer Offset vulnerability in Merge DICOM Toolkit C/C++ on Windows. When deprecated MCXMLToMessage function is used to read a malformed DICOM XML file, it might result in memory access violation...

CVE-2024-23912

The CVE-2024-23912 entry affects Merative Merge DICOM Toolkit C/C++ on Windows. The root cause is an out-of-bounds read when MC_Open_File() processes malformed DICOM data, potentially causing memory over-reading and a memory access violation. Public disclosures in multiple sources confirm the vul...

CVE-2024-23912

Out-of-bounds Read vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MCOpenFile function is used to read a malformed DICOM data, it might result in over-reading memory buffer and could cause memory access violation...

CVE-2024-23912

Out-of-bounds Read vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MCOpenFile function is used to read a malformed DICOM data, it might result in over-reading memory buffer and could cause memory access violation...

Merative Merge DICOM Toolkit 安全漏洞

Merative Merge DICOM Toolkit is a comprehensive API from Merative that complies with the latest DICOM standards. A security vulnerability exists in Merative Merge DICOM Toolkit C/C++ versions prior to 5.18.0 that stems from the presence of an out-of-bounds read vulnerability...

PT-2024-20171 · Merge · Merge Dicom Toolkit C/C++

Name of the Vulnerable Software and Affected Versions: Merge DICOM Toolkit C/C++ versions ≤5.17.0 Description: The issue is related to the use of an externally-controlled format string vulnerability in the Merge DICOM Toolkit C/C++ on Windows. When the MC Open Association function is used to open...

PT-2024-20169 · Unknown · Merge Dicom Toolkit C/C++

Name of the Vulnerable Software and Affected Versions: Merge DICOM Toolkit C/C++ affected versions not specified Description: The issue is related to an out-of-bounds read when the MC Open File function is used to read malformed DICOM data, potentially resulting in over-reading of the memory buff...

Merative Merge DICOM Toolkit 安全漏洞

The Merative Merge DICOM Toolkit is a comprehensive API from Merative that complies with the latest DICOM standards. A security vulnerability exists in Merative Merge DICOM Toolkit C/C++ versions v5.6.0 through v.5.17.0, which stems from an unhandled exception that can be caused when using the...

PT-2024-20170 · Unknown · Merge Dicom Toolkit C/C++

Name of the Vulnerable Software and Affected Versions: Merge DICOM Toolkit C/C++ affected versions not specified Description: The issue arises from the use of a deprecated function, MC XML To Message, which can lead to memory access violations when processing malformed DICOM XML files. This occur...

glibc: potential use-after-free in gaih_inet()

A flaw has been identified in glibc. In an uncommon situation, the gaihinet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with...