skia:api_null_canvas: Heap-buffer-overflow in SkPath::Iter::next

Detailed Report: https://oss-fuzz.com/testcase?key=5212484751720448 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apinullcanvas Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60f000028230 Crash State: SkPath::Iter::next...

Medtronic NGP 600 Series 安全漏洞

The Medtronic NGP 600 Series is a line of insulin pumps and accessories from Medtronic, Inc. A security vulnerability exists in Medtronic NGP 600 Series version 2.4, which originates from the exploitation of wireless signals that require proximity to the patient and the device. The following...

Intel NUC M15 缓冲区错误漏洞

Intel NUC M15 is a laptop kit from Intel Corporation USA. A security vulnerability exists in previous versions of the Intel NUC M15 Laptop Kit BC0076, which stems from an elevation of privilege, executing arbitrary code in System Management Mode, and running arbitrary code in SMM will also bypass...

CVE-2022-38890

Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njsutf8next at src/njsutf8.h...

CVE-2022-29649

Qsmart Next v4.1.2 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-29649

Qsmart Next v4.1.2 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-29649

Qsmart Next v4.1.2 was discovered to contain a cross-site scripting XSS vulnerability...

Cross site scripting

Qsmart Next v4.1.2 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-29649

Qsmart Next v4.1.2 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-29649

CVE-2022-29649 affects Qsmart Next version 4.1.2 with a cross-site scripting (XSS) vulnerability. The NVD entry lists CVSS‑3.1: base 6.1 (NETWORK, LOW attack complexity, NONE privileges, UI REQUIRED, CHANGED scope; confidentiality/integrity LOW, availability NONE). Exploitation details are not pr...

Nginx 缓冲区错误漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx, Inc. in the United States. njs is one of the scripting language components that supports extended NGINX functionality. A security vulnerability exists in Nginx NJS version v0.7.7, which stems from ...

PT-2022-24613 · Nginx · Nginx Njs

Name of the Vulnerable Software and Affected Versions: Nginx NJS version 0.7.7 Description: A segmentation violation was discovered in Nginx NJS via the njs utf8 next function at src/njs utf8.h. Recommendations: For Nginx NJS version 0.7.7, at the moment, there is no information about a newer...

PT-2022-19753 · Unknown · Qsmart Next

Name of the Vulnerable Software and Affected Versions: Qsmart Next version 4.1.2 Description: A cross-site scripting XSS issue was discovered. This issue allows attackers to inject malicious scripts into websites, potentially leading to unauthorized access or control. Recommendations: For Qsmart...

Qsmart Next 跨站脚本漏洞

Qsmart Next is a free smartphone application from Qsmart Inc. A security vulnerability exists in Qsmart Next version v4.1.2, which can be exploited by an attacker to inject malicious scripts into other benign and trusted websites...

CVE-2022-29649: Improper Neutralization of Input During Web Page Generation

Qsmart Next v4.1.2 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2022-39814

In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter...

CVE-2022-39814

In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter...

CVE-2022-39814: URL Redirection to Untrusted Site

In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter...

CVE-2022-25295

This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parser.FormValue"next" to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple...

PT-2022-17191 · Gophish · Gophish

Name of the Vulnerable Software and Affected Versions: gophish versions prior to 0.12.0 Description: The issue exists in the next query parameter, where the application uses url.Parser.FormValue"next" to extract the path and redirect the user to a relative URL. However, if the next parameter star...