CVE-2017-20160

A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. The manipulation leads to improper handling of extra parameters. It is possible to initiate the attack remotely. Upgrading to version 1.0.0...

PT-2022-8025 · Unknown · Express-Param

Name of the Vulnerable Software and Affected Versions: flitto express-param versions up to 0.x Description: A critical issue affects an unknown part of the file lib/fetchParams.js, leading to improper handling of extra parameters. The manipulation can be initiated remotely. Upgrading to version...

CVE-2017-20160: Improper Handling of Extra Parameters

A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. The manipulation leads to improper handling of extra parameters. It is possible to initiate the attack remotely. Upgrading to version 1.0.0...

clamav:clamav_dbload_CDB_fuzzer: Memcpy-param-overlap in repeat

Detailed Report: https://oss-fuzz.com/testcase?key=5081390165393408 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x7f6dffcfd6a8,0x7f6e081b33a0 and 0x7f6df78479b8,...

kernel: LSM: general protection fault in legacy_parse_param

In the Linux kernel, the following vulnerability has been resolved: LSM: general protection fault in legacyparseparam The usual LSM hook "bail on fail" scheme doesn't work for cases where a security module may return an error code indicating that it does not recognize an input. In this particular...

mruby:mruby_fuzzer: Negative-size-param in mrb_str_format

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5435851484299264 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyfuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: mrbstrforma...

PT-2022-36753 · Git +1 · Opensis

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is reported, with a crash type indicating a heap-buffer-overflow READ 1. The crash state involves functions such as par...

CVE-2022-32574

A double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to memory corruption. An attacker can make an authenticated HTTP request to trigger this...

DEBIAN-CVE-2022-3625

A vulnerability was found in Linux Kernel. It has been classified as critical. This affects the function devlinkparamset/devlinkparamget of the file net/core/devlink.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The...

CVE-2022-3625

A vulnerability was found in Linux Kernel. It has been classified as critical. This affects the function devlinkparamset/devlinkparamget of the file net/core/devlink.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The...

CVE-2022-42488

OpenHarmony-v3.1.2 and prior versions have a Missing permission validation vulnerability in param service of startup subsystem. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services...

CVE-2022-42488

OpenHarmony-v3.1.2 and prior versions have a Missing permission validation vulnerability in param service of startup subsystem. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services...

Input validation

OpenHarmony-v3.1.2 and prior versions have a Missing permission validation vulnerability in param service of startup subsystem. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services...

CVE-2022-42488

OpenHarmony CVE-2022-42488 affects OpenHarmony versions 3.1.2 and earlier. The root cause is missing permission validation in the param service of the startup subsystem, which could let a malicious app elevate privileges to root, disable security features, or cause denial of service by stopping s...

CVE-2022-42488: Improper Authentication

OpenHarmony-v3.1.2 and prior versions have a Missing permission validation vulnerability in param service of startup subsystem. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Memcpy-param-overlap in tsk_fs_load_file_action

Detailed Report: https://oss-fuzz.com/testcase?key=5736382060691456 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsntfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x000000000000,0xffffffff00000080 and 0x621000003d00,...

qemu:qemu-fuzz-i386-target-generic-fuzz-rtl8139: Memcpy-param-overlap in libslirp.so.0

Detailed Report: https://oss-fuzz.com/testcase?key=5522678815784960 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-rtl8139 Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x61c0000018c0,0x61c0000018f1 and...

krb5:Fuzz_chpw: Memcpy-param-overlap in uccanoncompatdecomp

Project: https://github.com/krb5/krb5.git Detailed Report: https://oss-fuzz.com/testcase?key=4623222116581376 Project: krb5 Fuzzing Engine: libFuzzer Fuzz Target: Fuzzchpw Job Type: libfuzzerasankrb5 Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x603000000438,0x603000000440...

CVE-2022-2025

an attacker with knowledge of user/pass of Grandstream GSD3710 in its 1.0.11.13 version, could overflow the stack since it doesn't check the param length before use the strcopy instruction. The explotation of this vulnerability may lead an attacker to execute a shell with full access...

CVE-2022-2070

In Grandstream GSD3710 in its 1.0.11.13 version, it's possible to overflow the stack since it doesn't check the param length before using the sscanf instruction. Because of that, an attacker could create a socket and connect with a remote IP:port by opening a shell and getting full access to the...