PT-2022-5313

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A critical issue affects the function devlink param set/devlink param get of the file net/core/devlink.c in the IPsec component, leading to use after free. This could allow an attacker t...

PT-2025-53932

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel’s crypto/hisi zip module related to a mismatch when getting or setting the sgl sge nr variable. The type of sgl sge nr is u16, but it was being access...

PT-2022-37095

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description A crash was reported due to a Memcpy-param-overlap issue. The crash state includes repeat, p ere, and p ere. No information is available about the estimated number of potentially affected...

clamav:clamav_dbload_CDB_fuzzer: Memcpy-param-overlap in repeat

Detailed Report: https://oss-fuzz.com/testcase?key=5215880983740416 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x7f6a7f6658b0,0x7f6a7fdacf58 and 0x7f6a7ef1e210,...

libbpf:bpf-object-fuzzer: Memcpy-param-overlap in bpf_object__add_programs

Detailed Report: https://oss-fuzz.com/testcase?key=5040003935240192 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasani386libbpf Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x6b2ff800,0xf32ff800 and 0x6e903940, 0xf6903940 Crash...

OSV-2022-538 Memcpy-param-overlap in FT_Stream_TryRead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48749 Crash type: Memcpy-param-overlap Crash state: FTStreamTryRead bdfloadfont BDFFaceInit...

PT-2022-37072

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type known as Memcpy-param-overlap. The crash occurs in the following functions: FT Stream TryRead, bdf load font, and BDF...

ghostscript:gs_device_pxlmono_fuzzer: Memcpy-param-overlap in FT_Stream_TryRead

Detailed Report: https://oss-fuzz.com/testcase?key=6297116250603520 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepxlmonofuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x6310000f2a78,0x6310000f2e78 and...

CVE-2022-32036

Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and trademark parameters in the function formSetStoreWeb...

PT-2022-10331

Name of the Vulnerable Software and Affected Versions Zephyr versions = v1.14 Description The issue is related to a reachable assertion with repeated LL CONNECTION PARAM REQ, which is classified as a Reachable Assertion CWE-617. This occurs when the LL CONNECTION PARAM REQ is repeated, leading to...

CVE-2022-32377

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getexamtimetable.php?id=...

CVE-2022-33174

Power Distribution Units running on Powertek firmware multiple brands before 3.30.30 allows remote authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an emp...

PT-2022-21724 · Unknown +1 · Power Distribution Units +1

Name of the Vulnerable Software and Affected Versions: Power Distribution Units running on Powertek firmware versions prior to 3.30.30 Description: The issue concerns an insecure permissions setting on the user.token field, which is accessible through the "/cgi/get param.cgi" HTTP API endpoint...

PT-2022-19795

Name of the Vulnerable Software and Affected Versions LibreNMS version 22.3.0 Description The issue is related to multiple command injection vulnerabilities. These vulnerabilities can be exploited via the service ip, hostname, and service param parameters. Recommendations For LibreNMS version...

libigl:igl_fuzzer: Negative-size-param with empty stacktrace

Project: https://github.com/libigl/libigl.git Detailed Report: https://oss-fuzz.com/testcase?key=5814270684692480 Project: libigl Fuzzing Engine: libFuzzer Fuzz Target: iglfuzzer Job Type: libfuzzerasanlibigl Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: NULL...

PT-2022-37001

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type known as Memcpy-param-overlap. The crash state involves several functions, including repeat, p ere, and cli regcomp...

clamav:clamav_dbload_CDB_fuzzer: Memcpy-param-overlap in repeat

Detailed Report: https://oss-fuzz.com/testcase?key=5694385326522368 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x7f709f9d35c8,0x7f709fcb0ce0 and 0x7f709f6f5eb8,...

CVE-2021-41739

A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000. Attackers can execute OS commands in cyrus.events.php with GET param logs and POST param rp...

Command injection

A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000. Attackers can execute OS commands in cyrus.events.php with GET param logs and POST param rp...

PT-2022-30498

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.4.189 Description A general protection fault issue exists in the legacy parse param function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...