Linux Distros Unpatched Vulnerability : CVE-2017-17524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - library/wwwbrowser.pl in SWI-Prolog 7.2.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allo...

CVE-2022-43343

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...

prolog-emploi.ch Cross Site Scripting vulnerability OBB-4036427

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Linux Distros Unpatched Vulnerability : CVE-2012-6089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to...

Linux Distros Unpatched Vulnerability : CVE-2012-6090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple stack-based buffer overflows in the expand function in os/pl-glob.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a...

RHEL 6 : pl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - David Koblas' GIF decoder LZW decoder buffer overflow CVE-2011-2896 - pl: buffer overflows in path...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Slurm vulnerabilities (USN-4781-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4781-1 advisory. It was discovered that Slurm incorrectly handled certain messages between the daemon and the user. An attacker could possibly use...

SUSE CVE-2010-0542

The WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service NULL pointer dereference or heap memory corruption or possibly execute arbitrar...

SUSE CVE-2016-10030

The prologerror function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 has a vulnerability in how the slurmd daemon informs users of a Prolog failure on a compute node. That vulnerability could allow a user to assume control of an arbitrary file on th...

SUSE CVE-2017-15566

Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege escalation to root during Prolog or Epilog execution...

SUSE CVE-2017-17524

library/wwwbrowser.pl in SWI-Prolog 7.2.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...

Exploit for Classic Buffer Overflow in N-Prolog_Project N-Prolog

Description for CVE-2022-43343 N-Prolog v1.91 was discovered...

Ubuntu 16.04 ESM : Slurm vulnerabilities (USN-4781-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4781-2 advisory. USN-4781-1 fixed several vulnerabilities in Slurm. This update provides the corresponding updates for Ubuntu 14.04 ESM CVE-2016-10030 and Ubuntu 16.04 ES...

CVE-2022-43343

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...

CVE-2022-43343

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...

Buffer overflow

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...

CVE-2022-43343

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...

CVE-2022-43343

CVE-2022-43343 concerns N-Prolog v1.91, where a global buffer overflow is reported in the function gettoken() at Main.c. The vulnerability is documented with a faulty write into a global buffer, as demonstrated by an AddressSanitizer report pointing to parser.c:1022 and noting proximity to global...

N-Prolog 安全漏洞

N-Prolog is an Arity/Prolog32-compatible interpreter and compiler from the individual developer kenichi sasagawa. A security vulnerability exists in N-Prolog v1.91, which stems from the inclusion of a global buffer overflow in the function gettoken in Main.c. The vulnerability is caused by the...

CVE-2022-43343

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...