PT-2021-27865

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow READ 2. The crash state involves several functions: fr unix time from tm, fr unix...

PT-2021-27860

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a global buffer overflow read. The crash involves the functions fr base16 decode nstd, fr value box from str, and...

PT-2021-27842

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a global buffer overflow read. The crash involves several functions, including fr base16 decode nstd, fr value bo...

PT-2021-27755

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a global buffer overflow read. The crash involves the functions fr is base16 nstd, fr base16 decode nstd, and f...

Protect

A debug functionality in FortiGate may allow a privileged user to execute unauthorized code or commands via specific chains of print str and cmd mem cli commands to, respectively, read and write hexadecimal values to any memory address...

CVE-2021-39378

A SQL Injection vulnerability exists in openSIS 8.0 when MySQL MariaDB is being used as the application database. A malicious attacker can issue SQL commands to the MySQL MariaDB database through the NamesList.php str parameter...

CVE-2021-39378: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in openSIS 8.0 when MySQL MariaDB is being used as the application database. A malicious attacker can issue SQL commands to the MySQL MariaDB database through the NamesList.php str parameter...

PT-2021-4494

Name of the Vulnerable Software and Affected Versions openSIS version 8.0 Description A SQL Injection issue exists, allowing a malicious attacker to issue SQL commands to the database through the str parameter in NamesList.php. This is due to a lack of protection for the SQL query structure,...

PT-2021-21247

Name of the Vulnerable Software and Affected Versions Care2x Hospital Information Management version 2.7 Alpha Description A stored cross-site scripting XSS issue has been identified. The vulnerability is found in POST requests to the "/modules/registration admission/patient register.php" page,...

Exploit for SQL Injection in Os4Ed Opensis

OPENSIS 8.0 SQL INJECTION VULNERABILITY CVE-2021-39378 A SQL...

[SECURITY] Fedora 34 Update: rust-unicode-truncate-0.2.0-2.fc34

Unicode-aware algorithm to pad or truncate str in terms of displayed width...

PT-2021-27693

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including mrb check frozen, mrb str modify keep...

PT-2021-6856

Name of the Vulnerable Software and Affected Versions FortiOS versions 6.4.x through 6.4.6 FortiOS versions 7.x through 7.0.0 Description The issue is related to a hidden functionality in Fortinet FortiOS that allows an attacker to execute unauthorized code or commands. This can be achieved via...

PT-2021-28300

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a negative-size-param, which occurs in the mrb str format function, called by mrb f sprintf and mrb vm exec...

PT-2021-28275

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 1 crash has been reported. The crash involves the mrb format float, fmt float, and mrb str format functions. No information ...

PT-2021-7864

Name of the Vulnerable Software and Affected Versions ezXML version 0.8.6 Description The issue is related to incorrect memory handling by the ezxml parse str function when parsing crafted XML files, which can lead to writing outside a memory region created by mmap. Additionally, the vulnerabilit...

PT-2021-7865

Name of the Vulnerable Software and Affected Versions ezXML version 0.8.6 Description The issue is related to the ezxml parse str function in the ezXML library, which performs incorrect memory handling while parsing crafted XML files, leading to an out-of-bounds read after a certain strcspn...

CVE-2021-26955

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::GetAtomNameReply::name calls std::str::fromutf8unchecked on unvalidated bytes from an X server...

CVE-2021-26955: Unchecked Return Value

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::GetAtomNameReply::name calls std::str::fromutf8unchecked on unvalidated bytes from an X server...

PT-2021-27486

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves functions such as json string unescape, ofputil table from...