CVE-2022-33185. Several commands in Brocade Fabric OS use unsafe string function to process user input

Several commands in Brocade Fabric OS before Brocade Fabric OS v.9.0.1e, v9.1.0 use unsafe string functions to process user input. Authenticated local attackers could abuse these vulnerabilities to exploit stack-based buffer overflows, allowing arbitrary code execution as the root user account...

PT-2022-25023 · Pspp +1 · Pspp +1

Name of the Vulnerable Software and Affected Versions: PSPP version 1.6.2 Description: An issue was discovered that allows attackers to cause a denial of service or possibly have other unspecified impacts due to a heap-based buffer overflow at the read string function in utilities/pspp-dump-sav.c...

The vulnerability in the implementation of the DM_Fillobjbystr() function in TP-Link Wi-Fi router software, TL-WR902AC, allows a hacker to execute arbitrary code.

The vulnerability of the DMFillobjbystr function implementation in TP-Link Wi-Fi router software like TL-WR902AC lies in the fact that data is written beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2021-46527

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsgetcstring at src/mjsstring.c...

CVE-2021-27790

The command ipfilter in Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3, and v8.2.0CBN4, and v7.4.2h uses unsafe string function to process user input. Authenticated attackers can abuse this vulnerability to exploit stack-based buffer overflows, allowing execution of arbitrary code as...

CVE-2021-27790

The issue (CVE-2021-27790) affects Brocade Fabric OS and centers on the ipfilter command. The vulnerability arises from the use of an unsafe string function to process user input, enabling stack-based buffer overflows. Exploitation requires authentication and leads to the possibility of arbitrary...

GHSA-F98M-Q3HR-P5WQ Prototype Pollution in locutus

All versions of package locutus prior to version 2.0.12 are vulnerable to Prototype Pollution via the php.strings.parsestr function...

CVE-2020-36317

In the standard library in Rust before 1.49.0, String::retain function has a panic safety problem. It allows creation of a non-UTF-8 Rust string when the provided closure panics. This bug could result in a memory safety violation when other string APIs assume that UTF-8 encoding is used on the sa...

CVE-2020-36317

In the standard library in Rust before 1.49.0, String::retain function has a panic safety problem. It allows creation of a non-UTF-8 Rust string when the provided closure panics. This bug could result in a memory safety violation when other string APIs assume that UTF-8 encoding is used on the sa...

glibc security update

2.28-72.0.1 - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug: 2700101. - Modify glibc-ora28849085.patch so it works with RHCK kernels. - Orabug: 28849085. - Make IOfunlockfile match funlockfile and...

The vulnerability of the `from_string` function in the Jinja2 templater, which allows an attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the fromstring function in the Jinja2 templater for the Python programming language is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

Multiple Point-by-Point Vulnerabilities in UltraVNC

UltraVNC is an open source remote terminal control software for the Windows platform. A security vulnerability exists in the VNC client code in UltraVNC version 1206, which stems from the program incorrectly using the 'ClientConnection::ReadString' function. An attacker could exploit the...

PT-2019-1631 · Pallets +3 · Jinja2 +3

Name of the Vulnerable Software and Affected Versions: Jinja2 version 2.10 Description: An issue was discovered in the from string function of Jinja2, which is prone to Server Side Template Injection SSTI. The function takes the source parameter as a template object, renders it, and then returns...

Event Manager Admin panel - events_new.php SQL injection

Event Manager Admin panel - eventsnew.php SQL injection Exploit Title: Event Manager PHP Script Admin panel - 'eventsnew.php' SQL injection Date: 2018-06-10 Exploit Author: telahdihapus Vendor Homepage: https://codecanyon.net/user/ezcode Software Link:...

CVE-2018-1000101

Mingw-w64 version 5.0.3 and earlier, 5.0.4, 6.0.0 and 7.0.0 contains an Improper Null Termination CWE-170 vulnerability in mingw-w64-crt libc-vsnprintf that can result in The bug may be used to corrupt subsequent string functions. This attack appear to be exploitable via Depending on the usage,...

liblouis: Buffer overflow in the function _lou_showString()

There is a buffer overflow in Liblouis 3.2.0, triggered in the function loushowString in utils.c, that will lead to a remote denial of service attack...

ncurses denial of service vulnerability (CNVD-2017-25655)

ncurses new curses is a library of programs that provides APIs that allow programmers to write text-based user interfaces that are independent of the terminal. A denial of service vulnerability exists in the ncsavestr function in allocentry.c in Ncurses, which can be exploited by a remote attacke...

DEBIAN-CVE-2017-13743

There is a buffer overflow in Liblouis 3.2.0, triggered in the function loushowString in utils.c, that will lead to a remote denial of service attack...

Ruby: Heap corruption in string.c tr_trans() due to undersized buffer

originally send by e-mail on 6 Jun 2016 Configure with ASAN AddressSanitizer: mkdir install; CFLAGS="-fsanitize=address" ./configure --disable-install-doc --disable-install-rdoc --disable-install-capi -prefix=realpath ./install && make -j4 && make install Then execute: $ ./ruby -e...

Vulnerabilities in the PHP interpreter and the Mac OS X operating system, which allow attackers to trigger service failures or execute arbitrary code.

The multiple vulnerabilities of the mbflstrcut function ext/mbstring/libmbfl/mbfl/mbfilter.c in the PHP interpreter and the Mac OS X operating system are caused by a numerical overflow. Exploitation of these vulnerabilities could allow an attacker to cause a service failure application terminatio...