Sensitive Information Exposure

io.netty.incubator is vulnerable to sensitive information exposure. The vulnerability is due to private key bytes being included in string representations and exception messages, which allows an attacker with access to application logs to obtain exposed private key material and potentially use it...

EUVD-2023-29118

Malicious code in bioql PyPI...

[SECURITY] Fedora 41 Update: rust-tinystr-0.7.6-4.fc41

A small ASCII-only bounded length string representation...

[SECURITY] Fedora 42 Update: rust-tinystr-0.7.6-4.fc42

A small ASCII-only bounded length string representation...

Missing permission check in miniorange-saml-sp

miniorange-saml-sp 2.3.0 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to download a string representation of the current security realm Java ObjecttoString, which potentially includes sensitive information...

CVE-2023-25139

sprintf in the GNU C Library glibc 2.37 has a buffer overflow out-of-bounds write in some situations with a correct buffer size. This is unrelated to CWE-676. It may write beyond the bounds of the destination buffer when attempting to write a padded, thousands-separated string representation of a...