25461 matches found
CVE-2024-9129 Format String Injection in Zend Server
In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered. Reported by Dylan Marino...
CVE-2024-9129
CVE-2024-9129 affects Zend Server versions 8.5 and earlier than 9.2. The vulnerability is a format string injection in Zend Server. According to the provided metrics, the CVSS 4.0 base score is 9.3 (CRITICAL) with NETWORK attack vector, no privileges required, no user interaction, and impacts to ...
CVE-2024-9129 Format String Injection in Zend Server
In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered. Reported by Dylan Marino...
PT-2024-39449
Name of the Vulnerable Software and Affected Versions Zend Server versions 8.5 through 9.2 Description A format string injection issue was discovered in Zend Server. This issue was reported by Dylan Marino. Recommendations For versions 8.5 through 9.2, update to a version newer than 9.2 to resolv...
CVE-2024-9129: Use of Externally-Controlled Format String
In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered. Reported by Dylan Marino...
Zend Server formatting string error vulnerability
Zend Server is a complete and certified PHP distribution stack from Zend USA. A security vulnerability exists in Zend Server that stems from the inclusion of a formatting string injection issue...
Debian dla-3933 : dmitry - security update
The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3933 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3933-1 [email protected]...
CVE-2024-49995
A string buffer over-run was found in the Linux kernel. Copying medianame and ifname to nameparts may overwrite the destination, resulting in a software crash. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security...
CVE-2024-49995
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-49995
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-49869
In the Linux kernel, the following vulnerability has been resolved: btrfs: send: fix buffer overflow detection when copying path to cache entry Starting with commit c0247d289e73 "btrfs: send: annotate struct namecacheentry with countedby" we annotated the variable length array "name" from the...
CVE-2024-49995
CVE-2024-49995 affects Linux kernels and is described as a string buffer overrun in the TIPC subsystem. Public advisories (e.g., Siemens/ICS, CISA, and Amazon Linux livepatch notes) identify the issue as resolved by updating to patched kernel versions or applying kernel livepatches (e.g., 4.14.35...
SUSE CVE-2024-49860
In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...
AZL-51017 CVE-2024-49860 affecting package kernel for versions less than 6.6.56.1-5
In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...
CVE-2024-47742
CVE-2024-47742 : Linux kernel firmware_loader path traversal vulnerability. Several code paths construct firmware filenames from device or userspace data (e.g., lpfc_sli4_request_firmware_update, nfp_net_fw_find, module_flash_fw_schedule). The issue arises when dynamic firmware names can include ...
Exploit for Use of Externally-Controlled Format String in Fortinet Fortiproxy
CVE-2024-23113 The script is designed to detect CVE-2024-2311...
cJSON: OOB read in parse_string
Recording https://github.com/DaveGamble/cJSON/issues/800 here for historical purposes...
