21354 matches found
CVE-2020-36619 multimon-ng demod_flex.c add_ch format string
A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function addch of the file demodflex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is...
PT-2022-9015 · Unknown +2 · Multimon-Ng +2
Name of the Vulnerable Software and Affected Versions: multimon-ng versions prior to 1.2.0 Description: A critical issue affects the function add ch of the file demod flex.c. The manipulation of the argument ch leads to a format string issue. Recommendations: For versions prior to 1.2.0, upgrade ...
CVE-2020-36619
CVE-2020-36619 affects multimon-ng, specifically the function add_ch in demod_flex.c. The issue arises from manipulating the argument ch, which leads to a format string vulnerability. The exploitation impact is described as high across confidentiality, integrity, and availability, with a base sco...
CVE-2020-36619 multimon-ng demod_flex.c add_ch format string
A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function addch of the file demodflex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is...
CVE-2021-4259 phpRedisAdmin login.inc.php authHttpDigest wrong operator in string comparison
A vulnerability was found in phpRedisAdmin up to 1.16.1. It has been classified as problematic. This affects the function authHttpDigest of the file includes/login.inc.php. The manipulation of the argument response leads to use of wrong operator in string comparison. Upgrading to version 1.16.2 i...
phpRedisAdmin 安全漏洞
phpRedisAdmin is a web administration page for managing Redis for individual developers. A security vulnerability exists in phpRedisAdmin 1.17.3 and earlier, which stems from an issue with the authHttpDigest function in the file includes/login.inc.php, where manipulation of the parameter response...
multimon-ng 格式化字符串错误漏洞
multimon-ng is a library from the personal developer Elias Önal. It can decode various digital transmission modes commonly found on VHF/UHF radios. A format string error vulnerability exists in multimon-ng, which stems from a problem with the function addch in the file demodflex.c, where...
CVE-2020-36619
A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function addch of the file demodflex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is...
AZL-11654 CVE-2022-23524 affecting package helm for versions less than 3.10.3-1
Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to Uncontrolled Resource Consumption, resulting in Denial of Service. Input to functions in the strvals package can cause a stack overflow. In Go, a stack overflow cannot be recovered fro...
nodejs: Certificate Verification Bypass via String Injection
It was found that node.js did not safely read the x509 certificate generalName format properly, resulting in data injection. A certificate could use a specially crafted extension in order to be successfully validated, permitting an attacker to impersonate a trusted host...
Helm vulnerable to denial of service through string value parsing
Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the strvals package that can cause a stack overflow. In Go, a stack overflow cannot be recovered from. Applications that use functions from the strvals package in the Helm SDK can have a Denial of Service atta...
GO-2022-1167 Denial of service in string value parsing in helm.sh/helm/v3
Applications that use the strvals package in the Helm SDK to parse user supplied input can suffer a Denial of Service when that input causes an error that cannot be recovered from. The strvals package contains a parser that turns strings into Go structures. For example, the Helm client has comman...
CVE-2022-23516 Uncontrolled Recursion in Loofah
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah = 2.2.0, 2.19.1 uses recursion for sanitizing CDATA sections, making it susceptible to stack exhaustion and raising a SystemStackError exception. This may lead to a...
CVE-2022-23516 Uncontrolled Recursion in Loofah
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah = 2.2.0, 2.19.1 uses recursion for sanitizing CDATA sections, making it susceptible to stack exhaustion and raising a SystemStackError exception. This may lead to a...
Denial Of Service (DoS)
org.codehaus.jettison:jettison is vulnerable to Denial Of Service DoS. A remote attacker is able to cause a stack overflow via injecting a crafted string through the map parameter, resulting in denial of service...
Uncontrolled Recursion in Loofah
Summary Loofah = 2.2.0, = 2.19.1. Users who are unable to upgrade may be able to mitigate this vulnerability by limiting the length of the strings that are sanitized. Severity The Loofah maintainers have evaluated this as High Severity 7.5 CVSS3.1. References - CWE - CWE-674: Uncontrolled Recursi...
GHSA-GRR4-WV38-F68W Jettison Out-of-bounds Write vulnerability
Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...
CVE-2022-45693
Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...
AeroCMS SQL注入漏洞
AeroCMS is a content management system from the American company AeroCMS. AeroCMS version v0.0.1 suffers from a SQL injection vulnerability that stems from the vulnerability of the Approve parameter of the CMS system to SQL injection attacks. An attacker can exploit this vulnerability by insertin...