21404 matches found
HUAWEI HarmonyOS 格式化字符串错误漏洞
HUAWEI HarmonyOS is an operating system from Huawei, China HUAWEI. HUAWEI HarmonyOS 2.0 is vulnerable to a formatting string error that can be exploited by attackers to cause usability impairments...
[SECURITY] Fedora 36 Update: qt5-qtbase-5.15.3-2.fc36
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
CVE-2022-32200
libdwarf 0.4.0 has a heap-based buffer over-read in dwarfcheckstringvalid in dwarfutil.c...
UBUNTU-CVE-2022-32200
libdwarf 0.4.0 has a heap-based buffer over-read in dwarfcheckstringvalid in dwarfutil.c...
DEBIAN-CVE-2022-1215
A format string vulnerability was found in libinput...
AZL-9861 CVE-2022-1215 affecting package libinput for versions less than 1.21.0-1
A format string vulnerability was found in libinput...
CVE-2022-1215
A format string vulnerability was found in libinput...
CVE-2022-1215
A format string vulnerability was found in libinput...
Format string
A format string vulnerability was found in libinput...
Fixed CVE-2021-33582 in cyrus-imapd
CVE-2021-33582: Fix a bad string hashing algorithm which could lead to collisions and cause a CPU denial of service...
CLSA-2022-1654107183 Fixed CVE-2021-33582 in cyrus-imapd
CVE-2021-33582: Fix a bad string hashing algorithm which could lead to collisions and cause a CPU denial of service...
GtkRadiant 1.6.6 Buffer Overflow
===== Intro ===== GtkRadiant is a cross-platform level editor software for idtech game engines such as Quake. It comes with data authoring tools and a BSP map compiler called q3map2 which parses MAP files. The code has been around for a long time and uses unsafe string copy and format functions. ...
CVE-2022-1215
A format string vulnerability was found in libinput...
CVE-2022-1215
A format string vulnerability was found in libinput...
CVE-2022-1215
A format string vulnerability was found in libinput...
CVE-2022-1215
CVE-2022-1215 concerns a format string vulnerability in the libinput library. Across connected vendors, the issue affects libinput components and is mitigated by upgrading to patched releases (e.g., libinput 1.19.4 and related downstream builds such as 1.19.4-alt1). The root cause is a format str...
PT-2022-3370 · D Link · D-Link Dir-645
Name of the Vulnerable Software and Affected Versions: D-Link DIR-645 version 1.03 Description: The issue is related to a command injection vulnerability in the ajax explorer.sgi file of the D-Link DIR-645 router's firmware. This vulnerability arises from the failure to neutralize special element...
Ubuntu 16.04 ESM : ncurses vulnerabilities (USN-5448-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5448-1 advisory. It was discovered that ncurses was not properly checking array bounds when executing the fmtentry function, which could result in an out-of-bounds write...
CVE-2021-42860
A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buffer-overflow in mxmlstringgetc:2611. NOTE: it is unclear whether this input is allowed by the API specification...