CVE-2020-29018

A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the content of memory and retrieve sensitive data via the redir parameter...

OSV-2018-138 Heap-buffer-overflow in parse_odp_key_mask_attr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11160 Crash type: Heap-buffer-overflow READ 1 Crash state: parseodpkeymaskattr odpflowfromstring parsekeys...

OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-02805)

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.3 and earlier versions. The vulnerability can be exploited by an attacker to conduct a cross-site...

CVE-2021-23928

OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string...

Design/Logic Flaw

OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string...

CVE-2021-23928

OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string...

CVE-2020-26992

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing CGM files. This could lead to a stack based buffer overflow while trying to copy to a buffer during fon...

Stack overflow

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing CGM files. This could lead to a stack based buffer overflow while trying to copy to a buffer during fon...

IBM MQ 8.0 <= 8.0.0.10 / 9.0.1 <= 9.0.5 CD / 9.0 <= 9.0.0.5 LTS / 9.1 <= 9.1.0.0 LTS (734297)

The version of IBM MQ Server running on the remote host is affected by a vulnerability. IBM WebSphere MQ 8.0 through 9.1 is vulnerable to a error with MQTT topic string publishing that can cause a denial of service attack. IBM X-Force ID: 145456. Note that Nessus has not tested for this issue but...

UBUNTU-CVE-2021-20177

A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user with root or CAPNETADMIN when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected...

CVE-2021-20177

A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user with root or CAPNETADMIN when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel that allows an attacker to trigger a denial of service by triggering a fatal error via the Linux kernel's Iptables String...

Input validation

In onCreate of SlicePermissionActivity.java, there is a possible misleading string displayed due to improper input validation. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: Android; Versions: Android-10,...

CVE-2021-20177

A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user with root or CAPNETADMIN when inserting iptables rules could insert a rule which can panic the system. Mitigation Mitigation for this issue is either not available or the currently availabl...

Regular Expression Denial Of Service (ReDoS)

semver-regex is vulnerable to regular expression denial of service. An attacker is able to crash the application by submitting a malicious string as a version number...

OPENSUSE-SU-2021:0027-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2017-17784: Fixed an insufficient string validation for input names bsc1073624. - CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import bsc1073625. - CVE-2017-17786: Fixed an out-of-bounds read in TGA bsc1073626. This update was...

gitea -- multiple vulnerabilities

The Gitea Team reports for release 1.13.2: Prevent panic on fuzzer provided string Add secure/httpOnly attributes to the lang cookie...

Security update for gimp (moderate)

openSUSE Security Update: Security update for gimp Announcement ID: openSUSE-SU-2021:0027-1 Rating: moderate References: 1073624 1073625 1073626 Cross-References: CVE-2017-17784 CVE-2017-17785 CVE-2017-17786 Affected Products: openSUSE Leap 15.1 An update that fixes three vulnerabilities is now...

SDWAN Center : (CVE-1999-0517)SNMP Agent's Default Community string (PUBLIC) and SNMP 'GETBULK' Reflection DDoS

Vulnerability issue...

Fortinet FortiWeb 格式化字符串错误漏洞

FortiWeb is a Web Application Firewall WAF that protects hosted web applications from attacks targeting known and unknown vulnerabilities. A format string vulnerability exists in FortiWeb 6.3.0 - 6.3.5. A remote attacker can exploit this vulnerability to read the contents of memory and retrieve...