3032 matches found
CVE-2023-50711
vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper can lea...
UBUNTU-CVE-2023-50711
vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper can lea...
CVE-2023-50711
vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper can lea...
CVE-2023-50711 `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access
vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper can lea...
CVE-2023-50711 `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access
vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper can lea...
CVE-2023-50711 `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access
vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper can lea...
CVE-2023-50711
CVE-2023-50711 affects the vmm-sys-util crate (FamStructWrapper::deserialize) used by Rust-VMM components. The issue is a mismatch between the header-stored length and the flexible-array length during deserialization, enabling potential out-of-bounds memory access through Rust-safe code. It was f...
CVE-2023-50711
vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper can lea...
dbs-address-space (>=0.1.0, <=0.3.0), dbs-arch (>=0.1.0, <=0.2.3) +24 more potentially affected by CVE-2023-50711 via vmm-sys-util (>=0.7.0, <=0.11.2)
vmm-sys-util CARGO version =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =1.5.0, =0.1.0, =0.9.3, =0.3.1, =0.6.1, =0.1.1, =0.3.1 - sev 0.1.0 and more Source cves: CVE-2023-50711 Source advisory: OSV:GHSA-875G-MFP6-G7F9...
dbs-address-space (>=0.1.0, <=0.3.0), dbs-arch (>=0.1.0, <=0.2.3) +24 more potentially affected by CVE-2023-50711 via vmm-sys-util (>=0.7.0, <=0.11.2)
vmm-sys-util CARGO version =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =1.5.0, =0.1.0, =0.9.3, =0.3.1, =0.6.1, =0.1.1, =0.3.1 - sev 0.1.0 and more Source cves: CVE-2023-50711 Source advisory: OSV:RUSTSEC-2024-0002...
SQL Injection
jeecg-boot is vulnerable to SQL Injection. The vulnerability is due to improper input validation within the /sys/replicate/check component. This could allow an attacker to inject malicious input leading to SQL Injection...
CVE-2023-50711: Out-of-bounds Write
vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper can lea...
PT-2024-2723
Name of the Vulnerable Software and Affected Versions vmm-sys-util versions 0.5.0 through 0.12.0 Description The issue is related to the FamStructWrapper::deserialize implementation, which can lead to out of bounds memory accesses due to a mismatch between the length stored in the header and the...
CVE-2023-41543
SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check...
CVE-2023-41543
SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check...
jeecg security breach
jeecg is a software application. An intelligent development platform based on a code generator. A security vulnerability exists in jeecg-boot 3.5.3 and earlier versions, which stems from a SQL injection vulnerability in component /sys/replicate/check...
CVE-2023-41543: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check...
CVE-2023-41543
SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check...
CVE-2023-41543
The set of connected documents confirms a SQL injection vulnerability in jeecg-boot, affecting version 3.5.3, exploitable via the /sys/replicate/check component. Root cause cited is improper input handling leading to SQL injection, enabling remote attackers to escalate privileges and access sensi...
PT-2023-27968
Name of the Vulnerable Software and Affected Versions jeecg-boot version 3.5.3 Description The issue allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check. This is a SQL injection vulnerability, which means that an attacker can inje...