4 matches found
CVE-2024-52533
A buffer overflow vulnerability exists in GNOME GLib (specifically in gio/gsocks4aproxy.c) prior to version 2.82.1 . The root cause is an off-by-one error where SOCKS4_CONN_MSG_LEN is insufficient to account for a trailing null character. This flaw can lead to a buffer overflow during processing....
CVE-2021-37598
WP Cerber before 8.9.3 allows bypass of /wp-json access control via a trailing ? character...
Heap overflow
The converttodecimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing...
CVE-2006-3652: Undefined Security Weakness
Microsoft Internet Security and Acceleration ISA Server 2004 allows remote attackers to bypass file extension filters via a request with a trailing "" character. NOTE: as of 20060715, this could not be reproduced by third parties...