CVE-2023-3013 Unchecked Return Value in gpac/gpac

Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2...

GPAC 安全漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC versions prior to 2.2.2, which stems from unchecked return values...

CVE-2023-3013

Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-3013 Unchecked Return Value in gpac/gpac

Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-3013

Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2...

The vulnerability of the microprogrammed software of Zyxel ATP network devices, such as USG FLEX, USG FLEX50(W), USG20(W)-VPN, VPN, ZyWALL/USG, arises from copying buffers without checking the size of the input data. This allows a malicious actor to execute arbitrary code or cause service failures.

The vulnerability of microprogrammed network devices such as Zyxel ATP, USG FLEX, USG FLEX50W, USG20W-VPN, VPN, ZyWALL/USG lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service...

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches allows a perpetrator to execute arbitrary code.

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially...

WordPress Plugin Groundhogg 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Upgraded Q -> 2 from #467 [1684434787599]

Judge has assessed an item in Issue 467 as 2 risk. The relevant finding follows: L-03 Anyone can memorialize other users' position if the owner approves PositionManager There isn't a check to ensure that the caller is the actual owner of the position, so anyone can memorialize a position if the...

The vulnerability of the microprogramming software of Zyxel NBG-418N switches lies in the copying of buffers without checking the size of the input data, allowing a hacker to trigger a service failure.

The vulnerability of the microprogramming software of Zyxel NBG6604 lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

[M-1] Potential DoS attack due to unchecked array lengths in loop

Lines of code Vulnerability details M-1 Potential DoS attack due to unchecked array lengths in loop Impact If strategies and shares have different lengths and the code uses them in a loop without checking their lengths, it could potentially cause an out-of-bounds error, which could lead to a...

jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

A flaw was found in FasterXML jackson-databind. This issue could allow an attacker to benefit from resource exhaustion when the UNWRAPSINGLEVALUEARRAYS feature is enabled due to unchecked primitive value deserializers to avoid deep wrapper array nesting...

The vulnerability of the LightNVM subsystem in the Linux operating system allows a hacker to increase their privileges and execute arbitrary code.

The vulnerability of the LightNVM subsystem in the Linux operating system is related to the lack of checks on the size of data received from the user during copying of these data into the kernel’s memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute...

VulnCheck KEV: CVE-2021-33035

Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checked: the data is just copied into local variables. A carefully crafted document could overflow...

A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not checked properly before transferring into the device. This flaw allows a local user to crash the system or potentially cause a denial of service.

...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : ZenLib vulnerability (USN-6048-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6048-1 advisory. It was discovered that ZenLib doesn't check the return value of a specific operation before using it. An attacker could use a specially...

Return values of ERC20 transfer and transferFrom are unchecked

Lines of code https://github.com/code-423n4/2023-04-frankencoin/blob/main/contracts/StablecoinBridge...

Memory corruption

Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information...

CVE-2020-9009

The ShipStation.com plugin 1.1 and earlier for CS-Cart allows remote attackers to insert arbitrary information into the database via action=shipnotify because access to this endpoint is completely unchecked. The attacker must guess an order number...

PT-2023-11951 · Shipstation.Com · Shipstation.Com Plugin

Name of the Vulnerable Software and Affected Versions: ShipStation.com plugin versions 1.1 and earlier for CS-Cart Description: The issue allows remote attackers to insert arbitrary information into the database via the "action=shipnotify" endpoint because access to this endpoint is completely...