CVE Vulnerability Catalog

Version 0.0.171 of the langchain library contains a vulnerability that allows a remote attacker to execute arbitrary code via a JSON file used in load_prompt. This issue is related to __subclasses__ or a template.

Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable.

A stack overflow vulnerability exists in ash.c:6030 in busybox before version 1.35. In the Internet of Vehicles environment, it can be exploited from command execution to arbitrary code execution.

A Use After Free vulnerability was found in the Fedora Linux kernel 5.9.0-rc9 in the vgacon_invert_region() function. It allows attackers to obtain sensitive information from kernel memory.

In curl 7.65.2, an integer overflow occurs in tool_operate.c with a large retry delay value.

A buffer overflow vulnerability was found in ncurses 6.1 in the _nc_find_entry function in tinfo/comp_hash.c:70. A remote attacker can cause a denial of service (DoS) by sending a crafted command.

In ncurses 6.1, a buffer overflow vulnerability in the postprocess_terminfo function in tinfo/parse_entry.c:997 allows a remote attacker to cause a denial of service via a crafted command.

A buffer overflow vulnerability was found in ncurses 6.1 in the fmt_entry function in progs/dump_entry.c:1116. A remote attacker can cause a denial of service (DoS) by sending a crafted command.

A buffer overflow vulnerability was found in ncurses 6.1 in the fmt_entry function in progs/dump_entry.c:1100. A remote attacker can cause a denial of service (DoS) by sending a crafted command.

A buffer overflow vulnerability was detected in ncurses version 6.1 in the _nc_find_entry function in tinfo/comp_hash.c:66. A remote attacker can cause a denial of service via a crafted command.

A buffer overflow vulnerability was found in ncurses 6.1 in the one_one_mapping function in progs/dump_entry.c:1373. A remote attacker can cause a denial of service (DoS) by sending a crafted command.

An issue in TPLink Smart Bulb Tapo series (L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14) allows a remote attacker to obtain sensitive information via the IV component in the AES128-CBC function.

An issue in TPLink Smart Bulb Tapo series (L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application before 2.8.14) allows a remote attacker to obtain sensitive information via the TSKEP authentication function.

An issue in TPLink Smart Bulb Tapo series and Tapo Application allows a remote attacker to obtain sensitive information via the authentication code for the UDP message.

Jenkins Fortify Plugin version 22.1.38 and earlier does not escape the error message for a form validation method, resulting in an HTML injection vulnerability.

A missing permission check in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method.

The Fortify Plugin in Jenkins version 22.1.38 and earlier contains a cross-site request forgery (CSRF) vulnerability that allows attackers to connect to an attacker-specified URL using credentials IDs obtained through another method.

A vulnerability in Microsoft Edge (Chromium-based) allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive user data.

A vulnerability in Microsoft Edge (Chromium-based) allows for elevation of privilege, potentially leading to unauthorized access to the system.

A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in the Linux Kernel, which may lead to a denial of service.