Joseph Benden C/C++ Advanced Lint 代码问题漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A code injection vulnerability in Microsoft Visual Studio Code unofficial C/C++ Advanced Lint extension prior to version 1.9.0 can be exploited by an attacker to execute arbitrary binaries when a user opens a carefully...

CVE-2021-28953: Uncontrolled Search Path Element

The unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted repository...

Fedora: Security Advisory for libebml (FEDORA-2021-e283997bb9)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: libebml-1.4.2-1.fc34

Extensible Binary Meta Language access library A library for reading and writing files with the Extensible Binary Meta Language, a binary pendant to XML...

Open-Xchange: Null pointer dereference in lib-sieve after calling sieve_binary_block_index

There are some places that program calls function sievebinaryblockindex without checking the return valuemainly in sieve-binary-dumper.c. Such as: pigeonhole/src/lib-sieve/sieve-binary-dumper.c: bool sievebinarydumperrunstruct sievebinarydumper dumper, struct ostream stream, bool verbose struct...

jackson-dataformats-binary:SmileFuzzer: Uncaught exception in com.fasterxml.jackson.dataformat.smile.SmileParser._finishRawBinary

Project: https://github.com/FasterXML/jackson-dataformats-binary.git Detailed Report: https://oss-fuzz.com/testcase?key=6639800137416704 Project: jackson-dataformats-binary Fuzzing Engine: libFuzzer Fuzz Target: SmileFuzzer Job Type: libfuzzerasanjackson-dataformats-binary Platform Id: linux Cras...

jackson-dataformats-binary:CborFuzzer: Uncaught exception in java.base/java.util.Arrays.copyOf

Project: https://github.com/FasterXML/jackson-dataformats-binary.git Detailed Report: https://oss-fuzz.com/testcase?key=4680561995153408 Project: jackson-dataformats-binary Fuzzing Engine: libFuzzer Fuzz Target: CborFuzzer Job Type: libfuzzerasanjackson-dataformats-binary Platform Id: linux Crash...

CVE-2020-26155: Uncontrolled Search Path Element

Multiple files and folders in Utimaco SecurityServer 4.20.0.4 and 4.31.1.0. are installed with Read/Write permissions for authenticated users, which allows for binaries to be manipulated by non-administrator users. Additionally, entries are made to the PATH environment variable which, in...

PT-2021-11215

Name of the Vulnerable Software and Affected Versions: Utimaco SecurityServer versions 4.20.0.4 through 4.31.1.0 Description: The issue allows for binaries to be manipulated by non-administrator users due to weak Read/Write permissions for authenticated users on multiple files and folders...

Java Detection and Identification (Linux / Unix)

Binary data javajreinstalledunix.nbin...

The vulnerability of the installer for the Intel Binary Configuration Tool, which allows a hacker to enhance their privileges

The vulnerability of the Intel Binary Configuration Tool’s configuration modification utility is related to incorrect handling of the search path. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Extreme PDF Editor has a binary vulnerability

Extreme PDF Editor is a PDF editor. Extreme PDF Editor has a binary vulnerability that can be exploited by attackers to cause a denial of service attack...

Binary vulnerability in Extreme PDF Editor (CNVD-2021-23576)

Extreme PDF Editor is a PDF editor. Extreme PDF Editor has a binary vulnerability that can be exploited by attackers to cause a denial of service attack...

Binary vulnerability in CAJViewer reader (CNVD-2021-22905)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. A binary vulnerability exists in CAJViewer reader, which can be exploited by attackers to cause a denial of service attack...

Binary vulnerability in CAJViewer reader (CNVD-2021-22904)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. A binary vulnerability exists in CAJViewer reader, which can be exploited by attackers to cause a denial of service attack...

Binary vulnerability in CAJViewer reader (CNVD-2021-22901)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. A binary vulnerability exists in CAJViewer reader, which can be exploited by attackers to cause a denial of service attack...

Binary vulnerability in CAJViewer reader (CNVD-2021-22902)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. A binary vulnerability exists in CAJViewer reader, which can be exploited by attackers to cause a denial of service attack...

Binary vulnerability in CAJViewer reader (CNVD-2021-22903)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. A binary vulnerability exists in CAJViewer reader, which can be exploited by attackers to cause a denial of service attack...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2021-1646)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

A flaw was found in the Go encoding/binary package. Certain invalid inputs to the ReadUvarint or the ReadVarint causes those functions to read an unlimited number of bytes from the ByteReader argument before returning an error. This flaw possibly leads to processing more input than expected. The...