8716 matches found
CVE-2022-33094
74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/job/map...
PT-2022-21685
Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1 Description A SQL injection issue was found in 74cmsSE via the keyword parameter at the "/home/job/map" API endpoint. This allows for potential SQL injection attacks. Recommendations For 74cmsSE version 3.5.1, consider...
Malicious code in ucs-map (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d5592ffb464b4e507aff7a98cbf774a4200f3adbc52563909384a63ada6c58e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6733 Malicious code in ucs-map (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d5592ffb464b4e507aff7a98cbf774a4200f3adbc52563909384a63ada6c58e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1286 Malicious code in azure-arm-servicemap-samples-ts-beta (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 879b0fdb17c1119e579e5f7d71290575b29a45995616e170b1d21d8d316d5b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2022:2065-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2065-1 advisory. - IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs;...
Kity Minder 代码问题漏洞
Baidu Kity Minder Baidu Brain Map is a handy thinking tool from Baidu, a Chinese company. A security vulnerability exists in Kity Minder v1.3.5, which was discovered via a server-side request forgery SSRF vulnerability in the init function in ImageCapture.class.php...
OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...
OSV-2022-457 Heap-buffer-overflow in CFF::Charset::collect_glyph_to_sid_map
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47790 Crash type: Heap-buffer-overflow READ 2 Crash state: CFF::Charset::collectglyphtosidmap cffsubsetplan::plansubsetcharset cffsubsetplan::create...
PT-2022-37022
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the CFF::Charset::collect glyph to sid map function, c...
GtkRadiant 1.6.6 Buffer Overflow Exploit
===== Intro ===== GtkRadiant is a cross-platform level editor software for idtech game engines such as Quake. It comes with data authoring tools and a BSP map compiler called q3map2 which parses MAP files. The code has been around for a long time and uses unsafe string copy and format functions. ...
GtkRadiant 1.6.6 Buffer Overflow
===== Intro ===== GtkRadiant is a cross-platform level editor software for idtech game engines such as Quake. It comes with data authoring tools and a BSP map compiler called q3map2 which parses MAP files. The code has been around for a long time and uses unsafe string copy and format functions. ...
VulnCheck KEV: CVE-2021-41277
Metabase contains a local file inclusion vulnerability in the custom map support in the API to read GeoJSON formatted data...
PT-2022-37005
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Stack-use-after-return READ 4. The crash state involves several functions, including conversation match...
Juniper Junos OS DoS (JSA11247)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11247 advisory. An Incorrect Behavior Order vulnerability in the MAP-E automatic tunneling mechanism of Juniper Networks Junos OS allows an attacker to send certain malformed IPv4 or IPv6...
GHSA-9PQX-G3JH-QPQQ Dangling reference in `access::Map` with Constant
An issue has been discovered in the arc-swap crate before 0.4.8 and 1.x before 1.1.0 for Rust. Use of arcswap::access::Map with the Constant test helper or with a user-supplied implementation of the Access trait could sometimes lead to dangling references being returned by the map...
OSV-2022-425 Heap-use-after-free in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47533 Crash type: Heap-use-after-free READ 1 Crash state: std::1::treenodebase& std::1::treestd::1::valuetypestd: std::1::pairstd::1::treeiteratorstd::1::valuetypestd::1::basic...
CVE-2019-17534
vipsforeignloadgifscanimage in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free...
CVE-2021-43518
Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate mChannels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of service or code...
CVE-2018-18541
In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download...