4179 matches found
UBUNTU-CVE-2016-20015
In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for the smokeping user to gain root privileges. There is a race condition involving /var/lib/smokeping and chown...
CVE-2022-35196: Cross-Site Request Forgery (CSRF)
TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery CSRF via /lib/plan/planView.php...
CVE-2022-40008: Out-of-bounds Write
SWFTools commit 772e55a was discovered to contain a heap-buffer overflow via the function readU8 at /lib/ttf.c...
CVE-2022-40009: Use After Free
SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function growunicode at /lib/ttf.c...
CVE-2022-35195: Undefined Security Weakness
TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php...
CVE-2022-38301
Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib...
CVE-2022-38301
Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib...
Theonedev Onedev 路径遍历漏洞
Theonedev Onedev is a JAVA-based all-in-one DevOps platform from the Theonedev team. The platform supports container build, orchestration, CI, Git management, team collaboration and other features to help developers build a simple, powerful development platform. Theonedev A path traversal...
CVE-2022-38301: Improper Limitation of a Pathname to a Restricted Directory
Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib...
PT-2022-24351 · Onedev · Onedev
Name of the Vulnerable Software and Affected Versions: Onedev version 7.4.14 Description: The issue allows attackers to access restricted files and directories by uploading a crafted JAR file into the "/opt/onedev/lib" directory, which is a path traversal vulnerability. Recommendations: For Onede...
Malicious code in builtin-pages-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3be644f30528e61fadc22a9526bbd5dc5460dedd27a297fe25b70ede89657a38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1724 Malicious code in builtin-pages-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3be644f30528e61fadc22a9526bbd5dc5460dedd27a297fe25b70ede89657a38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2022-23649 · Samsung · Libsdkrecognitiontext.Spensdk.Samsung.So
Name of the Vulnerable Software and Affected Versions: libSDKRecognitionText.spensdk.samsung.so versions prior to SMR Sep-2022 Release 1 Description: A heap-based overflow issue in the MHW RECOG LIB INFO function allows an attacker to cause a memory access fault. Recommendations: For versions pri...
Malicious Package
Overview ing-lib-payments-utilities is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...
CVE-2022-25310
A segmentation fault SEGV flaw was found in the Fribidi package and affects the fribidiremovebidimarks function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service...
CVE-2022-25310: Improper Restriction of Operations within the Bounds of a Memory Buffer
A segmentation fault SEGV flaw was found in the Fribidi package and affects the fribidiremovebidimarks function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service...
CVE-2022-35015
Advancecomp v2.3 was discovered to contain a heap buffer overflow via leuint32read at /lib/endianrw.h...
Heap overflow
Advancecomp v2.3 was discovered to contain a heap buffer overflow via leuint32read at /lib/endianrw.h...