8 matches found
Security update for vifm (important)
openSUSE Security Update: Security update for vifm Announcement ID: openSUSE-SU-2026:0276-1 Rating: important References: 1273413 Cross-References: CVE-2026-8997 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This update for...
OPENSUSE-SU-2026:10928-1 vifm-0.14.4-1.1 on GA media
These are all security issues fixed in the vifm-0.14.4-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-29022 mackron / dr_libs dr_wav.h Heap Buffer Overflow via WAV File
drlibs drwav.h version 0.14.4 and earlier fixed in commit 8a7258c contain a heap buffer overflow vulnerability in the drwavreadsmpltometadataobj function of drwav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 a...
dr_libs 缓冲区错误漏洞
drlibs is an audio decoding library developed by David Reid as a personal project in C/C++. Versions of drlibs prior to 0.14.4 contain a buffer error vulnerability. This vulnerability stems from a heap buffer overflow in the drwavreadsmpltometadataobj function, which may lead to memory corruption...
PT-2023-24760 · Weave · Weave Gitops Terraform Controller
Name of the Vulnerable Software and Affected Versions: Weave GitOps Terraform Controller versions prior to v0.14.4 Weave GitOps Terraform Controller versions prior to v0.15.0-rc.5 Description: A vulnerability has been identified in Weave GitOps Terraform Controller which could allow an...
WebP Express <= 0.14.4 - Authenticated Stored XSS
Edit - WPScanTeam: The reported issue has been fixed in 0.14.5. Other sanitisation checks have been implemented in newest versions such as 0.14.6 and 0.14.8 while the plugin was closed, so the fixed in is set to 0.14.8 Video POC :...
Fedora 14 : poppler-0.14.4-1.fc14 (2010-15857)
Bug 595245 - CVE-2010-3702 xpdf: uninitialized Gfx::parser pointer dereference - Bug 638960 - CVE-2010-3704 xpdf: array indexing error in FoFiType1::parse - Bug 639356 - CVE-2010-3703 poppler: use of initialized pointer in PostScriptFunction Note that Tenable Network Security has extracted the...