libnmap 参数注入漏洞

libnmap is a python toolkit for operating nmap, a network probing and security scanning program. A parameter injection vulnerability exists in libnmap version 0.7.2 and earlier versions, which stems from the ability to execute remote commands...

Nginx denial-of-service vulnerability

A denial of service vulnerability exists in Nginx NJS version 0.7.2, which stems from the njsvmcodearray component in /src/njsvmcode.c containing a NULL pointer dereference. An attacker could exploit this vulnerability to cause the program to crash...

Null pointer dereference

NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njsvmcodearray at /src/njsvmcode.c...

CVE-2022-27007

nginx njs 0.7.2 is affected suffers from Use-after-free in njsfunctionframealloc when it try to invoke from a restored frame saved with njsfunctionframesave...

Nginx 安全漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from the US-based Nginx Corporation. A security vulnerability exists in Nginx njs version 0.7.2, which stems from a type obfuscated in Array.Prototype.Concat is susceptible to a buffer overflow when attaching ...

RUSTSEC-2022-0047 Post-Quantum Signature scheme Rainbow level I parametersets broken

Ward Beullens found a practical key-recovery attack against Rainbow. The level I parametersets are removed from liboqs starting from version 0.7.2. Find the scientific details in Breaking Rainbow Takes a Weekend on a Laptop. This means all the oqs::sig::Algorithm::RainbowI variants are insecure...

PT-2022-2375 · Nginx · Nginx Njs

Name of the Vulnerable Software and Affected Versions: nginx njs version 0.7.2 Description: The issue is related to a Buffer Overflow in the Array.prototype.concat function of the njs interpreter in the nginx server. This occurs when a slow array appended element is a fast array, leading to a typ...

PT-2022-2376 · Nginx · Nginx Njs

Name of the Vulnerable Software and Affected Versions: nginx njs version 0.7.2 Description: The issue is related to a Use-after-free in the njs function frame alloc function when it tries to invoke from a restored frame saved with njs function frame save. This can allow a remote attacker to impac...

GHSA-H2X7-2FF6-V32P gobase subject to Incorrect routing of some HTTP requests when using httpauth due to a race condition

Impact Incorrect routing of some HTTP requests when using httpauth due to a race condition Patches Upgrade to version 0.7.2 for fix Workarounds None For more information If you have any questions or comments about this advisory: Email us at [email protected]...

gobase subject to Incorrect routing of some HTTP requests when using httpauth due to a race condition

Impact Incorrect routing of some HTTP requests when using httpauth due to a race condition Patches Upgrade to version 0.7.2 for fix Workarounds None For more information If you have any questions or comments about this advisory: Email us at [email protected]...

The `total_size` function for partial read the length of any `FixVec` is incorrect in molecule.

Anyone who uses totalsize.. function to partial read the length of any FixVec will get an incorrect result, due to an incorrect implementation. This has been resolved in the 0.7.2 release...

GHSA-6P3C-V8VC-C244 The `total_size` function for partial read the length of any `FixVec` is incorrect in molecule.

Anyone who uses totalsize.. function to partial read the length of any FixVec will get an incorrect result, due to an incorrect implementation. This has been resolved in the 0.7.2 release...

CVE-2021-45697

An issue was discovered in the molecule crate before 0.7.2 for Rust. A FixVec partial read has an incorrect result...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation.A security vulnerability exists in versions of Mozilla Rust molecule crate prior to 0.7.2, which stems from incorrect results read by FixVec. No details of the vulnerability are currently available...

CVE-2021-41054 affecting package atftp 0.7.2-3

CVE-2021-41054 affecting package atftp 0.7.2-3. An upgraded version of the package is available that resolves this issue...

Tremor 资源管理错误漏洞

Tremor is an open source event processing system for unstructured data. A resource management error vulnerability exists in Tremor Tremor-runtime, which arises when the product causes access to freed memory when using patch or merge on a state and assigning the result back to the state state. The...

CVE-2021-40532

Telegram Web K Alpha before 0.7.2 mishandles the characters in a document extension...

Telegram 安全漏洞

Telegram is an instant messaging mobile application. A security vulnerability exists in Telegram Web K Alpha prior to version 0.7.2, which stems from the program incorrectly handling characters in document extensions...

Partial read is incorrect in molecule

Impact Anyone who uses totalsize.. function to partial read the length of any FixVec will get an incorrect result, due to an incorrect implementation. This has been resolved in the 0.7.2 release. Workarounds If you already have the whole FixVec A, you can use A.asslice.len to get the total size o...

GHSA-82HM-VH7G-HRH9 Partial read is incorrect in molecule

Impact Anyone who uses totalsize.. function to partial read the length of any FixVec will get an incorrect result, due to an incorrect implementation. This has been resolved in the 0.7.2 release. Workarounds If you already have the whole FixVec A, you can use A.asslice.len to get the total size o...