365 matches found
implicit underflows
Handle gpersoon Vulnerability details Impact There are a few underflows that are converted via a typecast afterwards to the expected value. If solidity 0.8.x would be used, then the code would revert. int256a-b where a and b are uint, For example if a=1 and b=2 then the intermediate result would ...
GHSA-27PV-Q55R-222G Path traversal in github.com/ipfs/go-ipfs
Impact It is currently possible for path traversal to occur with DAGs containing relative paths during retrieval. This can cause files to be overwritten, or written to incorrect output directories. The issue can only occur when ipfs get is done on an affected DAG. 1. The only affected command is...
OESA-2021-1232 avahi security update
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared...
Design/Logic Flaw
A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the clientwork function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is...
UBUNTU-CVE-2021-3468
A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the clientwork function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is...
avahi 安全漏洞
Avahi is a suite of local service discovery tools for Linux. A security vulnerability exists in avahi 0.8-5 that allows local attackers to crash avahi services by requesting hostname resolution via an avahi socket or dbus method...
libmspack security update
0.5-0.8.alpha - Fix for CVE-2019-1010305 resolves: rhbz1736744...
PT-2020-16075 · Mike Rooijackers · Recall Products
Name of the Vulnerable Software and Affected Versions: Wordpress Plugin Store / Mike Rooijackers Recall Products version 0.8 Description: The issue allows for Cross Site Scripting XSS via the 'Recall Settings' field in admin.php. An attacker can inject JavaScript code that will be stored and...
Code injection
MSA/SMTP.cpp in Trojita before 0.8 ignores certificate-verification errors, which allows man-in-the-middle attackers to spoof SMTP servers...
CVE-2020-15047
CVE-2020-15047 affects Trojitá (MSA/SMTP.cpp) prior to 0.8, where TLS certificate verification errors were ignored, enabling MITM-style spoofing of SMTP servers. Connected sources confirm the root cause (omitted verification on TLS) and reference a security fix in Trojitá updates (e.g., Mageia MG...
CVE-2020-12135
bson before 0.8 incorrectly uses int rather than sizet for many variables, parameters, and return values. In particular, the bsonensurespace parameter bytesNeeded could have an integer overflow via properly constructed bson input...
PT-2019-16116 · Gpac +1 · Gpac +1
Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 0.9.0-development-20191109 Description: An issue was discovered in the function GF IPMPX AUTH Delete in odf/ipmpx code.c, which contains an invalid pointer dereference. Recommendations: For GPAC version 0.8.0, upda...
GNU LibreDWG Multiple Security Vulnerabilities
Description GNU LibreDWG is prone to multiple security vulnerabilities. Attackers can exploit these issues to cause denial-of-service conditions. Due to the nature of these issues, code execution may be possible but this has not been confirmed. Versions prior to GNU LibreDWG 0.9.3 are vulnerable...
DEBIAN-CVE-2019-20063
hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json...
UBUNTU-CVE-2019-20063
hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json...
Repetier-Server Code Issue Vulnerability
Repetier-Server is a 3D printer control application. A code issue vulnerability exists in the RepetierServer.exe file in Repetier-Server versions 0.8 through 0.91, which can be exploited by an attacker to remotely execute code...
Postenum - A Clean, Nice And Easy Tool For Basic/Advanced Privilege Escalation Techniques
Postenum is a clean, nice and easy tool for basic/advanced privilege escalation vectors/techniques. Postenum tool is intended to be executed locally on a Linux box. Be more than a normal user. be the ROOT. USE ./postenum.sh option ./postenum.sh -s ./postenum.sh -c Options : -a : All -s : Filesyst...
keycloak-httpd-client-install: unsafe use of -p/--admin-password on command line
In keycloak-http-client-install prior to version 0.8, the admin password could be provided through a command-line argument. This might result in the password being leaked through shell history, or becoming visible to a local attacker at the time the program is running...
CVE-2018-1000622
The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the...
