Keystone Engine 资源管理错误漏洞

Keystone Engine is an assembler framework. version 0.9.2 of Keystone Engine has a security vulnerability for which no details of the vulnerability are currently available...

Improper Authorization

Overview smartproxyshellhooks is a Provides easy integration with 3rd parties for Foreman Affected versions of this package are vulnerable to Improper Authorization. The Shellhooks plugin for the smart-proxy allows Foreman clients to execute actions that should be limited to the Foreman Server...

Unspecified Vulnerability in Rust (CNVD-2021-17270)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability existed in Rust prior to version 0.9.2. The vulnerability stems from an issue found in the program basicdspmatrix, which can perform two delete operations. No details of the vulnerabilit...

CVE-2021-25906

An issue was discovered in the basicdspmatrix crate before 0.9.2 for Rust. When a TransformContent panic occurs, a double drop can be performed...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability existed in Rust prior to version 0.9.2. The vulnerability stems from an issue found in the program basicdspmatrix, which can perform two delete operations. No details of the vulnerabilit...

11x-wagtail-blog (>=0.0.0 <=0.2.0), 2u-enterprise-data (=10.22.1) +1319 more potentially affected by CVE-2020-15225 via django-filter (>=0.9.2 <=2.3.0)

django-filter PYPI version =0.9.2, =0.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =1.0.0, =0.0.7, =2025.1.0, =3.0.0.dev0, =4.0.0.dev9 and more Source cves: CVE-2020-15225 Source advisory: OSV:GHSA-X7GM-RFGV-W973...

GNU LibreDWG Multiple Security Vulnerabilities

Description GNU LibreDWG is prone to multiple security vulnerabilities. Attackers can exploit these issues to cause denial-of-service conditions. Due to the nature of these issues, code execution may be possible but this has not been confirmed. Versions prior to GNU LibreDWG 0.9.3 are vulnerable...

FlightCrew Path Traversal Vulnerability

FlightCrew is a C++-based, cross-platform native code epub verifier. A path traversal vulnerability exists in FlightCrew v0.9.2 and prior versions. The vulnerability stems from a failure of a networked system or product to properly filter for special elements in a resource or file path. An attack...

PT-2019-5201 · Flightcrew +1 · Flightcrew +1

Name of the Vulnerable Software and Affected Versions: FlightCrew versions 0.9.2 and older Description: The issue is related to insufficient input validation in the EPUB validator, allowing attackers to write arbitrary files via a ../ dot dot slash in a ZIP archive entry that is mishandled during...

DEBIAN-CVE-2018-11798

The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path...

CVE-2018-1000827

Ubilling version = 0.9.2 contains a Other/Unknown vulnerability in user-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...

GHSA-JXQQ-CQM6-PFQ9 Regular Expression Denial of Service in slug

Affected versions of slug are vulnerable to a regular expression denial of service when parsing untrusted user input. The issue is low severity, as it takes 50,000 characters to cause the event loop to block for 2 seconds, About 50k characters can block the event loop for 2 seconds. Recommendatio...

CVE-2017-16890

SWFTools 0.9.2 has a divide-by-zero error in the wavconvert2mono function in lib/wav.c because the align value may be zero...

CVE-2017-16890

SWFTools 0.9.2 has a divide-by-zero error in the wavconvert2mono function in lib/wav.c because the align value may be zero...

Code injection

SWFTools 0.9.2 has a divide-by-zero error in the wavconvert2mono function in lib/wav.c because the align value may be zero...

CVE-2017-16890

SWFTools 0.9.2 has a divide-by-zero error in the wavconvert2mono function in lib/wav.c because the align value may be zero...

BitThunder Buffer Overflow Vulnerability

BitThunder is a scalable embedded operating system. A buffer overflow vulnerability exists in the dtbreverse.c file in the BitThunder 0.9.2 stable release. A remote attacker could exploit this vulnerability to obtain information...

SWFTools Denial of Service Vulnerability (CNVD-2017-37437)

SWFTools is a utility toolset for working with Adobe Flash files SWF files. A security vulnerability exists in the 'wavconvert2mono' function in the lib/wav.c file in SWFTools version 0.9.2, which stems from the program's failure to properly restrict multiplication in malloc calls. The...

CVE-2017-16868

In SWFTools 0.9.2, the wavconvert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service integer overflow and NULL pointer dereference via a crafted WAV file...

CVE-2017-16797

Affected software: SWFTools 0.9.2. Vulnerable component: png_load in lib/png.c. Root cause: improper validation of an alloclen_64 multiplication of width and height, enabling integer overflow and heap-based buffer overflow on crafted PNGs. Impact per sources: remote denial of service and possible...