Lucene search
K

8 matches found

Snyk
Snyk
added 2026/04/17 10:20 p.m.1 views

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass via the service invocation access control process. An attacker can bypass access control policies and invoke unauthorized methods by submitting specially crafted method paths containing encoded path traversal...

8.6CVSS5.8AI score0.00041EPSS
Exploits0References3
Snyk
Snyk
added 2026/04/17 10:20 p.m.0 views

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass via the service invocation access control process. An attacker can bypass access control policies and invoke unauthorized methods by submitting specially crafted method paths containing encoded path traversal...

8.6CVSS5.8AI score0.00041EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:23 a.m.3 views

SUSE CVE-2018-18064

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c the generate and renderrows functions and cairo-image-compositor.c the cairoimagespansandzero function...

6.5CVSS7.1AI score0.0051EPSS
Exploits1References3
Snyk
Snyk
added 2022/02/17 5:32 p.m.1 views

Uncaught Exception

Overview std/crypto/tls is a Go standard library package std/crypto/tls Affected versions of this package are vulnerable to Uncaught Exception. Go Vulnerability Report: via the crypto/tls process. An attacker can cause a panic and potentially disrupt service by providing a certificate of an...

7.1CVSS6.8AI score0.00917EPSS
Exploits1References3
ALT Linux
ALT Linux
added 2021/07/13 12:0 a.m.32 views

Security fix for the ALT Linux 9 package golang version 1.15.14-alt1

1.15.14-alt1 built July 13, 2021 Alexey Shabalin in task 278675 July 13, 2021 Alexey Shabalin - New version 1.15.14. - Fixes: + CVE-2021-34558...

2.6CVSS7.4AI score0.00917EPSS
Exploits1
CNVD
CNVD
added 2018/10/10 12:0 a.m.2 views

cairo Denial of Service Vulnerability (CNVD-2018-20468)

cairo is a cross-platform open source vector graphics library developed by software developers Carl Worth and Behdad Esfahbod, which supports 2D drawing in multiple contexts and provides high-quality display and printouts. A security vulnerability exists in cairo 1.15.14 and earlier versions. An...

6.5CVSS6.7AI score0.0051EPSS
Exploits1References1
NVD
NVD
added 2018/10/08 6:29 p.m.17 views

CVE-2018-18064

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c the generate and renderrows functions and cairo-image-compositor.c the cairoimagespansandzero function...

6.5CVSS6.6AI score0.0051EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2018/10/08 12:0 a.m.2 views

PT-2018-14331 · Cairo +3 · Cairo +3

Name of the Vulnerable Software and Affected Versions: cairo versions prior to 1.15.14 Description: The issue arises from an out-of-bounds stack-memory write that occurs during the processing of a crafted document by WebKitGTK+, due to the interaction between functions in...

7.8CVSS5.9AI score0.05838EPSS
Exploits4References27
Rows per page
Query Builder