CVE-2022-44910

Binbloom 2.0 was discovered to contain a heap buffer overflow via the readpointer function at /binbloom-master/src/helpers.c...

Heap overflow

Binbloom 2.0 was discovered to contain a heap buffer overflow via the readpointer function at /binbloom-master/src/helpers.c...

CVE-2022-44910

CVE-2022-44910 affects Binbloom 2.0, with a heap buffer overflow in the read_pointer function implemented at /binbloom-master/src/helpers.c. The vulnerability is confirmed by multiple sources (e.g., NVD/Red Hat) and has a CVSSv3.1 base score of 7.8 (HIGH). Provided connected documents state a wor...

CVE-2022-44910

Binbloom 2.0 was discovered to contain a heap buffer overflow via the readpointer function at /binbloom-master/src/helpers.c...

CVE-2022-31705

VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller EHCI. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESX...

CVE-2022-44910

Binbloom 2.0 was discovered to contain a heap buffer overflow via the readpointer function at /binbloom-master/src/helpers.c...

CVE-2022-44910

Binbloom 2.0 was discovered to contain a heap buffer overflow via the readpointer function at /binbloom-master/src/helpers.c...

PT-2022-27331 · Binbloom · Binbloom

Name of the Vulnerable Software and Affected Versions: Binbloom version 2.0 Description: A heap buffer overflow was discovered in Binbloom via the read pointer function at /binbloom-master/src/helpers.c. This issue may be exploited, but details about the estimated number of potentially affected...

CVE-2022-31705

CVE-2022-31705 is a heap out-of-bounds write in the USB 2.0 EHCI controller affecting VMware ESXi, Workstation, and Fusion. A local administrator within a guest VM can exploit this to execute code in the VMX process on the host; on ESXi the exploit is contained within the VMX sandbox, while on Wo...

PT-2022-5844 · Vmware · Vmware Esxi +2

Name of the Vulnerable Software and Affected Versions: VMware ESXi, Workstation, and Fusion affected versions not specified Description: A heap out-of-bounds write vulnerability in the USB 2.0 controller EHCI allows a malicious actor with local administrative privileges on a virtual machine to...

SnakeYaml Constructor Deserialization Remote Code Execution

Summary SnakeYaml's Constructor class, which inherits from SafeConstructor, allows any type be deserialized given the following line: new Yamlnew ConstructorTestDataClass.class.loadyamlContent; Types do not have to match the types of properties in the target class. A ConstructorException is throw...

Fedora: Security Advisory for bcel (FEDORA-2022-0e358addb8)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

VMSA-2022-0033:VMware ESXi, Workstation, and Fusion updates address a heap out-of-bounds write vulnerability

Advisory ID: VMSA-2022-0033 CVSSv3 Range: 5.9-9.3 Issue Date:2022-12-13 Updated On: 2022-12-13 Initial Advisory CVEs: CVE-2022-31705 Synopsis: VMware ESXi, Workstation, and Fusion updates address a heap out-of-bounds write vulnerability CVE-2022-31705 RSS Feed Download PDF Download Text File Shar...

Fedora: Security Advisory for xfce4-settings (FEDORA-2022-7febff96e0)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for python3.8 (FEDORA-2022-e1ce71ff40)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-4353

A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. Affected by this vulnerability is the function IpUtil.getIpAddr. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be use...

Cross site scripting

A vulnerability was found in LinZhaoguan pb-cms 2.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /blog/comment of the component Message Board. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has be...

Cross site scripting

A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. Affected by this vulnerability is the function IpUtil.getIpAddr. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be use...

EulerOS 2.0 SP8 : wavpack (EulerOS-SA-2022-2811)

According to the versions of the wavpack package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL...

EulerOS 2.0 SP8 : curl (EulerOS-SA-2022-2790)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When curl is used to retrieve and parse cookies from a HTTPS server, itaccepts cookies using control codes that when later are sent back to a...