SUSE CVE-2019-11037

In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing to an array of values in ImagickKernel::fromMatrix function did not check that the address will be within the allocated array. This could lead to out of bounds write to memory if the function is called with the data controlled ...

SUSE CVE-2019-14871

The REENTCHECK macro see newlib/libc/include/sys/reent.h as used by REENTCHECKTM, REENTCHECKMISC, REENTCHECKMP and other newlib macros in versions prior to 3.3.0, does not check for memory allocation problems when the DEBUG flag is unset as is the case in production firmware builds...

SUSE CVE-2019-14874

In the i2b function of the newlib libc library, all versions prior to 3.3.0 see newlib/libc/stdlib/mprec.c, Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access of x0 will trigger a null pointer dereference bug in case of...

SUSE CVE-2019-14876

In the lshift function of the newlib libc library, all versions prior to 3.3.0 see newlib/libc/stdlib/mprec.c, Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access to b1 will trigger a null pointer dereference bug in case...

SUSE CVE-2022-2831

A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumbextract.cc may lead to program crash or memory corruption...

Cross site scripting

A vulnerability classified as problematic has been found in eXo Chat Application. Affected is an unknown function of the file application/src/main/webapp/vue-app/components/ExoChatMessageComposer.vue of the component Mention Handler. The manipulation leads to cross site scripting. It is possible ...

PT-2023-15911 · Exo · Exo Chat Application

Name of the Vulnerable Software and Affected Versions: eXo Chat Application versions prior to 3.3.0-20220417 Description: A problematic issue has been found in the eXo Chat Application, affecting an unknown function of the Mention Handler component in the file...

CVE-2022-4633

A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file src/setting-page.php of the component Settings Handler. The manipulation leads to cross-site request forgery. The attack may be launched...

CVE-2022-4632

A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.3.1 is able to address this issue...

PT-2022-27822 · Unknown · Auto Upload Images

Name of the Vulnerable Software and Affected Versions: Auto Upload Images versions up to 3.3.0 Description: A vulnerability was found in the file src/setting-page.php of the component Settings Handler, leading to cross-site request forgery. The attack may be launched remotely. Recommendations: Fo...

CVE-2022-4632 Auto Upload Images cross site scripting

A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.3.1 is able to address this issue...

PT-2022-27812 · Unknown · Auto Upload Images

Name of the Vulnerable Software and Affected Versions: Auto Upload Images versions up to 3.3.0 Description: A vulnerability has been found in the affected software, classified as problematic. The manipulation leads to cross site scripting. The attack can be launched remotely. Recommendations: For...

PT-2022-6102

Name of the Vulnerable Software and Affected Versions Mbed TLS versions prior to 2.28.2 Mbed TLS versions 3.x prior to 3.3.0 Description A potential heap-based buffer overflow and heap-based buffer over-read exists in DTLS if MBEDTLS SSL DTLS CONNECTION ID is enabled and MBEDTLS SSL CID IN LEN MA...

MuhammaraJS 安全漏洞

MuhammaraJS is a node module with c/cpp bindings by the individual developer Julian Hille. A security vulnerability exists in MuhammaraJS versions prior to 2.6.2, 3.0.0 through 3.3.0. An attacker could exploit this vulnerability to perform a denial-of-service attack...

Apache UIMA Path Traversal vulnerability

A relative path traversal vulnerability in a FileUtil class used by the PEAR management component of Apache UIMA allows an attacker to create files outside the designated target directory using carefully crafted ZIP entry names. This issue affects Apache UIMA Apache UIMA version 3.3.0 and prior...

UBUNTU-CVE-2022-32287

A relative path traversal vulnerability in a FileUtil class used by the PEAR management component of Apache UIMA allows an attacker to create files outside the designated target directory using carefully crafted ZIP entry names. This issue affects Apache UIMA Apache UIMA version 3.3.0 and prior...

cuallee (>=0.0.2 <=0.1.1), datupapi (>=1.107.2rc3 <=1.107.2rc9) +22 more potentially affected by CVE-2022-31777 via pyspark (=3.3.0)

pyspark PYPI version =3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - cuallee =0.0.2, =1.107.2rc3, =0.0.2.3, =0.3.1, =4.0.0, =0.3.3, =3.0.0, =1.1.1, =2.0.1, =2022.10.19.dev1, =2.1.3, =2.1.7 and more Source cves:...

ai.catboost:catboost-spark_3.3_2.12 (>=1.1 <=1.2.10), ai.h2o:sparkling-water-doc_2.12 (>=3.36.1.3-1-3.3 <=3.38.0.4-1-3.3) +146 more potentially affected by CVE-2022-31777 via org.apache.spark:spark-core_2.12 (=3.3.0)

org.apache.spark:spark-core2.12 MAVEN version =3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-core2.12 and may be impacted: - ai.catboost:catboost-spark3.32.12 =1.1, =3.36.1.3-1-3.3, =0.0.1, =5.2.0, =5.3.1, =5.3.1, =5.3.1,...

ai.catboost:catboost-spark_3.3_2.13 (>=1.1.1 <=1.2.10), ch.cern.sparkmeasure:spark-measure_2.13 (>=0.20 <=0.22) +59 more potentially affected by CVE-2022-31777 via org.apache.spark:spark-core_2.13 (=3.3.0)

org.apache.spark:spark-core2.13 MAVEN version =3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-core2.13 and may be impacted: - ai.catboost:catboost-spark3.32.13 =1.1.1, =0.20, =0.9.8-3.3, =1.2.6-3.3, =1.2.1-3.3, =0.27.0,...

PT-2022-20923

Name of the Vulnerable Software and Affected Versions Apache Spark versions 3.2.1 and earlier, 3.3.0 Description A stored cross-site scripting XSS issue allows remote attackers to execute arbitrary JavaScript in the web browser of a user. This is achieved by including a malicious payload into the...