CVE-2022-3095 Incorrect parsing of the backslash characters in Dart library

The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3.30 differs from the WhatWG URL standards. Dart uses the RFC 3986 syntax, which creates incompatibilities with the '' characters in URIs, which can lead to auth bypass in webapp...

CVE-2022-3095

CVE-2022-3095 affects Dart/Flutter: the Dart URI class uses RFC 3986 syntax for backslash parsing, diverging from WhatWG URL standards and causing incompatibilities with \ in URIs. This can enable authentication bypass in web apps that parse URIs. Affected: Dart versions prior to 2.18 and Flutter...

Fedora: Security Advisory for uriparser (FEDORA-2022-6746739d52)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: uriparser-0.9.6-4.fc36

Uriparser is a strictly RFC 3986 compliant URI parsing library written in C. uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license...

[SECURITY] [DSA 5085-2] expat regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-5085-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 13, 2022 https://www.debian.org/security/faq -...

CVE-2022-25236

xmlparse.c in Expat aka libexpat before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs...

[SECURITY] [DLA 2883-1] uriparser security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2883-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb January 17, 2022 https://wiki.debian.org/LTS -...

[SECURITY] Fedora 35 Update: uriparser-0.9.6-1.fc35

Uriparser is a strictly RFC 3986 compliant URI parsing library written in C. uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license...

[SECURITY] Fedora 34 Update: uriparser-0.9.6-1.fc34

Uriparser is a strictly RFC 3986 compliant URI parsing library written in C. uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license...

Fedora: Security Advisory for uriparser (FEDORA-2022-00a529a8bf)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Uriparser Resource Management Error Vulnerability

Uriparser is a Uri parsing and processing library written in C89 that strictly conforms to Rfc 3986. uriparser is vulnerable to a resource management error that stems from uriparser prior to 0.9.6 performing invalid free operations in uriNormalizeSyntax. No detailed vulnerability details are...

Mozilla Firefox Security Advisory (MFSA2012-77) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

CVE-2018-3986

creationtimestamp| type| source ---|---|--- 2020-11-17 23:13:26+00:00| published-proof-of-concept| Telegram/zK6wbSwVlilLYDI0q-kXU-vGn7JvrMapT23yHAzelbV2I...

VMware Workstation 15.x < 15.5.7 Multiple Vulnerabilities (VMSA-2020-0020)

The version of VMware Workstation installed on the remote host is 15.x. It is, therefore, affected by the following vulnerabilities: - Multiple out-of-bounds read vulnerabilities in Cortado ThinPrint components JPEG2000 parser, EMR STRETCHDIBITS parser, and EMF Parser. A malicious actor with norm...

VMware Horizon View Client < 5.4.4 Multiple Vulnerabilities (VMSA-2020-0020)

The version of VMware Horizon Client for Windows installed on the remote host is less than 5.4.4. It is, therefore, affected by the following vulnerabilities: - Multiple out-of-bounds read vulnerabilities in Cortado ThinPrint components JPEG2000 parser, EMR STRETCHDIBITS parser, and EMF Parser. A...

KLA12099 Multiple vulnerabilities in VMware Workstation and Player

Multiple vulnerabilities were found in VMware Workstation and Player. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. A out of bounds read vulnerability in Cortado ThinPrin...

CVE-2019-3986

CVE-2019-3986 affects the Blink XT2 Sync Module firmware prior to 2.13.11. The root cause is improper sanitization of input when configuring Wi‑Fi settings via the encryption parameter, enabling a remote attacker to execute arbitrary commands on the device. Mitigation noted in connected records i...

CentOS 7 : uriparser (CESA-2019:2280)

An update for uriparser is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Moderate: Red Hat Security Advisory: uriparser security update

An update for uriparser is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Ubuntu 16.04 LTS / 18.04 LTS : Wireshark vulnerabilities (USN-3986-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3986-1 advisory. It was discovered that Wireshark improperly handled certain input. A remote or local attacker could cause Wireshark to crash by injecting...