6445 matches found
AZL-8411 CVE-2021-46667 affecting package mariadb for versions less than 10.6.7-1
MariaDB before 10.6.5 has a sqllex.cc integer overflow, leading to an application crash...
AZL-8410 CVE-2021-46666 affecting package mariadb for versions less than 10.6.7-1
MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause...
AZL-8405 CVE-2021-46661 affecting package mariadb for versions less than 10.6.7-1
MariaDB through 10.5.9 allows an application crash in findfieldintables and findorderinlist via an unused common table expression CTE...
AZL-8406 CVE-2021-46662 affecting package mariadb for versions less than 10.6.7-1
MariaDB through 10.5.9 allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...
AZL-8458 CVE-2022-0407 affecting package vim for versions less than 8.2.4233-1
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
PYSEC-2022-23
Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...
Fedora: Security Advisory for rust-below (FEDORA-2022-c4071e3dc7)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
AZL-8363 CVE-2022-0361 affecting package vim for versions less than 8.2.4233-1
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
CVE-2022-23120
A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first obtain access to the target agent in...
CVE-2022-0285
Cross-site Scripting XSS - Stored in Packagist pimcore/pimcore prior to 10.2.9...
AZL-7723 CVE-2022-21333 affecting package mysql for versions less than 8.0.28-1
Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...
AZL-7541 CVE-2022-21285 affecting package mysql for versions less than 8.0.28-1
Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...
M-Files Web 和 M-Files Server 安全漏洞
M-Files Corporation M-Files Web is an intelligent information management platform from M-Files Corporation, USA. M-Files Server is a server for the M-Files system from M-Files Corporation. A security vulnerability exists in the M-Files Server and M-Files Web products versions lower than...
AZL-7486 CVE-2022-23218 affecting package glibc for versions less than 2.35-1
The deprecated compatibility function svcunixcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or if an application is not...
UBUNTU-CVE-2022-22739
Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...
UBUNTU-CVE-2022-22742
When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable crash. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...
AZL-7163 CVE-2022-0158 affecting package vim for versions less than 8.2.4081-1
vim is vulnerable to Heap-based Buffer Overflow...
AZL-7157 CVE-2022-22823 affecting package expat for versions less than 2.4.3-1
buildmodel in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
GHSA-QPW2-XCHM-655Q Out-of-Bounds read in stringstream
Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream when using Node.js 4.x. WITHDRAWN This is a duplicate of GHSA-mf6x-7mm4-x2g7...