449 matches found
AZL-25813 CVE-2022-4899 affecting package zstd for versions less than 1.5.4-1
A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun...
Buffer overflow
A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun...
CVE-2022-4899
A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun...
CVE-2022-44370
NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856...
CVE-2022-44369
NASM 2.16 development is vulnerable to 476: Null Pointer Dereference via output/outaout.c...
[SECURITY] Fedora 37 Update: curl-7.85.0-6.fc37
curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2023-1281)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
npm abacus-ext-cmdline 操作系统命令注入漏洞
npm abacus-ext-cmdline is a command line execution utility from npm USA. An operating system command injection vulnerability exists in abacus-ext-cmdline, which stems from incorrect user input cleanup and is prone to command injection via the execute function...
PT-2022-24907 · Nextcloud +2 · Nextcloudcmd +2
Name of the Vulnerable Software and Affected Versions: nextcloudcmd versions prior to 3.6.1 Description: The issue allows a Man-in-the-middle attack, potentially exposing sensitive data or credentials to a network attacker, due to the incorrect trust of invalid TLS certificates. This affects the...
Exploit for CVE-2022-30190
...
Command injection
Arr-pm is an RPM reader/writer library written in Ruby. Versions prior to 0.0.12 are subject to OS command injection resulting in shell execution if the RPM contains a malicious "payload compressor" field. This vulnerability impacts the extract and files methods of the RPM::File class of this...
CVE-2022-39224
Arr-pm is a Ruby RPM reader/writer library. Versions prior to 0.0.12 are vulnerable to OS command injection when the RPM contains a malicious payload compressor field, affecting the RPM::File::extract and RPM::File::files methods. Version 0.0.12 patches these issues. A workaround is to ensure RPM...
OPENSUSE-SU-2022:10126-1 Security update for mupdf
This update for mupdf fixes the following issues: mupdf was updated to 1.20.3: return error, not success when unable to lock native device resource. Bug 705620: Start journal operation instead of pushing local xref. Ensure AndroidDrawDevice is destroyed, even upon exception. source/pdf/pdf-clean....
CVE-2022-36082
mangadex-downloader is a command-line tool to download manga from MangaDex. When using file: command and is a web URL location http, https, mangadex-downloader between versions 1.3.0 and 1.7.2 will try to open and read a file in local disk for each line of website contents. Version 1.7.2 contains...
PYSEC-2022-264
mangadex-downloader is a command-line tool to download manga from MangaDex. When using file: command and is a web URL location http, https, mangadex-downloader between versions 1.3.0 and 1.7.2 will try to open and read a file in local disk for each line of website contents. Version 1.7.2 contains...
CVE-2022-36082
mangadex-downloader is affected by a vulnerability where, when using the file: command with a web URL location (http, https), versions 1.3.0 through 1.7.2 will attempt to open and read a local disk file for each line of website contents. The issue is mitigated by a patch in version 1.7.2. The pro...
CVE-2022-36082 mangadex-downloader vulnerable to unauthorized file reading
mangadex-downloader is a command-line tool to download manga from MangaDex. When using file: command and is a web URL location http, https, mangadex-downloader between versions 1.3.0 and 1.7.2 will try to open and read a file in local disk for each line of website contents. Version 1.7.2 contains...
fdkaac 安全漏洞
fdkaac is a command-line front-end for the libfdk-aac encoder by the Japanese individual developer nu774. A security vulnerability exists in fdkaac commit number: 53fe239, which stems from a floating point exception in its wavopen at /src/wavreader.c component...
buildah bug fix and enhancement update
An update is available for buildah. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The buildah package provides command line tool for creating Open Container...