Lucene search
+L

163 matches found

Github Security Blog
Github Security Blog
•added 2024/04/22 3:56 p.m.•34 views

JADX file override vulnerability

Summary when jadx parses a resource file, there is an escape problem with the style file, which can overwrite other files in the directory when saving the decompile result. Although I don't think this vulnerability realizes path traversal in the true sense of the word , I reported it anyway Detai...

7.1AI score
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2024/04/22 3:56 p.m.•47 views

GHSA-HVP5-5X4F-33FQ JADX file override vulnerability

Summary when jadx parses a resource file, there is an escape problem with the style file, which can overwrite other files in the directory when saving the decompile result. Although I don't think this vulnerability realizes path traversal in the true sense of the word , I reported it anyway Detai...

3.3CVSS7.1AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/04/22 12:00 a.m.•18 views

PT-2024-40332 · Jadx · Jadx

Name of the Vulnerable Software and Affected Versions: jadx affected versions not specified Description: The issue arises when jadx parses a resource file, specifically with an escape problem related to style files. This can lead to overwriting other files in the directory when saving the...

3.3CVSS7AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/08/25 12:00 a.m.•14 views

PT-2023-35972 · Git +1 · Harfbuzz

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including OT::glyph variations t::create from glyp...

6.9AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2023/06/08 11:05 a.m.•66 views

CVE-2023-31670

An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service DoS via running a crafted binary...

7.5CVSS7.6AI score0.00833EPSS
SaveExploits1References3
NVD
NVD
•added 2023/05/23 1:15 a.m.•55 views

CVE-2023-31670

An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service DoS via running a crafted binary...

7.5CVSS7.4AI score0.00833EPSS
SaveExploits1References1
Prion
Prion
•added 2023/05/23 1:15 a.m.•38 views

Code injection

An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service DoS via running a crafted binary...

5CVSS7.3AI score0.00833EPSS
SaveExploits1References1Affected Software1
osv_ubuntu
osv_ubuntu
•added 2023/05/23 1:15 a.m.•36 views

UBUNTU-CVE-2023-31670

An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service DoS via running a crafted binary...

7.5CVSS7.3AI score0.00833EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/23 12:00 a.m.•5 views

CVE-2023-31670: Undefined Security Weakness

An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service DoS via running a crafted binary...

7.5CVSS7.4AI score0.00833EPSS
SaveExploits1References1
CVE
CVE
•added 2023/05/23 12:00 a.m.•106 views

CVE-2023-31670

The CVE-2023-31670 entry refers to a vulnerability in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 that can cause a Denial of Service (DoS) when processing a crafted binary. The connected sources confirm the affected components and the DoS impact, including CVSS...

7.5CVSS7.3AI score0.00833EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
•added 2023/05/23 12:00 a.m.•45 views

CVE-2023-31670

An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service DoS via running a crafted binary...

7.5CVSS7.3AI score0.00833EPSS
SaveExploits1References3
Mend
Mend
•added 2023/05/23 12:00 a.m.•15 views

CVE-2023-31670

An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service DoS via running a crafted binary...

8.7CVSS7.3AI score0.00833EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2023/05/23 12:00 a.m.•60 views

CVE-2023-31670

An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service DoS via running a crafted binary...

7.5AI score0.00833EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2023/05/23 12:00 a.m.•92 views

CVE-2023-31670

An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service DoS via running a crafted binary...

7.5CVSS7.3AI score0.00833EPSS
SaveExploits1
osv_ubuntu
osv_ubuntu
•added 2023/05/09 4:15 p.m.•77 views

UBUNTU-CVE-2023-30084

An issue found in libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the stackVal function in util/decompile.c...

5.5CVSS6AI score0.00235EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2023/05/09 4:15 p.m.•27 views

UBUNTU-CVE-2023-30083

Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the newVarN in util/decompile.c...

5.5CVSS5.7AI score0.00236EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2023/05/09 4:15 p.m.•19 views

UBUNTU-CVE-2023-30085

Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the cws2fws function in util/decompile.c...

5.5CVSS5.7AI score0.00235EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/05/09 12:00 a.m.•53 views

CVE-2023-30085

Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the cws2fws function in util/decompile.c...

5.6AI score0.00235EPSS
SaveExploits1References1
CVE
CVE
•added 2023/05/09 12:00 a.m.•70 views

CVE-2023-30085

The CVE-2023-30085 entry concerns Libming swftophp v0.4.8, where a Buffer Overflow in the cws2fws function of util/decompile.c allows a local attacker to trigger a denial of service. Connected sources consistently describe the vulnerable component as Libming swftophp 0.4.8 and the impact as local...

5.5CVSS5.3AI score0.00235EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/05/09 12:00 a.m.•19 views

Libming security vulnerabilities

libming is a Flash SWF output library written in C. It can be used as a library to export Flash SWF files. A security vulnerability exists in libming swftophp v.0.4.8. An attacker has exploited the vulnerability to cause a denial of service via newVarN in util/decompile.c. The vulnerability can b...

5.5CVSS5.7AI score0.00236EPSS
SaveExploits1References3
Rows per page
Query Builder