280 matches found
CVE-2022-41939 Credential exposure when running third-party builders in knative/func
knative.dev/func is is a client library and CLI enabling the development and deployment of Kubernetes functions. Developers using a malicious or compromised third-party buildpack could expose their registry credentials or local docker socket to a malicious lifecycle container. This issues has bee...
CVE-2022-3967
A vulnerability, which was classified as critical, was found in Vesta Control Panel. Affected is an unknown function of the file func/main.sh of the component sed Handler. The manipulation leads to argument injection. An attack has to be approached locally. The name of the patch is...
CVE-2022-3967: Improper Neutralization
A vulnerability, which was classified as critical, was found in Vesta Control Panel. Affected is an unknown function of the file func/main.sh of the component sed Handler. The manipulation leads to argument injection. An attack has to be approached locally. The name of the patch is...
mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemfuncin::cleanup/Item::cleanupprocessor...
mariadb: assertion failure in sql/item_func.cc
A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/itemfunc.cc:148, affecting availability...
PT-2022-37152
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the dissect softether ip port, ndpi search softether,...
OSV-2022-588 Heap-use-after-free in wasmtime_runtime::externref::gc::hcbc8e23ae41614fa
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49171 Crash type: Heap-use-after-free WRITE 8 Crash state: wasmtimeruntime::externref::gc::hcbc8e23ae41614fa wasmtimefuzzing::oracles::tableops::$u7b$$u7b$closure$u7d$$u7d$::hd207e5ffb69...
PT-2022-37096
Name of the Vulnerable Software and Affected Versions wasmtime affected versions not specified Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to a crash. The error is specifically ...
wasmtime:table_ops: Heap-use-after-free in wasmtime_setjmp
Project: https://github.com/bytecodealliance/wasmtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5314786413379584 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: tableops Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address:...
PT-2022-37039
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the functions ndpi search dns, check ndpi detection...
PT-2022-37912
Уязвимость функции deferred probe timeout work func модуля drivers/base/dd.c драйвера поддержки шинных устройства ядра операционной системы Linux связана с возникновением взаимной блокировки. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2022-37011
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details include a crash type of Heap-buffer-overflow READ 12, and the crash state...
Malicious code in bfx-hf-func-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7631340a32bc76c05bd236bc6011f4f1040460a40997bbec6fe11016748b4029 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1540 Malicious code in bfx-hf-func-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7631340a32bc76c05bd236bc6011f4f1040460a40997bbec6fe11016748b4029 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2022-36964
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 2 crash has been reported. The crash involves the ndpi search raknet, check ndpi detection func, and ndpi check flow func...
DEBIAN-CVE-2022-27449
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/itemfunc.cc:148...
UBUNTU-CVE-2022-27449
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/itemfunc.cc:148...
PT-2022-36942
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the functions krb parse, ndpi search kerberos, and che...
PT-2022-36935
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported, identified as a Stack-use-after-return READ 1 issue. The crash involves the std:: 1:: function:: func and...
PT-2022-36904
Name of the Vulnerable Software and Affected Versions No specific software or version information is provided in the input descriptions. Description The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves the grk::N SSE4::vscheduler function and std:: 1::...