Rdiffweb 访问控制错误漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your archives through an efficient web interface. An access control error vulnerability exists in Rdiffweb versions prior to 2.5.0a6, which stems from a lack of authentication for...

PT-2022-36688 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. The crash state indicates involvement of the AffixMgr functions, specifically suffix check,...

PT-2022-36685 · Git +1 · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash was reported. The crash occurred in the following functions: flb parser create, flb parser conf file, and is related ...

PT-2022-36687 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: ndpi search irc tcp, check ndpi detection func, and ndp...

PT-2022-36682 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state involves several functions:...

Exploit for CVE-2022-41852

Remote Code Execution in JXPath Library CVE-2022-41852 Proof...

PT-2022-36679 · Git +1 · Opensis

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A heap-buffer-overflow READ 1 crash occurred, involving the functions parse via, get hdr field, and parse headers. Recommendations: At the moment, there is no information about a newer...

OPENSUSE-SU-2022:10144-1 Security update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer

This update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer fixes the following issues: Changes in gdcm: - Provides/obsoletes moved to lbgdcm-package Thx DimStar - rename of gdcm-libgdcm30 to libgdcm30 proposal S. Br�ns - version 3.0.18 no changelog - version 3.0.12 support for poppler 22.03...

OpenSSL 代码问题漏洞

OpenSSL is an open source capable general-purpose cryptographic library from the OpenSSL team that implements the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. It supports a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, secure...

Shift Tech bingo!CMS 授权问题漏洞

Shift Tech bingo!CMS is a content management system from Shift Tech Japan. An authorization issue vulnerability exists in Shift Tech bingo!CMS version 1.7.4.1 and prior versions, which stems from an authentication bypass vulnerability contained in certain administrative functions...

PT-2022-5965 · Microsoft · Sharepoint Server +2

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundatio...

Requiring Timelock For Setter Functions

Lines of code Vulnerability details Vulnerability Details We noticed that the following owner-privileged setter functions can update important state variables without a time delay. 1. setExecutionDelegate function of the BlurExchange contract L215 - 222 in code snippet 1 2. setPolicyManager...

PT-2022-36672 · Git +1 · Opensis

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A heap buffer overflow read issue has been identified, potentially causing a crash. The crash state involves functions such as dprint, get hdr field, and parse headers. No information i...

GHSA-WRX5-RP7M-MM49 Withdrawn: CVE Rejected: JXPath vulnerable to remote code execution when interpreting untrusted XPath expressions

This advisory has been withdrawn due to the CVE being rejected. Original advisory text Those using JXPath to interpret untrusted XPath expressions may be vulnerable to a remote code execution attack. All JXPathContext class functions processing a XPath string are vulnerable except compile and...

PT-2022-6310 · Ibm · Ibm Cloud Pak For Multicloud Management Monitoring

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Multicloud Management Monitoring versions 2.0 through 2.3 Description: The issue is related to incorrect restriction of a directory path with limited access. Exploitation of this issue may allow a remote attacker to elevate...

The vulnerability in the implementation of the admin/functions.php script of the PuppyCMS CMS system allows a perpetrator to execute arbitrary code.

The vulnerability of the admin/functions.php implementation in the PuppyCMS CMS system is related to incorrect permission storage. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

FreeBSD : zydis -- heap buffer overflow (d487d4fc-43a8-11ed-8b01-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the d487d4fc-43a8-11ed-8b01-b42e991fc52e advisory. - Zydis is an x86/x86-64 disassembler library. Users of Zydis versions v3.2.0 and older that use the...

PT-2022-36662 · Git +1 · Mapserver

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 1 crash has been reported. The crash involves the functions msyylex, loadMapInternal, and msLoadMap. No information is...

Malicious Package

Overview pages-functions-with-routes-app is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable i...

PT-2022-36657 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the AffixMgr::cpdcase check and AffixMgr::compound check functions, ultimately calle...