7567 matches found
DEBIAN-CVE-2020-28606
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
DEBIAN-CVE-2020-28610
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
DEBIAN-CVE-2020-28608
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
DEBIAN-CVE-2020-28611
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
UBUNTU-CVE-2020-28623
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
UBUNTU-CVE-2020-28620
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
UBUNTU-CVE-2020-28630
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
CVE-2020-28615
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
PT-2025-8246
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential memory leak was found in the Linux kernel, specifically in the r871xu drv init function. This issue occurs when r8712 init drv sw fails, causing memory allocated by r8712 all...
CVE-2021-32976
Five buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to initiate a denial-of-service attack and execute arbitrary code...
apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above thus "limited" path traversal,...
apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above thus "limited" path traversal,...
Moderate: Red Hat Security Advisory: Red Hat Process Automation Manager 7.12.1 security update
An update is now available for Red Hat Process Automation Manager. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...
AZL-9240 CVE-2022-0494 affecting package kernel for versions less than 5.15.37.1-2
A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege CAPSYSADMIN or CAPSYSRAWIO to create issues with confidentiality...
com.digitalpebble.behemoth:behemoth-io (>=1.0, <=1.1) potentially affected by CVE-2021-23901 via org.apache.nutch:nutch (1.4)
org.apache.nutch:nutch MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nutch:nutch and may be impacted: - com.digitalpebble.behemoth:behemoth-io =1.0, =1.1 Source cves: CVE-2021-23901 Source advisory: OSV:GHSA-FXHP-WRW9-3R9...
com.digitalpebble.behemoth:behemoth-io (>=1.0, <=1.1) potentially affected by CVE-2021-23901 via org.apache.nutch:nutch (1.4)
org.apache.nutch:nutch MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nutch:nutch and may be impacted: - com.digitalpebble.behemoth:behemoth-io =1.0, =1.1 Source cves: CVE-2021-23901 Source advisory: GHSA-FXHP-WRW9-3R97...
PT-2022-29085
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description The issue is related to the io uring functionality in the Linux Kernel. It involves adding a schedule point in the io add buffers function. The actual impact and attack plausibility have not...
PT-2022-29136
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description The issue is related to the io uring functionality in the Linux Kernel. It involves adding a schedule point in the io add buffers function. The actual impact and potential for attack have no...
PT-2022-29019
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.7 through v5.16.11 Description A potential security issue has been identified in the io uring component of the Linux Kernel. The issue is related to the io add buffers function. The actual impact and attack plausibilit...
CVE-2021-39736
In prepareioentry and prepareresponse of lwisioctl.c and lwisperiodicio.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product:...