Privilege escalation

Windows DWM Core Library Elevation of Privilege Vulnerability...

Silicon Graphics LibTIFF 安全漏洞

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF, which originates from an assertion error in...

The vulnerability of the PJSIP multimedia communication library, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the PJSIP multimedia communication library is related to the execution of an operation beyond the buffer boundaries in memory during the processing of the RTCP BYE message length. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the PJSIP multimedia communication library, related to a countable loss of significance, allows attackers to execute arbitrary code.

The vulnerability of the PJSIP multimedia communication library is related to a countable loss of significance during the processing of messages with the ERROR-CODE attribute. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...

Remote Code Execution (RCE)

codeigniter4/framework is vulnerable to remote code execution. The vulnerability exists due to the improper input validation in the library, allowing an attacker to execute CLI routes via an HTTP request...

CLSA-2022-1646085758 Fix of CVE: CVE-2021-23017

CVE-2021-23017: Off-by-one in ngxresolvercopy when labels are followed by a pointer to a root domain name...

CVE-2022-24339

JetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS...

Cross-site Scripting (XSS)

@awsui/components-react is vulnerable to cross-site scripting. An attacker can inject and execute malicious javascript as the library does not properly sanitize the user input...

UBUNTU-CVE-2022-25638

In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs when the sigalgo field differs between the certificateverify message and the certificate message...

USN-5293-1 c3p0 vulnerability

Aaron Massey discovered that c3p0 could be made to crash when parsing certain input. An attacker able to modify the application's XML configuration file could cause a denial of service...

GHSA-M639-9WHG-FW97 Prototype Pollution in object-extend

The package object-extend from 0.0.0 through 0.5.0 is vulnerable to Prototype Pollution via object-extend...

CVE-2021-23702

The package object-extend from 0.0.0 are vulnerable to Prototype Pollution via object-extend...

UBUNTU-CVE-2021-43303

Buffer overflow in PJSUA API when calling pjsuacalldump. An attacker-controlled 'buffer' argument may cause a buffer overflow, since supplying an output buffer smaller than 128 characters may overflow the output buffer, regardless of the 'maxlen' argument supplied...

CVE-2021-44960

In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument object improperly, returning a null pointer in advance at the second if, resulting in a null pointer reference behind the renderDocument function...

GHSA-M744-2JJ8-VPFV Command injection in git-parse

The "gitDiff" function in Wayfair git-parse =1.0.4 has a command injection vulnerability. Clients of the git-parse library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability...

GHSA-G6WW-V8XP-VMWG Prototype pollution in pathval

A prototype pollution vulnerability affects all versions of package pathval under 1.1.1...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4847 more potentially affected by CVE-2022-21725 via tensorflow (>=1.0.1 <=2.5.2)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2022-21725 Source advisory: OSV:GHSA-V3F7-J968-4H5F...

The vulnerability of the basic Windows DWM library in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Windows DWM base library in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the logback logging library, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.

The vulnerability of the logback logging library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4847 more potentially affected by CVE-2022-21737 via tensorflow (>=1.0.1 <=2.5.2)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2022-21737 Source advisory: OSV:GHSA-F2VV-V9CG-QHH7...