3347 matches found
USN-5449-1 libxv vulnerability
It was discovered that libXv incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code...
CVE-2022-30427
In ginadmin through 05-10-2022 the incoming path value is not filtered, resulting in directory traversal...
GHSA-8Q69-PW39-HPQH Azure SDK for Java Security Feature Bypass Vulnerability
Azure SDK for Java Security Feature Bypass Vulnerability...
HPESBUX04309 rev.2 - HPE HP-UX Using OpenSSL, Multiple Remote Vulnerabilities
Potential Security Impact: Local: Denial of Service DoS, Unauthorized Access to Data, Buffer Overflow; Remote: Denial of Service DoS, Unauthorized Access to Data, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX OpenSSL Software prior to A.01.01.01l.001 CVSS...
CVE-2022-30138
Windows Print Spooler Elevation of Privilege Vulnerability...
pyupdater (=2.1.7) potentially affected by CVE-2016-9015 via urllib3 (=1.18.0)
urllib3 PYPI version =1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - pyupdater =2.1.7 Source cves: CVE-2016-9015 Source advisory: OSV:GHSA-V4W5-P2HG-8FH6...
ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +3276 more potentially affected by CVE-2011-2730 via org.springframework:spring-core (>=1.2 <=2.5.6.SEC02)
org.springframework:spring-core MAVEN version =1.2, =1.1, =1.3, =0.3, =1.2.1, =1.2.1, =1.0, =0.0.1-alpha1, =0.0.1-alpha5 - ch.ethz.origo:origo-issue-notifier =1.0 - ch.nerdin:testdata-framework =0.10 - ch.semafor:gendas =1.0.1 - cn.fastoo:fastoo-java-api =20171130 - com.54chen:paoding-rose =1.0 -...
doc2dash (=1.2.0), document-clipper (>=0.9.0 <=0.13.6) +1 more potentially affected by CVE-2014-3146 via lxml (>=3.2.3 <=3.3.2)
lxml PYPI version =3.2.3, =0.9.0, =0.13.6 - rymtracks =0.1.2 Source cves: CVE-2014-3146 Source advisory: OSV:GHSA-57QW-CC2G-PV5P...
br.net.woodstock.rockframework:rockframework-web (>=1.2.1 <=1.2.2), com.cybersource:cybersource-sdk-java (>=6.0.1 <=6.1.0) +333 more potentially affected by CVE-2015-0226 via org.apache.ws.security:wss4j (>=1.5.2 <=1.6.16)
org.apache.ws.security:wss4j MAVEN version =1.5.2, =1.2.1, =6.0.1, =1.0, =1.0.1, =1.1.0.Beta5, =1.1.0.Beta5, =1.1.0.Beta5, =1.1.0.Beta1, =1.0.0, =1.2.0 and more Source cves: CVE-2015-0226 Source advisory: OSV:GHSA-VJWC-5HFH-2VV5...
br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0 <=2.0.8), br.net.woodstock.rockframework:rockframework-web (>=1.2.4 <=3.0.1) +167 more potentially affected by CVE-2014-0094 via org.apache.struts.xwork:xwork-core (>=2.2.1 <=2.3.16.1)
org.apache.struts.xwork:xwork-core MAVEN version =2.2.1, =2.0.0, =1.2.4, =1.5.3, =1.5.3, =1.2.0, =1.0.0, =1.0.3, =1.2.2, =1.4.1, =3.0, =1.7.3, =1.7.3, =1.7.4 and more Source cves: CVE-2014-0094 Source advisory: OSV:GHSA-VRWC-QJMW-5RJM...
Smack allows the bypass of TLS protections
Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers to bypass TLS protections and trigger use of cleartext for client authentication by stripping the "starttls" feature from a server response...
PCRE 缓冲区错误漏洞
PCRE is an open source regular expression library written in C by the individual developer Philip Hazel. A security vulnerability exists in PCRE. An attacker can exploit this vulnerability to trigger a denial of service or obtain sensitive information by forcing a read of an invalid memory addres...
CVE-2022-29148
Visual Studio Remote Code Execution Vulnerability...
CVE-2022-30130
.NET Framework Denial of Service Vulnerability...
CVE-2022-29142
Windows Kernel Elevation of Privilege Vulnerability...
CVE-2022-29125
Windows Push Notifications Apps Elevation of Privilege Vulnerability...
CVE-2022-29110
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2022-29115
Windows Fax Service Remote Code Execution Vulnerability...