CVE-2022-29181 Improper Handling of Unexpected Data Type in Nokogiri

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors segfault or reads from unrelated memory. Version 1.13.6...

CVE-2022-28946

An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causing a Denial of Service DoS via triggering out-of-range memory access...

CVE-2022-28946

An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causing a Denial of Service DoS via triggering out-of-range memory access...

Design/Logic Flaw

An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causing a Denial of Service DoS via triggering out-of-range memory access...

CVE-2022-28946

An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causing a Denial of Service DoS via triggering out-of-range memory access...

CVE-2022-28946

An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causing a Denial of Service DoS via triggering out-of-range memory access...

Denial Of Service (DoS)

FreeType is vulnerable to denial of service. The vulnerability exists in FNTSizeRequest function due to a segment violation which allows an attacker to attempt access to a memory location in a way that could cause an application to halt or crash...

SUSE-SU-2022:1749-1 Security update for dcraw

This update for dcraw fixes the following issues: - CVE-2017-13735: Fixed a denial of service issue due to a floating point exception bsc1056170. - CVE-2017-14608: Fixed an invalid memory access that could lead to information disclosure or denial of service bsc1063798. - CVE-2018-19655: Fixed a...

CVE-2022-1771

A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to a stack-based buffer overflow vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s scriptin are not...

CVE-2022-1735

A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to a heap buffer overflow vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s scriptin are not...

PT-2025-8327

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the incorrect use of a list iterator in the fastrpc req mem unmap impl function. The list iterator value 'map' is always set and non-NULL by list for each entry,...

Open Policy Agent 安全漏洞

Open Policy Agent is a general-purpose policy engine that enables unified, context-aware policy enforcement across the stack. v0.39.0 of Open Policy Agent is vulnerable to a denial-of-service vulnerability that stems from an application misinterpreting each expression, triggering out-of-scope...

CVE-2022-1769

A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to a buffer over-read vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s scriptin are not recommended...

CVE-2022-1733

A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to a heap buffer overflow vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s scriptin are not...

SUSE-SU-2022:1724-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2020-27778: Fixed a buffer overflow in pdftohtml bsc1179163. - CVE-2019-14494: Fixed a divide-by-zero error in pdftoppm bsc1143950. - CVE-2019-9959: Fixed an integer overflow in pdftocairo bsc1142465. - CVE-2019-10871: Fixed an invalid...

SUSE-SU-2022:1723-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2020-27778: Fixed a buffer overflow in pdftohtml bsc1179163. - CVE-2019-14494: Fixed a divide-by-zero error in pdftoppm bsc1143950. - CVE-2019-9959: Fixed an integer overflow in pdftocairo bsc1142465. - CVE-2019-10871: Fixed an invalid...

Oracle Linux 8 : php:7.4 (ELSA-2022-1935)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1935 advisory. - fix SSRF bypass in FILTERVALIDATEURL CVE-2021-21705 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Security update for MozillaFirefox (moderate)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2022:0136-1 Rating: moderate References: 1191938 1194547 1199047 Cross-References: CVE-2020-27304 CVE-2021-4140 CVE-2022-22737 CVE-2022-22738 CVE-2022-22739 CVE-2022-22740 CVE-2022-22741 CVE-2022-22742...

SUSE-SU-2022:1690-1 Security update for podofo

This update for podofo fixes the following issues: - CVE-2019-20093: Fixed an invalid memory access that could cause an application crash bsc1159921...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : LibTIFF vulnerabilities (USN-5421-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5421-1 advisory. It was discovered that LibTIFF incorrectly handled certain images. An attacker could possibly use this issue to cause a crash,...