652 matches found
CLEANSTART-2024-YN30556 Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen
Security vulnerability affects the xen package. Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen...
CVE-2009-5147
CVE-2009-5147 and CVE-2015-7551 PoC to run it: make foo export FOO=./foo.so ruby -v foo.rb with different versions of ruby you should get different results: vpereira@kimura:/poc rvm use 2.1.7 vpereira@kimura:/poc ruby -v foo.rb ruby 2.1.7p400 2015-08-18 revision 51632 x8664-linux some trash fom...
CVE-2022-20685
A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit th...
Astra Linux – Vulnerability in Nasm
There is an illegal address access in asm/preproc.c function: ismmacro within Netwide Assembler NASM 2.14rc16. This issue may lead to a denial of service due to out-of-bounds array access, as a certain conversion can result in a negative integer...
Astra Linux – vulnerability in libonig
Oniguruma up to version 6.9.3, as used in PHP 7.3.x and other products, contains a heap-based buffer over-read in strlowercasematch within regexec.c...
Astra Linux – Vulnerability in Nasm
There is a use-after-free in asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16, which will cause a denial of service during a line-number increment attempt...
Astra Linux – vulnerability in php7.3
In PHP versions 7.3.x prior to 7.3.33, 7.4.x prior to 7.4.26, and 8.0.x prior to 8.0.13, certain XML parsing functions such as simplexmlloadfile URL-decode the filename passed to them. If the filename contains a URL-encoded NUL character, this may cause the function to interpret it as the end of...
Astra Linux – Vulnerability in Nasm
In Netwide Assembler NASM 2.15rc0, a heap-based buffer over-read occurs due to a malicious .asm file during the call to settextfree from expandonesmacro in asm/preproc.c...
CVE-2026-108961
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
CVE-2026-108961 PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
CVE-2026-108961
A code injection vulnerability exists in PaddlePaddle PaddleX versions up to 3.7.2 . The flaw is located in the NormalizeImage.__init__ function within the paddlex/inference/models/text_detection/processors.py file of the Preprocessor component. Attackers can exploit this by manipulating the scal...
EUVD-2026-98276
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
CVE-2026-108961
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
CVE-2026-108961 PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
CVE-2026-108961: Improper Control of Generation of Code
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
PT-2026-111274
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage. init of the file paddlex/inference/models/text detection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is...
[SECURITY] Fedora 45 Update: ocaml-cppo-1.8.0-10.fc45
Cppo is an equivalent of the C preprocessor targeted at the OCaml language and its variants. The main purpose of cppo is to provide a lightweight tool for simple macro substitution =EF=BC=83define and file inclusion =EF=BC=83include fo r the occasional case when this is useful in OCaml. Processin...
[SECURITY] Fedora 45 Update: ocaml-camlp5-8.05.02-3.fc45
Camlp5 is a preprocessor-pretty-printer of OCaml. It is compatible with all versions of OCaml from 4.05.0 thru 4.14.0. Previous versions of Camlp5 have supported OCaml versions down to 1.07 and jocaml 3.12.0 to 3.12.1, but this version cuts off support at 4.10.0. Camlp5 is heavily tested with OCa...
[SECURITY] Fedora 45 Update: ocaml-bisect-ppx-2.8.3-25.fc45
Bisectppx is a code coverage tool for OCaml. It helps you test thoroughly by showing which parts of your code are not tested. It is a small preprocessor that inserts instrumentation at places in your code, such as if-then-else and match expressions. After you run tests, Bisectppx gives a nice HTM...