CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

SUSE CVE-2022-47111

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected...

SUSE CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

DEBIAN-CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

DEBIAN-CVE-2022-47111

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected...

UBUNTU-CVE-2022-47111

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected...

UBUNTU-CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2022-47111

CVE-2022-47111 affects 7-Zip, specifically version 22.01, which does not report errors for certain invalid xz files (issues relate to block flags and reserved bits). Some later versions are unaffected. Multiple connected sources corroborate the core description across NVD, OSV, Debian/Ubuntu trac...

CVE-2022-47112

7-Zip 22.01 is affected by CVE-2022-47112: it does not report an error for certain invalid xz files due to issues with stream flags and reserved bits. Some later versions are unaffected. Affected product: 7-Zip 22.01; root cause: inability to report errors for specific malformed xz inputs. Impact...

CVE-2022-47111

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2023-32197

The CVE-2023-32197 issue is an improper privilege management vulnerability in SUSE Rancher involving RoleTemplate objects when external=true is set, enabling privilege escalation in certain scenarios. Affected versions include Rancher 2.7.0–2.7.13 and 2.8.0–2.8.4 (fixed in 2.7.14 and 2.8.5). The ...

CVE-2023-5616

The CVE-2023-5616 issue concerns GNOME Control Center on Ubuntu where SSH remote login status is not correctly reflected when systemd socket activation is used for openssh-server. The underlying problem is that enabling SSH through socket activation can be left enabled without proper visibility, ...

CVE-2024-4877

OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges...

CVE-2021-24008

CVE-2021-24008 is a vulnerability in multiple Fortinet products where reading a JavaScript file could disclose sensitive software-version information to an unauthenticated remote attacker. Affected are: FortiDDoS (versions up to 5.4.0 and lower branches such as 5.3.2, 5.2.0, 5.1.0, 5.0.0, 4.7.0, ...

CVE-2021-26105

FortiSandbox exposes a stack-based buffer overflow (CWE-121) in the profile parser for versions 3.2.2 and earlier and 3.1.4 and earlier. An authenticated attacker can craft HTTP requests to potentially execute arbitrary code. The issue’s root cause is a buffer overflow in the profile parser; impa...

CVE-2025-2691

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery SSRF where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism...

CVE-2025-2691

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery SSRF where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism...