13099 matches found
GHSA-R48Q-9G5R-8Q2H Authorization Bypass Through User-Controlled Key in go-restful
Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0...
CVE-2021-40589
ZAngband zangband-data 2.7.5 is affected by an integer underflow vulnerability in src/tk/plat.c through the variable fileheader.bfOffBits...
CVE-2022-1993 Path Traversal in gogs/gogs
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9...
MAL-2022-6415 Malicious code in tangerine-state-viewer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83cabb2630e510d0c9b63f6c164c5825dd5325a370fd8db846ead2bb3ed782a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6333 Malicious code in stripe-ms (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6768625a605caa8f499ca468486f47122cb94054148e3489c677ca9fb25edc28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE-SU-2022:2003-1 Security update for mariadb
This update for mariadb fixes the following issues: Update to 10.5.16 bsc1199928: - CVE-2021-46669 bsc1199928 - CVE-2022-27376 bsc1198628 - CVE-2022-27377 bsc1198603 - CVE-2022-27378 bsc1198604 - CVE-2022-27379 bsc1198605 - CVE-2022-27380 bsc1198606 - CVE-2022-27381 bsc1198607 - CVE-2022-27382...
Denial Of Service (DoS)
trilogy is vulnerable to denial of service. When authenticating a malicious server, an attacker can send a specially crafted malicious authentication packet to the protocol.c as it does not properly verify the exact length of the authdatalen...
Content Spoofing
RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...
OSV-2022-457 Heap-buffer-overflow in CFF::Charset::collect_glyph_to_sid_map
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47790 Crash type: Heap-buffer-overflow READ 2 Crash state: CFF::Charset::collectglyphtosidmap cffsubsetplan::plansubsetcharset cffsubsetplan::create...
DSA-5158-1 thunderbird - security update
Bulletin has no description...
Command Injection
librenms/librenms is vulnerable to command injection. The vulnerability exists in pollservice function because the serviceip, hostname, and serviceparam parameters are not properly handled which allows an attacker to inject and execute arbitrary commands...
MAL-2022-1362 Malicious code in azure-pipelines-dependency-track (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d8de0a03478a809b8f29b605fa046f7b89e682904f1dbfb3321aa9e64df94f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PUB-A-209906686
Bulletin has no description...
PUB-A-127973231
Bulletin has no description...
PUB-A-215001024
In kbasememalias of malikbasememlinux.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-210594998
Bulletin has no description...
PUB-A-222091980
In rcucblistdequeue of rcusegcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation...
PUB-A-209153114
Bulletin has no description...