4262 matches found
CVE-2022-34031
Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njsvaluetonumber at src/njsvalueconversion.h...
CVE-2022-34030
Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njsdjbhash at src/njsdjbhash.c...
CVE-2022-34032
Nginx NJS v0.7.5 was discovered to contain a segmentation violation in the function njsvalueownenumerate at src/njsvalue.c...
CVE-2022-34032
CVE-2022-34032 summary (data from provided sources) : Nginx NJS 0.7.5 contains a segmentation violation in the function njs_value_own_enumerate (src/njs_value.c). This CVE has a CVSS v3.1 base score of 7.5 (High): Attack Vector Network, Attack Complexity Low, Privileges Required None, User Intera...
CVE-2022-34031
Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njsvaluetonumber at src/njsvalueconversion.h...
CVE-2022-34030
Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njsdjbhash at src/njsdjbhash.c...
CVE-2022-34030
The CVE-2022-34030 entry concerns Nginx NJS 0.7.5, with a segmentation fault in the njs_djb_hash function (src/njs_djb_hash.c). The vulnerability is described as a segmentation violation, indicating a crash or denial of service condition. The available connected documents confirm the affected com...
CVE-2022-34028
Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njsutf8next at src/njsutf8.h...
CVE-2022-34028
CVE-2022-34028 affects Nginx NJS 0.7.5. The vulnerability is a segmentation fault triggered by njs_utf8_next in src/njs_utf8.h, as described in connected records. The NVD entry links a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, no privileges, no user interaction, and availabil...
CVE-2022-34031: Undefined Security Weakness
Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njsvaluetonumber at src/njsvalueconversion.h...
CVE-2022-34028: Undefined Security Weakness
Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njsutf8next at src/njsutf8.h...
CVE-2022-34030: Undefined Security Weakness
Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njsdjbhash at src/njsdjbhash.c...
Nginx 安全漏洞
Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx, Inc. njs is one of the scripting language components that supports extended NGINX functionality. A security vulnerability exists in Nginx NJS 0.7.5, which stems from a segmentation violation in...
CVE-2022-34032: Undefined Security Weakness
Nginx NJS v0.7.5 was discovered to contain a segmentation violation in the function njsvalueownenumerate at src/njsvalue.c...
Fedora: Security Advisory for golang-gopkg-src-d-git-4 (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: golang-gopkg-src-d-git-4-4.13.1-8.fc35
A highly extensible git implementation in pure go...
CVE-2022-32434: Out-of-bounds Write
EIPStackGroup OpENer v2.3.0 was discovered to contain a stack overflow via /bin/posix/src/ports/POSIX/OpENer+0x56073d...
PT-2022-21320
Name of the Vulnerable Software and Affected Versions EIPStackGroup OpENer version 2.3.0 Description A stack overflow issue was discovered in EIPStackGroup OpENer. The issue occurs via /bin/posix/src/ports/POSIX/OpENer+0x56073d. Recommendations For EIPStackGroup OpENer version 2.3.0, at the momen...
roaring-landmask (0.4.0) potentially affected by CVE-2022-2097 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-2097 Source advisory: OSV:GHSA-3WX7-46CH-7RQ2...
Fedora: Security Advisory for golang-gopkg-src-d-git-4 (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...