5103 matches found
Important: golang-github-gorilla-context
Issue Overview: 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed from this advisory. A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling,...
Linux Kerne code issue vulnerability
The Linux Kernel is the kernel used by the Linux Foundation's open source operating system Linux, which is vulnerable. A local attacker could exploit this vulnerability to cause a system crash, which could affect system availability...
CVE-2022-41582
The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability...
CVE-2022-41582
The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability...
Design/Logic Flaw
The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability...
CVE-2022-41582
The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability...
PT-2022-25956 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The security module has configuration defects. Successful exploitation of this issue may affect system availability. Recommendations: At the moment, there is no information about a...
CVE-2022-41582
The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability...
PT-2022-25950 · Kernel · Kernel
Name of the Vulnerable Software and Affected Versions: Kernel affected versions not specified Description: The issue is related to the kernel server not verifying the length of the data transferred in the user space. This can lead to an out-of-bounds read in the kernel, affecting device...
Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2022-2596)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ruby: Regular expression denial of service vulnerability of Date parsing methods
A flaw was found in ruby, where the date object was found to be vulnerable to a regular expression denial of service ReDoS during the parsing of dates. This flaw allows an attacker to hang a ruby application by providing a specially crafted date string. The highest threat to this vulnerability is...
SAP BusinessObjects Business Intelligence Platform 信息泄露漏洞
SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and quickly and...
EulerOS Virtualization 3.0.6.0 : xorg-x11-server (EulerOS-SA-2022-2596)
According to the versions of the xorg-x11-server packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in t...
Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2022-2521)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
terser: insecure use of regular expressions leads to ReDoS
A vulnerability was found in the terser package. Affected versions of this package are vulnerable to Regular expression denial of service ReDoS attacks, affecting system availability...
CVE-2022-21222
A vulnerability was found in the css-what package. The flaw allows Regular expression denial of service ReDoS attacks, affecting system availability...
CVE-2022-40023
A vulnerability was found in the mako package. Affected versions of this package are vulnerable to Regular expression denial of service ReDoS attacks, affecting system availability...
Important: golang
Issue Overview: 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed from this advisory. A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling,...