4864 matches found
SUSE CVE-2021-44026
Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or searchparams...
SUSE CVE-2021-45930
Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps::growAppend called from QPainterPath::addPath and QPathClipper::intersect...
SUSE CVE-2021-45960
In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...
SUSE CVE-2021-46242
HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5ACunpinentry...
SUSE CVE-2022-0318
Heap-based Buffer Overflow in vim/vim prior to 8.2...
SUSE CVE-2022-0393
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
SUSE CVE-2022-0458
Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
SUSE CVE-2022-0519
Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2...
SUSE CVE-2022-0572
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
SUSE CVE-2022-0605
Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...
SUSE CVE-2022-0630
Out-of-bounds Read in Homebrew mruby prior to 3.2...
SUSE CVE-2022-0696
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428...
SUSE CVE-2022-0711
A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerabili...
SUSE CVE-2022-0714
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436...
SUSE CVE-2022-0793
Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted Chrome Extension...
SUSE CVE-2022-0860
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...
SUSE CVE-2022-0943
Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563...
SUSE CVE-2022-1071
User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...