PT-2022-37391 · Pypi · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-xml version 0.1.0 d8s-htm version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-xml package for python distributed on PyPI. Another affected package is democritus-utility, which also...

Democritus Project 代码问题漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A code execution vulnerability exists in Democritus Project d8s-xml, which stems from the existence of a potential code execution backdoor inserted by a third party in the...

CVE-2022-44054

CVE-2022-44054 concerns the Python d8s-xml package distributed on PyPI, with a potential code-execution backdoor linked to the democritus-utility package. The description explicitly states a code-execution backdoor inserted by a third party, affecting the d8s-htm component version 0.1.0. External...

PT-2022-27095 · Pypi · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-xml version 0.1.0 d8s-htm version 0.1.0 Description: The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is...

CVE-2022-44054

The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-utility package. The affected version of d8s-htm is 0.1.0...

PT-2022-37356 · Pypi · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-xml version 0.1.0 d8s-htm version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-xml package for python distributed on PyPI. Another affected package is democritus-utility, which also...

CVE-2022-44054

The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-utility package. The affected version of d8s-htm is 0.1.0...

Amazon Linux 2022 : gzip (ALAS2022-2022-188)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-188 advisory. An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file name, this can overwrite an attacker's...

Amazon Linux 2022 : xz, xz-devel, xz-libs (ALAS2022-2022-187)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-187 advisory. An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file name, this can overwrite an attacker's...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-2689)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to...

PT-2022-5288 · Kaspersky · Kavremover +1

Name of the Vulnerable Software and Affected Versions: Kaspersky Endpoint Security affected versions not specified Kavremover affected versions not specified Description: The issue is related to an uncontrolled search path element in the installation file of Kaspersky Endpoint Security and the...

UBUNTU-CVE-2022-3570

Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact...

PT-2022-7235 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: A logic issue was addressed with improved state management, which may allow an app to modify protected parts of the file system. The issue is related to insufficient access control in the Beta Access...

Stack overflow

IOWOW is a C utility library and persistent key/value storage engine. Versions 1.4.15 and prior contain a stack buffer overflow vulnerability that allows for Denial of Service DOS when it parses scientific notation numbers present in JSON. A patch for this issue is available at commit...

Securing IoT devices against attacks that target critical infrastructure

South Staffordshire PLC, a company that supplies water to over one million customers in the United Kingdom, notified its customers in August of being a target of a criminal cyberattack. This incident highlights the sophisticated threats that critical industries face today. According to South...

Securing IoT devices against attacks that target critical infrastructure

South Staffordshire PLC, a company that supplies water to over one million customers in the United Kingdom, notified its customers in August of being a target of a criminal cyberattack. This incident highlights the sophisticated threats that critical industries face today. According to South...

PT-2022-6897 · Libtiff +6 · Libtiff +6

Name of the Vulnerable Software and Affected Versions: libtiff version 4.4.0 Description: The issue is related to a buffer overflow in the tiffcrop utility of the libtiff library, which can be triggered by a crafted TIFF image file. This may result in an application crash, potential information...

The vulnerability in the implementation of the Export Utility function of the Ultimate SMS Notifications plugin for WooCommerce, a content management system for WordPress websites, allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Export Utility function implementation in the Ultimate SMS Notifications plugin for WooCommerce, a content management system for WordPress websites, is related to the absence of a mechanism to neutralize elements in the CSV file. Exploiting this vulnerability could allow ...

OTFCC Buffer Overflow Vulnerability (CNVD-2023-11782)

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files.OTFCC 0.10.4 and earlier versions have a buffer overflow vulnerability that originates in /release-x64/otfccdump 0x6b84b1 with a boundary error when processing untrusted input, which can be...

OTFCC Buffer Overflow Vulnerability (CNVD-2023-11777)

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files.OTFCC 0.10.4 and earlier versions have a buffer overflow vulnerability that originates in /release-x64/otfccdump 0x6b0b2c with a boundary error when processing untrusted input, which can be...