CVE-2022-36153

tifig v0.2.2 was discovered to contain a segmentation violation via std::vector ::size const at /bits/stlvector.h...

CVE-2022-36152

tifig v0.2.2 was discovered to contain a memory leak via operator new at /asan/asannewdelete.cpp...

PT-2022-23230 · Tifig · Tifig

Name of the Vulnerable Software and Affected Versions: tifig version 0.2.2 Description: A heap-buffer overflow issue was discovered in tifig via asan memmove at /asan/asan interceptors memintrinsics.cpp. Recommendations: For tifig version 0.2.2, at the moment, there is no information about a newe...

tifig 缓冲区错误漏洞

tifig is a Monostream open source fast HEIF image converter for thumbnails. A security vulnerability exists in tifig version v0.2.2, which stems from a heap buffer overflow in its /asan/asaninterceptorsmemintrinsics.cpp component in asanmemmove...

tifig 安全漏洞

tifig is Monostream open source a fast HEIF image converter for thumbnails. tifig v0.2.2 version has a security vulnerability , the vulnerability stems from its /asan/asannewdelete.cpp component in the new has a memory leak...

tifig 代码问题漏洞

tifig is a Monostream open source fast HEIF image converter for thumbnails. tifig v0.2.2 version of the code problem vulnerability , the vulnerability stems from its /bits/stlvector.h component in the std::vector ::size function has a memory segment exception...

PT-2022-23232 · Tifig · Tifig

Name of the Vulnerable Software and Affected Versions: tifig version 0.2.2 Description: A memory leak was discovered in tifig via the operator new at /asan/asan new delete.cpp. Recommendations: For tifig version 0.2.2, at the moment, there is no information about a newer version that contains a f...

PT-2022-23233 · Tifig · Tifig

Name of the Vulnerable Software and Affected Versions: tifig version 0.2.2 Description: A segmentation violation was discovered in tifig via the size function of std::vector. Recommendations: For tifig version 0.2.2, at the moment, there is no information about a newer version that contains a fix...

PT-2022-23231 · Tifig · Tifig

Name of the Vulnerable Software and Affected Versions: tifig version 0.2.2 Description: A segmentation violation was discovered in tifig via the getType function at /common/bbox.cpp. Recommendations: For version 0.2.2, consider disabling the getType function as a temporary workaround until a patc...

CVE-2022-25604

Authenticated contributor of higher user role Stored Cross-Site Scripting XSS vulnerability discovered in WordPress Price Table plugin versions = 0.2.2...

WordPress plugin Price Table 跨站脚本漏洞

WordPress is a set of blogging platform developed by Wordpress Foundation using PHP language. WordPress plugin is a WordPress application plugin. WordPress Price Table plugin version 0.2.2 and earlier versions are vulnerable to cross-site scripting. An attacker could exploit this vulnerability to...

c-toxcore 信息泄露漏洞

c-toxcore is a peer-to-peer serverless instant messenger designed to make security and privacy easier for the average user. TokTok c-toxcore suffers from an information disclosure vulnerability that stems from the fact that the Onion module in toxcore prior to version 0.2.2 does not restrict whic...

ai.preferred:venom (>=4.0.1 <=4.2.7), ai.stainless:grails-tika (=0.1.0) +6868 more potentially affected by CVE-2021-37714 via org.jsoup:jsoup (>=0.2.2 <=1.14.1)

org.jsoup:jsoup MAVEN version =0.2.2, =4.0.1, =3.4.0, =3.4.0, =0.9.6, =0.9.6, =0.1.1, =0.5.0, =2021.9.1, =2021.9.1, =2023.1.1 and more Source cves: CVE-2021-37714 Source advisory: OSV:GHSA-M72M-MHQ2-9P6C...

XML2Dict XML Entity Expansion Vulnerability

XXE vulnerability in 'XML2Dict' version 0.2.2 allows an attacker to cause a denial of service. The parse function does not properly restrict recursive entity references...

PYSEC-2021-349

XXE vulnerability in 'XML2Dict' version 0.2.2 allows an attacker to cause a denial of service...

PYSEC-2021-349

XXE vulnerability in 'XML2Dict' version 0.2.2 allows an attacker to cause a denial of service...

XML2Dict 代码问题漏洞

XML2Dict is an open source python library for converting python dict and XML types. A security vulnerability exists in XML2Dict, which stems from an XXE vulnerability in version 0.2.2 of XML2Dict. An attacker can exploit this vulnerability to cause a denial of service...

RUSTSEC-2021-0146 Crate `twoway` deprecated by the author

The commit e99b3c7 releasing version 0.2.2 explicitly deprecates twoway in favour of memchr crate...

Heap Based Buffer Overflow in libyaml

Versions 0.2.2 and earlier depend on native libyaml version 0.1.5 or earlier. As such, they are affected by a heap-based buffer overflow vulnerability that may result in a crash or arbitrary code execution when parsing YAML tags. Recommendation - Update to version 0.2.3 that includes a version of...

GHSA-P94W-42G3-F7H4 Holder can (re)create authentic credentials after receiving a credential in vp-toolkit

Impact The verifyVerifiableCredential method check the cryptographic integrity of the Verifiable Credential, but it does not check if the credential.issuer DID matches the signer of the credential. The verifier is impacted by this vulnerability. Patches Patch will be available in version 0.2.2...