99 matches found
CVE-2022-25139
njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njsawaitfulfilled...
Xmill Stack Buffer Overflow Vulnerability
Xmill is an efficient compressor of XML data. a stack buffer overflow vulnerability exists in the command line parsing HandleFileArg function in Xmill version 0.7. An attacker could exploit the vulnerability by providing malicious input via the filepattern parameter to cause a denial of service...
PT-2021-7822 · Xmill · Xmill
Name of the Vulnerable Software and Affected Versions: Xmill version 0.7 Description: A stack-based buffer overflow issue exists in the command-line-parsing HandleFileArg functionality. The filepattern argument, which is under user control, is passed to strcpy without length checks, leading to a...
AT&T Labs Xmill 缓冲区错误漏洞
AT&T Labs Xmill is a new tool for efficient compression of XML data from AT&T Labs, USA. A security vulnerability exists in the XML Decompression LabelDict::Load function in AT&T Labs Xmill version 0.7. An attacker could exploit the vulnerability to remotely execute code...
PT-2021-7816 · Xmill · Xmill
Name of the Vulnerable Software and Affected Versions: Xmill version 0.7 Description: A heap-based buffer overflow issue exists in the XML Decompression LabelDict::Load functionality. This can be triggered by a specially crafted XMI file, potentially leading to remote code execution. An attacker...
CVE-2020-10937
An issue was discovered in IPFS aka go-ipfs 0.4.23. An attacker can generate ephemeral identities Sybils and leverage the IPFS connection management reputation system to poison other nodes' routing tables, eclipsing the nodes that are the target of the attack from the rest of the network. Later...
Teeworlds Access Control Error Vulnerability
Teeworlds is a multiplayer online shooter. A security vulnerability exists in the CServer::SendMsg file in engine/server/server.cpp in versions 0.7.x prior to Teeworlds 0.7.5. A remote attacker could use this vulnerability to shut down the server...
UBUNTU-CVE-2020-12066
CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server...
GNU LibreDWG Multiple Security Vulnerabilities
Description GNU LibreDWG is prone to multiple security vulnerabilities. Attackers can exploit these issues to cause denial-of-service conditions. Due to the nature of these issues, code execution may be possible but this has not been confirmed. Versions prior to GNU LibreDWG 0.9.3 are vulnerable...
libmysofa Null Pointer Dereference Vulnerability
libmysofa is a library for reading AES SOFA files. A null pointer dereference vulnerability exists in getHrtf in hrtf/reader.c in libmysofa 0.7. No details of the vulnerability are provided at this time...
UBUNTU-CVE-2019-16092
Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c...
UBUNTU-CVE-2019-16094
Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c...
PT-2019-14502 · Symonics +2 · Libmysofa +2
Name of the Vulnerable Software and Affected Versions: Symonics libmysofa version 0.7 Description: The issue is related to an invalid write in the readOHDRHeaderMessageDataLayout function located in hdf/dataobject.c. Recommendations: For Symonics libmysofa version 0.7, consider applying a patch o...
PT-2019-14501 · Symonics +2 · Libmysofa +2
Name of the Vulnerable Software and Affected Versions: Symonics libmysofa version 0.7 Description: The issue is related to a NULL pointer dereference in the getHrtf function located in hrtf/reader.c. Recommendations: For Symonics libmysofa version 0.7, consider applying a patch or fix that...
PT-2019-14504 · Symonics +2 · Libmysofa +2
Name of the Vulnerable Software and Affected Versions: Symonics libmysofa version 0.7 Description: The issue is related to an invalid read in the getDimension function located in hrtf/reader.c. This problem can lead to unintended behavior. Recommendations: For Symonics libmysofa version 0.7,...
PT-2019-14500 · Symonics +2 · Libmysofa +2
Name of the Vulnerable Software and Affected Versions: Symonics libmysofa version 0.7 Description: The issue is related to an out-of-bounds read in the directblockRead function located in hdf/fractalhead.c. Recommendations: For version 0.7, at the moment, there is no information about a newer...
Debian DLA-1783-1 : atftp security update
Denis Andzakovic discovered two vulnerabilities in atftp, the advanced TFTP server which could result in denial of service by sending malformed packets. For Debian 8 'Jessie', these problems have been fixed in version 0.7.git20120829-1+deb8u1. We recommend that you upgrade your atftp packages...
KDE Trojita Encryption Problem Vulnerability
KDE Trojita is a lightweight IMAP email client for the KDE community. A security vulnerability exists in KDE Trojita version 0.7. An attacker can exploit this vulnerability to cause information disclosure...
GNU LibreDWG Buffer Overflow Vulnerability (CNVD-2019-12552)
GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'bitreadB' function of the bits.c file in GNU LibreDWG version 0.7 and 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service or disclose information...
SansCMS Cross-Site Scripting Vulnerability
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the blog/index.php file in SansCMS version 0.7. A remote attacker can exploit this vulnerabilit...