PYSEC-2022-170

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

UBUNTU-CVE-2022-24766

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

SUSE-FU-2022:0868-1 Feature update for tcl and tk

This feature update for tcl and tk fixes the following issues: Update tcl and tk to version 8.6.12 jscSLE-21016, jscSLE-23284: - Move tcl.macros to /usr/lib/rpm/macros.d bsc1185662 - Use FAT LTO objects in order to provide proper static library bsc1138797 - Fix a bug in itcl that was affecting...

CVE-2022-22834

An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XSLT Injection vulnerability. Attackers could exploit this issue to achieve remote code execution...

abcm2ps 缓冲区错误漏洞

abcm2ps is a command line program by Sammy S. Individual developer in the United States. It can convert music tunes from ABC music notation to PostScript or SVG. A security vulnerability exists in abcm2ps v8.14.11 that allows remote attackers to cause a denial of service DoS via an unspecified...

DEBIAN-CVE-2022-26127

A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babelpacketexamin function in babeld/message.c...

FRRouting FRR 缓冲区错误漏洞

FRRouting FRR is a suite of software that implements and manages various IPV4 and IPV6 routing protocols. A buffer error vulnerability exists in FRRouting FRR, which stems from incorrect checking of input packet lengths in the babelpacketexamin function in babeld/message.c. A buffer overflow...

ALPINE-CVE-2022-0629

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

ALPINE-CVE-2022-0572

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-0554

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2...

CVE-2022-0474

Full list of recipients from customer users in a contact field could be disclosed in notification emails event when the notification is set to be sent to each recipient individually. This issue affects: OTRS AG OTRSCustomContactFields 8.0.x version: 8.0.11 and prior versions...

CVE-2021-44978

iCMS = 8.0.0 allows users to add and render a comtom template, which has a SSTI vulnerability which causes remote code execution...

UBUNTU-CVE-2022-0417

Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2...

AZL-8459 CVE-2022-0408 affecting package vim for versions less than 8.2.4743-1

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-0413

Use After Free in GitHub repository vim/vim prior to 8.2...

UBUNTU-CVE-2022-0413

Use After Free in GitHub repository vim/vim prior to 8.2...

DEBIAN-CVE-2022-0393

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

ALPINE-CVE-2022-0392

Heap-based Buffer Overflow in GitHub repository vim prior to 8.2...

UBUNTU-CVE-2022-0368

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior 7.5.24 and prior 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).

...