loxilb 安全漏洞

loxilb is an eBPF-based Kubernetes cloud-native load balancer from loxilb open source. A security vulnerability exists in loxilb version 0.9.7 and earlier, which stems from improper access control and could allow an attacker to obtain sensitive information and elevate privileges...

WordPress Admin Options Pages plugin <= 0.9.7 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dimas Maulana in WordPress Plugin Admin Options Pages versions = 0.9.7...

radare2 security vulnerability

radare2 is a set of libraries and tools for working with binaries. A security vulnerability exists in radare2 versions v.0.9.7 through v.5.8.6, which originated from a vulnerability that allows a local attacker to cause a denial of service via the grubsfsreadextent function...

SUSE CVE-2007-5135

Off-by-one error in the SSLgetsharedciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738...

Libbpg library integer overflow vulnerability

Libbpg library is a new image format library. An integer overflow vulnerability exists in the BPG image decoding process in Libbpg library versions 0.9.4 and 0.9.7. An attacker can exploit this vulnerability to execute code with specially crafted BPG images...

[SA17316] Flyspray Cross-Site Scripting Vulnerabilities

TITLE: Flyspray Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA17316 VERIFY ADVISORY: http://secunia.com/advisories/17316/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Flyspray 0.x http://secunia.com/product/5995/ DESCRIPTION: Lostmon has reported...

security flaw

The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings...

security flaw

The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings...