CVE-2024-0402

CVE-2024-0402: A path traversal flaw in GitLab CE/EE allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace. Affected versions are 16.0–16.0.x up to 16.6.5, 16.7.x up to 16.7.3, and 16.8.x up to 16.8.0. Exploitation details are not provi...

CVE-2023-42527

Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive information...

PT-2023-6819 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev605-gfc9e29089-master Description: The issue is related to a heap-buffer-overflow in the gf isom use compact size function of the GPAC multimedia platform. This can be exploited to cause a denial of service. The...

SUSE CVE-2023-38665

Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash...

DEBIAN-CVE-2023-38665

Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash...

AZL-35021 CVE-2023-38665 affecting package nasm 2.16.01-2

Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash...

UBUNTU-CVE-2023-38665

Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash...

nasm 代码问题漏洞

Nasm is an open source programming tool software from The Nasm Development Team team. A security vulnerability exists in nasm version 2.16rc0, which stems from a null pointer dereference issue in ieeewritefile...

PT-2023-26538

Name of the Vulnerable Software and Affected Versions nasm version 2.16rc0 Description The issue is a null pointer dereference in the ieee write file function, which allows attackers to cause a denial of service, resulting in a crash. Recommendations For nasm version 2.16rc0, consider disabling t...

Path traversal

In imo.im 2022.11.1051, a path traversal vulnerability delivered via an unsanitized deeplink can force the application to write a file into the application's data directory. This may allow an attacker to save a shared library under a special directory which the app uses to dynamically load module...

PT-2023-5284 · Libeconf +1 · Libeconf +1

Name of the Vulnerable Software and Affected Versions: libeconf affected versions not specified Description: The issue is related to the econf writeFile function in the libeconf library, which is used for configuration file analysis and management. It involves a buffer overflow in memory, allowin...

SUSE CVE-2022-46457

NASM v2.16 was discovered to contain a segmentation violation in the component ieeewritefile at /output/outieee.c...

CVE-2023-21445: Improper Access Control

Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R11, 13.1.03.501 in Android S12 and 14.1.00.422 in Android T13 allows local attacker to write file with MyFiles privilege via implicit intent...

CVE-2022-1943

...

MingSoft MCMS 代码问题漏洞

MingSoft MCMS is a complete open-source J2ee system from China's MingSoft. A security vulnerability exists in MCMS v5.2.10, which stems from the ms/template/writeFileContent.do component that allows an attacker to achieve arbitrary file uploads...

NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.

...

AZL-12934 CVE-2022-46457 affecting package nasm for versions less than 2.16-1

NASM v2.16 was discovered to contain a segmentation violation in the component ieeewritefile at /output/outieee.c...

PT-2023-9324 · Unknown +2 · Netwide Assembler +2

Name of the Vulnerable Software and Affected Versions: Netwide Assembler NASM version 2.16 Description: The issue is related to a segmentation violation in the ieee write file component at /output/outieee.c of the Netwide Assembler NASM. This can lead to a denial of service. The problem is...

CVE-2022-3184: Improper Limitation of a Pathname to a Restricted Directory

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the device’s existing firmware allows unauthenticated users to access an old PHP page vulnerable to directory traversal, which may allow a user to write a file to the webroot directory...

PT-2022-34291

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.211 Description The issue is related to a potential information leak in the wil write file wmi function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...