104 matches found
CVE-2022-46908: Undefined Security Weakness
SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE...
CVE-2022-46908
SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE...
CVE-2021-30218
samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...
CVE-2021-30218
samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...
ALPINE-CVE-2021-30218
samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...
CVE-2021-30218
samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...
Null pointer dereference
samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...
CVE-2021-30218
samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...
CVE-2021-30218
samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...
CVE-2021-30218
CVE-2021-30218 affects samurai 1.2 and is caused by a NULL pointer dereference in writefile() within util.c triggered by a crafted build file. The issue is documented across multiple feeds (Red Hat, NVD, OSV, Veracode) with consistent description. CVSS data (NVD) indicates a low to medium overall...
samurai 代码问题漏洞
samurai is a ninja-compatible build utility written in C. A security vulnerability exists in samurai 1.2, which originates from dereferencing a NULL pointer in writefile in util.c via a crafted build file...
CVE-2021-30218: NULL Pointer Dereference
samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...
CVE-2021-28154
Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...
CVE-2021-28154
Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...
CVE-2021-28154
Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...
CVE-2021-28154: Missing Authorization
Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...
CVE-2019-17371
gif2png 2.5.13 has a memory leak in the writefile function...
CVE-2019-18997: Improper Protection of Alternate Path
The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file. Path configuration in PB610 HMISimulator versions 2.8.0.424 and earlier potentially allows access to files outside of the working directory, thus potentially supporting...