CVE-2021-30218

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

CVE-2021-30218

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

CVE-2021-30218

CVE-2021-30218 affects samurai 1.2 and is caused by a NULL pointer dereference in writefile() within util.c triggered by a crafted build file. The issue is documented across multiple feeds (Red Hat, NVD, OSV, Veracode) with consistent description. CVSS data (NVD) indicates a low to medium overall...

Samurai code issue vulnerabilities

samurai is a ninja-compatible build utility written in C. A security vulnerability exists in samurai 1.2, which originates from dereferencing a NULL pointer in writefile in util.c via a crafted build file...

PT-2021-18670

Name of the Vulnerable Software and Affected Versions samurai version 1.2 Description The issue is related to a NULL pointer dereference in the writefile function, located in util.c, which can be triggered by a crafted build file. Recommendations For version 1.2, consider restricting access to th...

CVE-2021-30218: NULL Pointer Dereference

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

CVE-2021-28154

Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...

CVE-2021-28154

Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...

CVE-2021-28154

Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...

CVE-2021-28154: Missing Authorization

Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...

CVE-2019-17371

gif2png 2.5.13 has a memory leak in the writefile function...

CVE-2019-18997: Improper Protection of Alternate Path

The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file. Path configuration in PB610 HMISimulator versions 2.8.0.424 and earlier potentially allows access to files outside of the working directory, thus potentially supporting...

PT-2019-15748

Name of the Vulnerable Software and Affected Versions ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier Description The issue concerns the HMISimulator component, which uses the readFile/writeFile interface. It potentially allows access to files outside of the working directory due to pa...

CVE-2019-17371

gif2png 2.5.13 has a memory leak in the writefile function...

Memory corruption

gif2png 2.5.13 has a memory leak in the writefile function...

UBUNTU-CVE-2019-17371

gif2png 2.5.13 has a memory leak in the writefile function...

CVE-2019-17371

gif2png 2.5.13 has a memory leak in the writefile function...

CVE-2019-17371

gif2png 2.5.13 has a memory leak in the writefile function...

CVE-2019-17371

gif2png 2.5.13 has a memory leak in the writefile function...

PT-2019-4531

Name of the Vulnerable Software and Affected Versions gif2png version 2.5.13 libpng affected versions not specified Description The issue is related to a memory leak in the writefile function and concerns the png malloc warn and png create info struct functions of the libpng library. This is due ...