quark-auto-save 安全漏洞

Quark-auto-save is a personal development tool created by Cp0204, designed for automatic transfer of data to Quark Cloud Storage and management of sign-ins. Versions of quark-auto-save prior to 0.8.5 contained security vulnerabilities. These vulnerabilities stemmed from a batch assignment...

SUSE CVE-2023-0591

ubireaderextractfiles is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory provided the process has write access to that file or directory. This is due to the fact that a node name...

GHSA-VP2X-3MC3-3CJ4 Path traversal in ubi-reader

ubireaderextractfiles is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory provided the process has write access to that file or directory. This is due to the fact that a node name...

UBUNTU-CVE-2021-3746

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerabili...

Andrew Harding SPIRE 信任管理问题漏洞

Andrew Harding SPIRE is an open source application by Andrew Harding. A toolchain that provides an API for establishing trust between software systems on various hosting platforms. A security vulnerability exists in SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12. No information about...

Shaarli cross-site scripting vulnerability (CNVD-2018-03979)

Shaarli is a set of website cloning tools from the French Sebsauvage project. A cross-site scripting vulnerability exists in versions of Shaarli before 0.8.5 and 0.9.x before 0.9.3. A remote attacker can exploit this vulnerability to inject arbitrary code via the username field of the login form...

DEBIAN-CVE-2012-2803

Double free vulnerability in the mpegdecodeframe function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to resetting the data size value...