20668 matches found
ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
A flaw was found in Ghostscript/base/gputf8.c. This vulnerability allows directory traversal via overlong UTF-8 encoding, potentially leading to unauthorized access to filesystem directories...
kernel: usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
A flaw was found in the Linux kernel's USB Type-C driver. A local user with administrative privileges can exploit this flaw by providing a crafted command through the debug file system debugfs. This issue results in an array underflow and out-of-bounds memory access, which may lead to a system...
ALSA-2025:7502 Moderate: nodejs22 security update
Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...
ALSA-2025:7433 Important: nodejs:22 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: c-ares: c-ares has a use-after-free in readanswers CVE-2025-31498 SQLite: integer overflow in SQLite CVE-2025-3277 For more details about the...
ALSA-2025:7426 Moderate: nodejs:20 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: c-ares: c-ares has a use-after-free in readanswers CVE-2025-31498 For more details about the security issues, including the impact, a CVSS score,...
CVE-2024-47795: Uncontrolled Search Path Element
Uncontrolled search path for some IntelR oneAPI DPC++/C++ Compiler software before version 2025.0.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
Important: nodejs:22 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: c-ares: c-ares has a use-after-free in readanswers CVE-2025-31498 SQLite: integer overflow in SQLite CVE-2025-3277 For more details about the...
Moderate: nodejs:20 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: c-ares: c-ares has a use-after-free in readanswers CVE-2025-31498 For more details about the security issues, including the impact, a CVSS score,...
CVE-2025-4540
A vulnerability was found in MTSoftware C-Lodop 6.6.1.1 on Windows. It has been rated as critical. This issue affects some unknown processing of the component CLodopPrintService. The manipulation leads to unquoted search path. The attack needs to be approached locally. The complexity of an attack...
CVE-2025-4540 MTSoftware C-Lodop CLodopPrintService unquoted search path
A vulnerability was found in MTSoftware C-Lodop 6.6.1.1 on Windows. It has been rated as critical. This issue affects some unknown processing of the component CLodopPrintService. The manipulation leads to unquoted search path. The attack needs to be approached locally. The complexity of an attack...
CVE-2025-4540 MTSoftware C-Lodop CLodopPrintService unquoted search path
A vulnerability was found in MTSoftware C-Lodop 6.6.1.1 on Windows. It has been rated as critical. This issue affects some unknown processing of the component CLodopPrintService. The manipulation leads to unquoted search path. The attack needs to be approached locally. The complexity of an attack...
CVE-2025-4540
CVE-2025-4540 – MTSoftware C-Lodop (CLodopPrintService) Affected: MTSoftware C-Lodop, versions 6.6.1.1 through 6.6.12. The issue resides in CLodopPrintService and causes an unquoted search path vulnerability. Impact/attack: Local attacker can trigger the vulnerability; attack complexity is high w...
CVE-2025-4541: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in LmxCMS 1.41. Affected is the function manageZt of the file c\admin\ZtAction.class.php of the component POST Request Handler. The manipulation of the argument sortid leads to sql injection. It is possible to launch the attack remotely. The...
PT-2025-20662 · Mtsoftware · C-Lodop
Name of the Vulnerable Software and Affected Versions: MTSoftware C-Lodop versions 6.6.1.1 through 6.6.12 Description: A critical issue affects some unknown processing of the component CLodopPrintService, leading to an unquoted search path. The attack needs to be approached locally, with a rather...
CVE-2025-4540: Unquoted Search Path or Element
A vulnerability was found in MTSoftware C-Lodop 6.6.1.1 on Windows. It has been rated as critical. This issue affects some unknown processing of the component CLodopPrintService. The manipulation leads to unquoted search path. The attack needs to be approached locally. The complexity of an attack...
MTSoftware C-Lodop 代码问题漏洞
MTSoftware C-Lodop is a cloud-based Web printing control from China-based MTSoftware that supports cross-browser silent printing and complex report design. A code issue vulnerability exists in MTSoftware C-Lodop version 6.6.1.1, which stems from the presence of unquoted search paths in the...
UBUNTU-CVE-2025-47814
libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from spvreadxmlmember in zip-reader.c...
CVE-2025-43878
When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system. Note: Software versions which have reached End of...
An Empirical Study of Fuzz Harness Degradation
The purpose of continuous fuzzing platforms is to enable fuzzing for software projects via \emphfuzz harnesses -- but as the projects continue to evolve, are these harnesses updated in lockstep, or do they run out of date? If these harnesses remain unmaintained, will they \emphdegrade over time i...