29 matches found
curl: Incomplete Suppression of Transfer-Encoding: chunked Header in HTTP/2 After Redirect From HTTP/1.1
When curl send a request with Transfer-Encoding: chunked using HTTP/1.1, and follows a redirect to an HTTP/2 endpoint, the uploadchunky flag is not properly reset. As a result, the Transfer-Encoding: chunked header is sent in the subsequent request even when HTTP/2 is negotiated/used. This violat...
EUVD-2021-1842
Malware in sbrugna...
EUVD-2024-52897
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2017-9996
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cdxldecodeframe function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before...
CVE-2024-55997
Missing Authorization vulnerability in webchunky Order Delivery & Pickup Location Date Time order-delivery-pickup-location-date-time-free-version allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery & Pickup Location Date Time: from n/a through...
CVE-2020-36433
An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement...
UBUNTU-CVE-2025-29069
A heap buffer overflow vulnerability has been identified in the lcms2-2.16. The vulnerability exists in the UnrollChunkyBytes function in cmspack.c, which is responsible for handling color space transformations...
Little CMS security vulnerability
Little CMS lcms or liblcms is an open source color management system by the individual developer Marti Maria. The system provides black point compensation, handling of multiple pixel formats, profile editing, and other features. A security vulnerability exists in Little CMS version 2.16, which...
CVE-2024-55997
Missing Authorization vulnerability in webchunky Order Delivery & Pickup Location Date Time order-delivery-pickup-location-date-time-free-version allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery & Pickup Location Date Time: from n/a through...
PT-2024-36651
Name of the Vulnerable Software and Affected Versions Web Chunky Order Delivery & Pickup Location Date Time versions through 1.1.0 Description The issue is related to a Missing Authorization vulnerability, which allows attackers to exploit incorrectly configured access control security levels. Th...
GHSA-QG24-8XJ4-GJ2H Unaligned memory allocation in chunky
An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement...
kay (0.1.0) potentially affected by CVE-2020-36433 via chunky (0.1.4)
chunky CARGO version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on chunky and may be impacted: - kay 0.1.0 Source cves: CVE-2020-36433 Source advisory: GHSA-QG24-8XJ4-GJ2H...
kay (0.1.0) potentially affected by CVE-2020-36433 via chunky (0.1.4)
chunky CARGO version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on chunky and may be impacted: - kay 0.1.0 Source cves: CVE-2020-36433 Source advisory: OSV:GHSA-QG24-8XJ4-GJ2H...
Unaligned memory allocation in chunky
An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement...
CVE-2020-36433
An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement...
CVE-2020-36433
An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement...
Design/Logic Flaw
An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement...
CVE-2020-36433
An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement...
CVE-2020-36433
The CVE-2020-36433 entry concerns the chunky crate for Rust. The vulnerability is described as: the Chunk API does not honor an alignment requirement, allowing the creation of unaligned references and resulting in undefined behavior. This issue affects the chunky crate up to 2020-08-25 and has an...
