219 matches found
SUSE CVE-2019-14288
An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case...
CVE-2021-4281
A vulnerability was found in Brave UX for-the-badge and classified as critical. Affected by this issue is some unknown functionality of the file .github/workflows/combine-prs.yml. The manipulation leads to os command injection. The name of the patch is 55b5a234c0fab935df5fb08365bc8fe9c37cf46b. It...
Command injection
A vulnerability was found in Brave UX for-the-badge and classified as critical. Affected by this issue is some unknown functionality of the file .github/workflows/combine-prs.yml. The manipulation leads to os command injection. The name of the patch is 55b5a234c0fab935df5fb08365bc8fe9c37cf46b. It...
CVE-2021-4281
A vulnerability was found in Brave UX for-the-badge and classified as critical. Affected by this issue is some unknown functionality of the file .github/workflows/combine-prs.yml. The manipulation leads to os command injection. The name of the patch is 55b5a234c0fab935df5fb08365bc8fe9c37cf46b. It...
CVE-2021-4281 Brave UX for-the-badge combine-prs.yml os command injection
A vulnerability was found in Brave UX for-the-badge and classified as critical. Affected by this issue is some unknown functionality of the file .github/workflows/combine-prs.yml. The manipulation leads to os command injection. The name of the patch is 55b5a234c0fab935df5fb08365bc8fe9c37cf46b. It...
CVE-2021-4281: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Brave UX for-the-badge and classified as critical. Affected by this issue is some unknown functionality of the file .github/workflows/combine-prs.yml. The manipulation leads to os command injection. The name of the patch is 55b5a234c0fab935df5fb08365bc8fe9c37cf46b. It...
Malicious code in elm-combine (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f032d3b4018c2dedf944ba7cda3581fbcf43e744ed117c29f34aed9035a0d13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in elm-combine
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2022-2704 Malicious code in elm-combine (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f032d3b4018c2dedf944ba7cda3581fbcf43e744ed117c29f34aed9035a0d13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Mattermost security vulnerabilities
A security vulnerability exists in Mattermost, an open source collaboration platform from Mattermost, a US-based company, which allows system administrators to combine two different permissions/features in a way that allows them to override certain restricted configurations e.g. EnableUploads. No...
OSV-2017-41 Heap-buffer-overflow in OSS_FUZZ_png_combine_row
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3606 Crash type: Heap-buffer-overflow WRITE 4 Crash state: OSSFUZZpngcombinerow OSSFUZZpngreadrow start...
PT-2021-27424
Name of the Vulnerable Software and Affected Versions: libpng affected versions not specified Description: The issue is related to a heap-buffer-overflow write error. Technical details include the crash type being a Heap-buffer-overflow WRITE 4, and the crash state involves functions such as OSS...
PT-2021-27439
Name of the Vulnerable Software and Affected Versions: libpng affected versions not specified Description: The issue is related to a heap buffer overflow, which can cause a crash. The crash occurs in the OSS FUZZ png combine row and OSS FUZZ png read row functions. Recommendations: At the moment,...
GHSA-W6XJ-45GV-FW35 Malicious Package in stream-combine
Version 2.0.2 of stream-combine has malicious code design to steal credentials and credit card information. The code searches all form elements for passwords, credit card numbers and CVC codes. It then uploads the information to a remote server using HTML links embedded in the page or form action...
PT-2020-21543
Name of the Vulnerable Software and Affected Versions stream-combine version 2.0.2 Description The issue concerns malicious code designed to steal sensitive information, including credentials and credit card details. This code searches form elements for passwords, credit card numbers, and CVC...
Xpdf Integer Overflow Vulnerability
Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. An integer overflow vulnerability exists in the JBIG2Bitmap::combine function in JBIG2Stream.cc in Xpdf 4.01.01. An attacker can exploit this vulnerability to cause a denial of service...
Xpdf integer overflow vulnerability (CNVD-2019-26664)
Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. An integer overflow vulnerability exists in the JBIG2Bitmap::combine function in JBIG2Stream.cc in Xpdf 4.01.01. An attacker can exploit this vulnerability to cause a denial of service...
CVE-2019-14288
An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case...