WWBN AVideo videoAddNew cross-site scripting (XSS) vulnerability

Talos Vulnerability Report TALOS-2022-1540 WWBN AVideo videoAddNew cross-site scripting XSS vulnerability August 16, 2022 CVE Number CVE-2022-28712 SUMMARY A cross-site scripting xss vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A...

WWBN AVideo ObjectYPT SQL injection vulnerability

Talos Vulnerability Report TALOS-2022-1551 WWBN AVideo ObjectYPT SQL injection vulnerability August 16, 2022 CVE Number CVE-2022-33147,CVE-2022-34652,CVE-2022-33149,CVE-2022-33148 SUMMARY A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit...

XPDF 代码问题漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that stems from DCTStream::readMCURow in /xpdf/Stream.cc contains a segmentation violation...

XPDF 安全漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that originates from /xpdf/Lexer.cc in Lexer::getObjObject contains a global buffer overflow...

PT-2022-24303 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A segmentation violation was discovered in XPDF via the Lexer::getObjObject function at /xpdf/Lexer.cc. This issue was identified in XPDF commit ffaf11c. Recommendations: At the moment, there ...

CVE-2022-36141: Improper Check for Unusual or Exceptional Conditions

SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::MethodBody::writeSWF::Writer, SWF::Context...

SWFMill 缓冲区错误漏洞

SWFMill is a tool for working with Adobe Flash SWF files by Daniel Cassidy, a personal developer in the UK. A security vulnerability exists in SWFMill commit number: 53d7690 that stems from a heap buffer overflow in its SWF::Reader::getU30 function...

SWFMill 代码问题漏洞

SWFMill is a tool for working with Adobe Flash SWF files by Daniel Cassidy, a personal developer in the UK. A security vulnerability exists in SWFMill commit number: 53d7690 that stems from a memory segment exception in its SWF::DeclareFunction2::writeSWF::Writer, SWF::Context function...

SWFMill 代码问题漏洞

SWFMill is a tool for working with Adobe Flash SWF files by Daniel Cassidy, a personal developer in the UK. A code issue vulnerability exists in SWFMill commit number: 53d7690 that stems from a memory segment exception in its SWF::Reader::getWord function...

SWFMill 代码问题漏洞

SWFMill is a tool for working with Adobe Flash SWF files by Daniel Cassidy, a personal developer in the UK. A code issue vulnerability exists in SWFMill commit number: 53d7690 that stems from a memory segment exception in its SWF::MethodBody::writeSWF::Writer, SWF::Context function...

XPDF 缓冲区错误漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that originates from DCTStream::readScan in /xpdf/Stream.cc contains a heap buffer overflow...

SWFMill 缓冲区错误漏洞

SWFMill is a tool for working with Adobe Flash SWF files by Daniel Cassidy, a personal developer in the UK. A security vulnerability exists in SWFMill commit number: 53d7690 that stems from a heap buffer overflow in the interceptorstrlen.part of its /sanitizercommon/sanitizercommoninterceptors.in...

jpeg-quantsmooth 安全漏洞

jpeg-quantsmooth is a quantization coefficient-based JPEG artifact removal by the individual developer Ilya Kurdyukov in Russia. A security vulnerability exists in jpeg-quantsmooth in versions prior to commit 8879454, which stems from a floating point exception in /jpeg-quantsmooth/jpegqs+0x4f5d6...

PT-2022-24296 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A stack overflow issue was discovered in XPDF, specifically in the commit ffaf11c, via the asan memcpy function at asan interceptors memintrinsics.cpp. Recommendations: At the moment, there is...

SWFMill 安全漏洞

SWFMill is a tool for working with Adobe Flash SWF files by Daniel Cassidy, a personal developer in the UK. A security vulnerability exists in SWFMill commit number: 53d7690, which stems from a memory allocation problem in new in its asannewdelete.cpp component...

CVE-2022-2819

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211...

CVE-2022-2503

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear...

Possible cross-site scripting vulnerability in libxml after commit 960f0e2.

...

CVE-2022-35928

AES Crypt is a file encryption software for multiple platforms. AES Crypt for Linux built using the source on GitHub and having the version number 3.11 has a vulnerability with respect to reading user-provided passwords and confirmations via command-line prompts. Passwords lengths were not checke...

GSD-2022-1004948 nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred

nfc: nfcmrvl: Fix memory leak in nfcmrvlplaydeferred This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.320 by commit...