CVE-2025-24336

CVE-2025-24336 concerns the SXF Common Library (OCF) where improper input data handling can cause a product that uses the library to crash when reading a crafted file. Public sources consistently describe the affected component as the SXF Common Library and cite the underlying issue as mishandlin...

CVE-2025-24336

SXF Common Library handles input data improperly. If a product using the library reads a crafted file, the product may be crashed...

PT-2025-5334 · Unknown · Sxf Common Library

Name of the Vulnerable Software and Affected Versions: SXF Common Library affected versions not specified Description: The SXF Common Library improperly handles input data. If a product using the library reads a crafted file, it may cause the product to crash. Recommendations: At the moment, ther...

SXF Common Library vulnerable to improper input data handling

Overview SXF Common Library provided by General Incorporated Association OCF is vulnerable to improper input data handling CWE-237. Koh M. Nakagawa reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact If a produc...

SXF Common Library 安全漏洞

SXF Common Library is a common library in the SXF Common Library open source. A security vulnerability exists in SXF Common Library that stems from mishandling of input data and may cause a crash if a product using the library reads a carefully crafted file...

JVN#23839833: SXF Common Library vulnerable to improper input data handling

SXF Common Library provided by General Incorporated Association OCF is vulnerable to improper input data handling CWE-237. Impact If a product using the library reads a crafted file, the product may be crashed. Solution Apply the workaround Applying the following workaround may mitigate the impac...

emlog 代码注入漏洞

emlog is a PHP and MySQL based CMS for personal developers of emlog. A code injection vulnerability exists in emlog 2.4.1 and earlier versions, which stems from a cross-site scripting attack caused by manipulation of the msg parameter in the /include/lib/common.php library...

Malicious code in certain-common-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4a6d86cf99227285396bb8d34406295f57bf5c78fe1bf3b54b181ca6908cf93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10894 Malicious code in certain-common-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4a6d86cf99227285396bb8d34406295f57bf5c78fe1bf3b54b181ca6908cf93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the containers-common library in the Golang programming language arises from improper resolution of references before accessing files. This allows attackers to gain access to confidential information.

The vulnerability of the containers-common library in the Golang programming language is related to improper resolution of references before accessing files. Exploiting this vulnerability can allow an attacker to gain access to confidential information by using symbolic references, by mounting...

Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host...

Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host...

Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host...

Security update for podman

This update for podman fixes the following issues: CVE-2024-9341: Fixed FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library bsc1231230 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE CVE-2024-9341

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host...

The vulnerability of the C-language streaming video game Moonlight-common-c library, related to buffer overflow in the stack, allows for a service failure or the execution of arbitrary code.

The vulnerability of the C-language streaming video game Moonlight-common-c library is related to buffer overflow in the stack. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...

Malicious code in axis-common-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d46e6aa49acd26b8f52fc1e1d11ffa3fb20d5efa8e9648fb414a0c25aaa81480 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2007-5589

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HTML via certain input available in 1 PHPSELF in a serverstatus.php, and b grabglobals.lib.php, c displaychangepassword.lib.php, and d common.lib.php in...

UBUNTU-CVE-2015-5723

Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for cache directories, which allows local...

SXF Common Library Buffer Overflow Vulnerability

SXF Common Library is a library for importing and exporting CAD files in SXF format. A buffer overflow vulnerability in SXF Common Library allows an attacker to construct a malicious file and trick a user into parsing it, which could crash the application...