Lucene search
+L

740 matches found

OSV
OSV
•added 2022/08/19 3:55 a.m.•15 views

MAL-2022-7003 Malicious code in vuez-template-compile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faf4115988e70fed761d8f3611ce6b309fa2efe3560f15a0a66e9471e34fe3b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/08/18 12:00 a.m.•13 views

The vulnerability of the compile_lock_unlock() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the compilelockunlock function in the Vim text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.5AI score0.00569EPSS
SaveExploits1References8Affected Software3
OpenVAS
OpenVAS
•added 2022/08/04 12:00 a.m.•40 views

SUSE: Security Advisory (SUSE-SU-2022:2659-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.3AI score0.01235EPSS
SaveExploits0References2
PyPA
PyPA
•added 2022/07/27 2:15 p.m.•9 views

PYSEC-2022-43057

WASM3 v0.5.0 was discovered to contain a segmentation fault via the component CompileMemoryCopyFill...

5.5CVSS7.3AI score0.00287EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2022/07/27 12:00 a.m.•10 views

PT-2022-22189 · Wasm3 · Wasm3

Name of the Vulnerable Software and Affected Versions: WASM3 version 0.5.0 Description: The issue is related to a segmentation fault in the Compile Memory CopyFill component. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents...

5.5CVSS5.3AI score0.00287EPSS
SaveExploits1References7
NVD
NVD
•added 2022/06/30 4:15 p.m.•28 views

CVE-2022-2056

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...

6.5CVSS0.01281EPSS
SaveExploits1References8
Prion
Prion
•added 2022/06/30 4:15 p.m.•24 views

Input validation

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...

4.3CVSS6.1AI score0.01333EPSS
SaveExploits1References8Affected Software3
Prion
Prion
•added 2022/06/30 4:15 p.m.•27 views

Input validation

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...

4.3CVSS6.1AI score0.01281EPSS
SaveExploits1References8Affected Software3
OSV
OSV
•added 2022/06/30 12:00 a.m.•39 views

CVE-2022-2058

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...

5.5CVSS4.9AI score
SaveExploits0References10
Debian CVE
Debian CVE
•added 2022/06/30 12:00 a.m.•50 views

CVE-2022-2057

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...

6.5CVSS6.5AI score0.01281EPSS
SaveExploits1
Cvelist
Cvelist
•added 2022/06/30 12:00 a.m.•58 views

CVE-2022-2057

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...

5.5CVSS6.7AI score0.01281EPSS
SaveExploits1References8
Redos
Redos
•added 2022/06/22 12:00 a.m.•45 views

ROS-20220622-02

Vulnerability of the library implementing Perl PCRE2 style regular expressions is related to boundary conditions in the compilexclassmatchingpath function of the pcre2jitcompile.c file. conditions in the compilexclassmatchingpath function of the pcre2jitcompile.c file. Exploitation of the...

9.1CVSS8.9AI score0.03366EPSS
SaveExploits0
attackerkb
attackerkb
•added 2022/06/02 2:15 p.m.•13 views

CVE-2022-31783

Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by loutrace...

5.5CVSS5.3AI score0.01114EPSS
SaveExploits1References6
OSV
OSV
•added 2022/06/02 2:15 p.m.•10 views

UBUNTU-CVE-2022-31783

Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by loutrace...

5.5CVSS6.8AI score0.01114EPSS
SaveExploits1References5
OSV
OSV
•added 2022/05/16 9:15 p.m.•8 views

ALPINE-CVE-2022-1586

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compilexclassmatchingpath function of the pcre2jitcompile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in...

9.1CVSS7AI score0.03366EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2022/05/10 5:52 p.m.•456 views

Exploit for Download of Code Without Integrity Check in Emcosoftware Msi_Package_Builder

CVE-2022-28944 EMCO Software Multiple Products Unauthenticat...

8.8CVSS9AI score0.01496EPSS
SaveExploits2
OSV
OSV
•added 2022/05/01 5:44 p.m.•21 views

GHSA-QC99-G3WM-HGXR Django Arbitrary Code Execution

bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a 1 .po or 2 .mo file...

7.5CVSS7.2AI score0.01653EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2022/05/01 5:44 p.m.•35 views

Django Arbitrary Code Execution

bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a 1 .po or 2 .mo file...

7.5CVSS8AI score0.01653EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2022/04/27 12:00 p.m.•19 views

RUSTSEC-2022-0017 `array!` macro is unsound when its length is impure constant

Affected versions of this crate did substitute the array length provided by an user at compile-time multiple times. When an impure constant expression is passed as an array length such as a result of an impure procedural macro, this can result in the initialization of an array with uninitialized...

7.6AI score
SaveExploits0References3
RustSec
RustSec
•added 2022/04/27 12:00 p.m.•23 views

`array!` macro is unsound when its length is impure constant

Affected versions of this crate did substitute the array length provided by an user at compile-time multiple times. When an impure constant expression is passed as an array length such as a result of an impure procedural macro, this can result in the initialization of an array with uninitialized...

3.3AI score
SaveExploits0Affected Software1
Rows per page
Query Builder