226 matches found
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write due to a segmentation violation in the compositionsolidsourceover component. An attacker can potentially execute arbitrary code by exploiting this vulnerability. Remediation Upgrade lunasvg to version 2.4.1 or higher...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write due to a segmentation violation in the compositionsolidsource component. An attacker can cause a denial of service. Remediation Upgrade lunasvg to version 2.4.1 or higher. References - GitHub Issue Credit: keepinggg...
PYSEC-2024-285
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsourceover...
PYSEC-2024-284
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsource...
PYSEC-2024-285
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsourceover...
PYSEC-2024-284
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsource...
CVE-2024-33768
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsourceover...
PT-2024-25471 · Lunasvg · Lunasvg
Name of the Vulnerable Software and Affected Versions: lunasvg version 2.3.9 Description: The issue is related to a segmentation violation in the component composition solid source over. Recommendations: For lunasvg version 2.3.9, at the moment, there is no information about a newer version that...
De-risk the Software Supply Chain by Expanding Unparalleled Detection Coverage With Qualys VMDR and Software Composition Analysis
QIDs/CVEs When it comes to cybersecurity, speed is key in getting an edge over attackers. But when you consider that vulnerabilities weaponize 24 days faster than then they are remediated on average, cybersecurity stakeholders have a lot of catching up to do. While there are many ways defenders c...
DEBIAN-CVE-2024-21742
Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages...
Say Goodbye to Monolithic EdgeWorkers: Introducing Flexible Composition (Part 2)
...
EulerOS 2.0 SP10 : mutt (EulerOS-SA-2023-3222)
According to the versions of the mutt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Null pointer dereference when viewing a specially crafted email in Mutt 1.5.2 1.5.2 1.5.2 1...
Exploit for Out-of-bounds Write in Hutool
json.org CVE-2022-45688 false positive The project contains...
Exploit for Out-of-bounds Write in Hutool
json.org CVE-2022-45688 false positive The project contains...
Exploit for Out-of-bounds Write in Hutool
json.org CVE-2022-45688 true positive The project illustrate...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
log4shell false positive This is a simple web project with a...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
log4shell true positive This is a simple web project with a...
Say Goodbye to Monolithic EdgeWorkers: Introducing Flexible Composition (Part 1)
...
Snapshot fuzzing direct composition with WTF
Cisco Talos has developed a custom fuzzer using the popular snapshot fuzzer "WTF" which targets Direct Composition in Windows. Talos vulnerability research team used Protocol Buffers developed by Google to serialize and deserialize test cases. The Bochscpu backend of WTF was patched and other...
Discover and Assess the Risk of Embedded Open-Source Software (OSS) Vulnerabilities
Runtime Software Composition Analysis with the Qualys Cloud Agent In a blog post published last week, we discussed the importance of managing risk across software developed in-house. A great deal of that risk is introduced by vulnerabilities in open-source packages like Log4Shell, OpenSSL, etc...