6799 matches found
CVE-2022-33977
untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service DoS condition on the server where the...
untangle 代码问题漏洞
untangle is a package from the individual developer Christian Stefanescu in Germany. It is used to convert XML to Python objects. A code issue vulnerability exists in untangle that stems from insufficient validation of user-supplied XML input...
[SECURITY] Fedora 35 Update: golang-github-lofanmi-pinyin-1.0-4.fc35
This package provides tools and Golang library to convert Chinese characters to Pinyin...
CVE-2022-34031
Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njsvaluetonumber at src/njsvalueconversion.h...
Fedora: Security Advisory for golang-jaytaylor-html2text (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Accusoft ImageGear PSD Header processing memory allocation out-of-bounds write vulnerability
Summary An out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft ImageGear 20.0. A specially-crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions...
[SECURITY] Fedora 35 Update: golang-jaytaylor-html2text-0-0.2.20220509gitbc68cce.fc35
Golang HTML to plaintext conversion library...
[SECURITY] Fedora 35 Update: golang-gopkg-neurosnap-sentences-1-1.0.6-14.fc35
This command line utility will convert a blob of text into a list of sentence s...
[SECURITY] Fedora 35 Update: golang-github-axgle-mahonia-0-0.13.20181112git3358181.fc35
Mahonia is a character-set conversion library implemented in Go. All data is compiled into the executable; it doesn't need any external data files...
Updated java packages fix security vulnerability
OpenJDK: Defective secure validation in Apache Santuario Libraries, 8278008 CVE-2022-21476 OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions JAXP, 8270504 CVE-2022-21426 OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler Libraries, 8277672...
AutoTrace 缓冲区错误漏洞
AutoTrace is a suite of software for converting Bitmap files to Vector files. A security vulnerability exists in AutoTrace version v0.40.0, which stems from a heap overflow condition found in the ReadImage function via input-bmp.c:660...
[SECURITY] Fedora 36 Update: go-bindata-3.0.7-22.gita0ff256.fc36
A small utility which generates Go code from any file This tool converts any file into managable Go source code. Useful for embedding binary data into a go program. The file data is optionally gzip compressed before being converted to a raw byte slice...
CentOS 8 : ruby:2.6 (CESA-2022:5338)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:5338 advisory. - Ruby: Buffer overrun in String-to-Float conversion CVE-2022-28739 Note that Nessus has not tested for this issue but has instead relied only on the...
Multiple MediaTek chips audio DSP type conversion vulnerability
MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...
Qualcomm 芯片代码问题漏洞
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. A code issue vulnerability exists in various Qualcomm products th...
Design/Logic Flaw
Frontier is Substrate's Ethereum compatibility layer. In affected versions the truncation done when converting between EVM balance type and Substrate balance type was incorrectly implemented. This leads to possible discrepancy between appeared EVM transfer value and actual Substrate value...
PT-2022-20536
Name of the Vulnerable Software and Affected Versions Frontier affected versions not specified Description The issue is related to the truncation done when converting between EVM balance type and Substrate balance type in Frontier, Substrate's Ethereum compatibility layer. This incorrect...
MediaTek 芯片代码问题漏洞
MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...
Frontier 安全漏洞
Frontier is an EtherCompatible layer for Substrate. It is used to run unmodified Ethernet Dapps. Frontier suffers from a security vulnerability that stems from the truncation done during the conversion between EVM Balance Type and Substrate Balance Type being incorrectly implemented, resulting in...