1101 matches found
perl-Convert-ASN1 and perl-LDAP bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
perl-Convert-ASN1 and perl-LDAP bug fix and enhancement update
An update is available for perl-LDAP, perl-Convert-ASN1. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see...
ALEA-2020:1575 perl-Convert-ASN1 and perl-LDAP bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
Code Injection in elwerene/libreoffice-convert
Description The libreoffice-convert module is vulnerable against RCE since a command is crafted using user inputs not validated and then executed, leading to arbitrary command injection POC 1. Create the following PoC file: js // poc.js const libre = require'libreoffice-convert'; libre.convert'',...
DEBIAN-CVE-2013-7488
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
CVE-2013-7488
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
CVE-2013-7488
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
CVE-2013-7488
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
Input validation
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
CVE-2013-7488
CVE-2013-7488 affects perl-Convert-ASN1 (Convert::ASN1) through 0.27. Connected Nessus advisories from MiracleLinux, Alibaba Cloud Linux, TencentOS/TencentOS Server, Oracle Linux, Red Hat/CentOS/AlmaLinux, and Astra Linux reference that updates exist to fix this issue, citing “infinite loop via u...
CVE-2013-7488
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
CVE-2013-7488
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
PT-2024-14579 · Poco +1 · Poco +1
Name of the Vulnerable Software and Affected Versions: POCO versions prior to 1.11.8p2 POCO versions prior to 1.12.5p2 POCO versions prior to 1.13.0 Description: The issue is caused by an integer overflow and resultant stack buffer overflow in UTF32Encoding.cpp, specifically in the...
AdPlug Buffer Overflow Vulnerability (CNVD-2019-32335)
AdPlug is an AdLib sound player library written in C++. A buffer overflow vulnerability exists in the 'CxadbmfPlayer::bmfconvertstream' function of the bmf.cpp file in AdPlug version 2.3.1. The vulnerability stems from a networked system or product performing operations in memory without properly...
DEBIAN-CVE-2019-14690
AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::bmfconvertstream in bmf.cpp...
UBUNTU-CVE-2019-14690
AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::bmfconvertstream in bmf.cpp...
Cross-site Scripting (XSS)
grumpydictator/firefly-iii is vulnerable to cross-site scripting XSS. The attack is possible because it does not escape the user provided data in transaction description field and in asset account name, allowing an attacker to inject malicious script in a convert transaction to get executed upon ...
Cross site scripting
Firefly III 4.7.17.4 is vulnerable to multiple stored XSS issues due to the lack of filtration of user-supplied data in the transaction description field and the asset account name. The JavaScript code is executed during a convert transaction action...