10050 matches found
MAL-2023-52 Malicious code in @playgami/portal-dynamic-copy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9deabd3b5198948a51a1c164772947fe70aa65670b1ca24263fad525b65cbfc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-33276
The CVE-2022-33276 issue is linked to Qualcomm’s embedded platform modem, where a buffer copy in the WMI_REQUEST_STATS_CMDID handling allows memory corruption. The PT-2023-1410 entry explicitly notes a buffer overflow due to unchecked input size in the modem, potentially enabling arbitrary code e...
CVE-2022-33276 Buffer copy without checking size of input in Modem
Memory corruption due to buffer copy without checking size of input in modem while receiving WMIREQUESTSTATSCMDID command...
CVE-2022-25746 Buffer Copy Without Checking Size of Input in Kernel
Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping...
CVE-2022-25746 Buffer Copy Without Checking Size of Input in Kernel
Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping...
Design/Logic Flaw
Discourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 2.9.0.beta15 on the beta and tests-passed branches, recipients of a group SMTP email could see the email addresses of all other users inside the group SMTP topic. Most of the time this is n...
CVE-2022-46168 Group SMTP user emails are exposed in CC email header
Discourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 2.9.0.beta15 on the beta and tests-passed branches, recipients of a group SMTP email could see the email addresses of all other users inside the group SMTP topic. Most of the time this is n...
PT-2023-14816 · Discourse · Discourse
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 2.8.14 on the stable branch and version 2.9.0.beta15 on the beta and tests-passed branches Description: Discourse is an open-source discussion platform. Prior to the specified versions, recipients of a group SMTP...
devel/viewvc-devel is vulnerable to cross-site scripting
C. Michael Pilato reports: security fix: escape revision view copy paths 311 CVE-2023-22464 security fix: escape revision view changed paths 311 CVE-2023-22456...
PT-2025-37672
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.25-android14-5-maybe-dirty-mainline Description The Linux kernel contained an issue where the detection of atomic context was insufficient, potentially leading to problems when z erofs decompressqueue endio w...
WordPress Plugin Contest Gallery SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress Plugin Contest Gallery SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2022-25984 · WordPress · Contest Gallery Pro +1
Name of the Vulnerable Software and Affected Versions: Contest Gallery WordPress plugin versions prior to 19.1.5.1 Contest Gallery Pro WordPress plugin versions prior to 19.1.5.1 Description: The issue allows malicious users with at least author privilege to leak sensitive information from the...
APDE 路径遍历漏洞
APDE is a processing IDE for creating and running sketches on Android devices by William Smith Personal Developer. A path traversal vulnerability exists in versions prior to APDE 0.5.2-pre2-alpha, which stems from a function in the...
UBUNTU-CVE-2022-22744
The constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell. This could have lead to command injection if pasted into a Powershell prompt.This bug only affects Thunderbird for Windows. Other operating systems are unaffected.. This vulnerability...
CVE-2022-44108
pdftojson commit 94204bb was discovered to contain a stack overflow via the component Object::copyObject:Object.cc...
Stack overflow
pdftojson commit 94204bb was discovered to contain a stack overflow via the component Object::copyObject:Object.cc...
pdftojson 缓冲区错误漏洞
pdftojson is Johnson Liang open source a pdftotext wrapper . Use bounding box data to generate JSON. pdftojson commit number: 94204bb security vulnerability , the vulnerability stems from its Object::copyObject:Object.cc component allows attackers to achieve a stack overflow...
CVE-2022-44108
pdftojson commit 94204bb was discovered to contain a stack overflow via the component Object::copyObject:Object.cc...
CVE-2022-44108
CVE-2022-44108 affects pdftojson commit 94204bb, which is reported to cause a stack overflow in Object::copy(Object*):Object.cc. The vulnerability is rated CRITICAL (CVSS 3.1: 9.8) with network attack vector, no user interaction, and high impact on confidentiality, integrity, and availability. Co...