Security Bulletin: Multiple security vulnerabilities found in open source code that is shipped with IBM Security Verify Access

Summary Source code scanning has found several open source vulnerabilites in the IBM Security Verify Access product. Verify Access has updated the packages as required. Vulnerability Details CVEID: CVE-2018-20574 DESCRIPTION: yaml-cpp is vulnerable to a denial of service, caused by an error in th...

Orwell-Dev-Cpp Hijacking Vulnerability

Orwell-Dev-Cpp is a free, portable, fast and simple C/C++ IDE. A hijacking vulnerability exists in Orwell-Dev-Cpp v5.11, which can be exploited by an attacker to execute arbitrary code via a specially crafted exe file...

CVE-2022-33037

A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-33036

A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-33037

A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-33037

CVE-2022-33037 affects Orwell-Dev-Cpp v5.11, where a binary hijack allows an attacker to execute arbitrary code by processing a crafted .exe file. The vulnerability is documented across multiple sources (e.g., NVD, Red Hat, CNVD) with the described impact being code execution on local access. The...

CVE-2022-33036

A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-33036

CVE-2022-33036 concerns a binary hijack in Embarcadero Dev-CPP v6.3 that enables arbitrary code execution via a crafted .exe file. The effect is tied to a local attack vector with user interaction required, as documented by NVD and corroborated by Red Hat and OSV/CVE records. The root cause descr...

CVE-2022-33036

A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file...

Orwell-Dev-Cpp 代码问题漏洞

Orwell-Dev-Cpp is a free, portable, fast and simple C/C++ IDE. A hijacking vulnerability exists in Orwell-Dev-Cpp v5.11, which can be exploited by an attacker to execute arbitrary code via a specially crafted exe file...

Malicious code in azure-template-cpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdb76fcf472b1ecf2a1157155cc8711ab8e1bd7d3b18f3d4af806392ca11e6a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1387 Malicious code in azure-template-cpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdb76fcf472b1ecf2a1157155cc8711ab8e1bd7d3b18f3d4af806392ca11e6a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1379 Malicious code in azure-storage-common-cpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10f2d9d05c663e24ede071f09a82e5c1b34d19d1332c4c152be774f63703ed33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dd-opentracing-cpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 094869f1cac10d1231339fa194b3ff020ef412c2353e2f171bcd02a49ac2374f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2374 Malicious code in dd-opentracing-cpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 094869f1cac10d1231339fa194b3ff020ef412c2353e2f171bcd02a49ac2374f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GitHub Security Lab: CPP: Pam Authorization Bypass

Vulnerability description not provided...

CVE-2022-28999

Insecure permissions in the install directories and binaries of Dev-CPP v4.9.9.2 allows attackers to execute arbitrary code via overwriting the binary devcpp.exe...

CVE-2022-28999

Insecure permissions in the install directories and binaries of Dev-CPP v4.9.9.2 allows attackers to execute arbitrary code via overwriting the binary devcpp.exe...

Design/Logic Flaw

Insecure permissions in the install directories and binaries of Dev-CPP v4.9.9.2 allows attackers to execute arbitrary code via overwriting the binary devcpp.exe...

CVE-2022-28999

CVE-2022-28999 concerns Dev-CPP v4.9.9.2 where insecure permissions in the installation directories and binaries (notably devcpp.exe) allow overwriting the binary to execute arbitrary code. Affected software: Dev-CPP 4.9.9.2. Root cause: insecure install/public write permissions enabling tamperin...