Debian: Security Advisory (DLA-3036-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-13774

Name of the Vulnerable Software and Affected Versions gogs/gogs versions prior to 0.12.8 Description The issue is related to a Server-Side Request Forgery SSRF in the GitHub repository gogs/gogs. This allows a malicious user to discover services in the internal network through webhook...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. The vulnerability exists due to the heap-based overflow in dev tools which allows an attacker to install a malicious extension to potentially exploit heap corruption via a malicious HTML page...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-1779)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attack...

CVE-2021-42859

A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inconsistent, with some testers seeing the issue in both the 3.2 release and in the October 2021 development code, but others not seeing the issue in the 3.2 release...

com.github.snowdream.android:http (1.0), io.github.newpanjing:gofound-java (>=1.0.1, <=1.1) +6 more potentially affected by CVE-2019-1010206 via com.github.kevinsawicki:http-request (5.6)

com.github.kevinsawicki:http-request MAVEN version 5.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.kevinsawicki:http-request and may be impacted: - com.github.snowdream.android:http 1.0 - io.github.newpanjing:gofound-java =1.0.1, =1.3.2,...

GSD-2022-1002522 backdoor in phpass version 0.3.x-dev, 0.3.x

In PHP phpass version 0.3.x-dev, 0.3.x a backdoor exists in the phpass package that can be attacked via malicious package update resulting in credential theft...

CVE-2022-28999

Insecure permissions in the install directories and binaries of Dev-CPP v4.9.9.2 allows attackers to execute arbitrary code via overwriting the binary devcpp.exe...

CVE-2022-28999

Insecure permissions in the install directories and binaries of Dev-CPP v4.9.9.2 allows attackers to execute arbitrary code via overwriting the binary devcpp.exe...

Design/Logic Flaw

Insecure permissions in the install directories and binaries of Dev-CPP v4.9.9.2 allows attackers to execute arbitrary code via overwriting the binary devcpp.exe...

CVE-2022-28999

CVE-2022-28999 concerns Dev-CPP v4.9.9.2 where insecure permissions in the installation directories and binaries (notably devcpp.exe) allow overwriting the binary to execute arbitrary code. Affected software: Dev-CPP 4.9.9.2. Root cause: insecure install/public write permissions enabling tamperin...

Embarcadero Technologies Dev-CPP security vulnerability

Embarcadero Technologies Dev-CPP is a free, all-in-one development environment for C/C++ development from Embarcadero Technologies, USA. A security vulnerability exists in Embarcadero Technologies Dev-CPP version v4.9.9.2, which stems from insecure permissions in the installation directory and...

CVE-2022-28999: Incorrect Default Permissions

Insecure permissions in the install directories and binaries of Dev-CPP v4.9.9.2 allows attackers to execute arbitrary code via overwriting the binary devcpp.exe...

PT-2022-19354

Name of the Vulnerable Software and Affected Versions Dev-CPP version 4.9.9.2 Description Insecure permissions in the install directories and binaries of Dev-CPP allow attackers to execute arbitrary code via overwriting the binary devcpp.exe. Recommendations For Dev-CPP version 4.9.9.2, consider...

@lowdefy/server (>=4.0.0-alpha.7, <=4.0.0-alpha.10), @lowdefy/server-dev (>=4.0.0-alpha.7, <=4.0.0-alpha.10) +4 more potentially affected by CVE-2022-29214 via next-auth (>=4.1.2, <=4.2.1)

next-auth NPM version =4.1.2, =4.0.0-alpha.7, =4.0.0-alpha.7, =0.31.1, =1.42.1, =0.50.4, =0.78.15-alpha.2 - chirpy-dev 0.1.0 Source cves: CVE-2022-29214 Source advisory: MEND:CVE-2022-29214...

CVE-2022-1795

Use After Free in GitHub repository gpac/gpac prior to v2.1.0-DEV...

Design/Logic Flaw

Use After Free in GitHub repository gpac/gpac prior to v2.1.0-DEV...

CVE-2022-1795

Removed by vendor...

CVE-2022-1795 Use After Free in gpac/gpac

Use After Free in GitHub repository gpac/gpac prior to v2.1.0-DEV...

Out-of-bound Reads

linux kernel is vulnerable to out-of bound reads. The vulnerability exists in drivers/usb/gadget/legacy/inode.c due to mishandling in dev-buf release which allows an attacker to cause an application crash...