859 matches found
CVE-2024-36052
CVE-2024-36052: WinRAR before 7.00 on Windows permits spoofing of screen output via ANSI escape sequences. Connected sources also note ANSI escape handling in unrar implementations on Linux/UNIX (Astra Linux) and Linux advisories; remediation generally requires upgrading to patched/unaffected ver...
WinRAR 安全漏洞
WinRAR is a file compressor. The product supports compression and decompression of files in RAR, ZIP, and other formats, among others. RARLAB A security vulnerability exists in WinRAR versions prior to 7.00, which stems from a vulnerability that allows an attacker to spoof screen output via ANSI...
PT-2024-3780 · Winrar · Winrar
Name of the Vulnerable Software and Affected Versions: WinRAR versions prior to 7.00 Description: The issue is related to errors in processing input data, which can be exploited by a remote attacker to cause a denial of service or spoof the screen output. This can be achieved through the use of...
RHEL 8 : less (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - less: crafted data can result in less -R not filtering ANSI escape sequences sent to the terminal CVE-2022-46663 No...
Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2024-1604)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEBIAN-CVE-2024-33899
RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences...
CVE-2024-33899
RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences...
CVE-2024-33899
RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences...
CVE-2024-33899
RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences...
UBUNTU-CVE-2024-33899
RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences...
PT-2024-3293
Name of the Vulnerable Software and Affected Versions: WinRAR versions prior to 7.00 Description: The issue is related to errors in processing input data in the ANSI Escape Sequence Handler component of the WinRAR file archiver. Exploitation of this issue may allow a remote attacker to cause a...
CVE-2024-33899
RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences...
CVE-2024-33899
RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences...
CBL Mariner 2.0 Security Update: util-linux (CVE-2024-28085)
The version of util-linux installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-28085 advisory. - wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to...
CVE-2024-32477
Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. By using ANSI escape sequences and a race between libc::tcflush0, libc::TCIFLUSH and reading standard input, it's possible to manipulate the permission prompt and force it to allow an unsafe action regardless of the...
CVE-2024-32477 Race condition when flushing input stream leads to permission prompt bypass
Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. By using ANSI escape sequences and a race between libc::tcflush0, libc::TCIFLUSH and reading standard input, it's possible to manipulate the permission prompt and force it to allow an unsafe action regardless of the...
CVE-2024-32477 Race condition when flushing input stream leads to permission prompt bypass
Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. By using ANSI escape sequences and a race between libc::tcflush0, libc::TCIFLUSH and reading standard input, it's possible to manipulate the permission prompt and force it to allow an unsafe action regardless of the...
CVE-2024-32477 Race condition when flushing input stream leads to permission prompt bypass
Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. By using ANSI escape sequences and a race between libc::tcflush0, libc::TCIFLUSH and reading standard input, it's possible to manipulate the permission prompt and force it to allow an unsafe action regardless of the...
CVE-2024-32477
The CVE-2024-32477 vulnerability affects Deno versions prior to 1.42.2, caused by a race between ANSI escape sequences (e.g., [6n) and reading standard input. This allows an attacker to manipulate the permission prompt and bypass the permission policy via the PTY channel. Several connected sourc...
PT-2024-3679 · Deno · Deno
Name of the Vulnerable Software and Affected Versions: Deno versions prior to 1.42.2 Description: The issue is caused by errors in synchronization when using a shared resource in the Deno runtime environment for JavaScript and TypeScript. Exploitation of this issue may allow an attacker to disclo...