Fedora: Security Advisory for rust-fd-find (FEDORA-2022-c4071e3dc7)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: rust-fd-find-8.2.1-5.fc35

Fd is a simple, fast and user-friendly alternative to find...

PT-2022-12281 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript versions 3.0.0 and below Description: A stack overflow issue was discovered in Jerryscript via the ecma find named property function in ecma-helpers.c. Recommendations: For Jerryscript versions 3.0.0 and below, consider restrictin...

re2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags.

...

CVE-2021-45761

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

CVE-2021-45761

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

CVE-2021-45761

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

Design/Logic Flaw

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

CVE-2021-45761

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

CVE-2021-45761

CVE-2021-45761 concerns the ROPium v3.1 library, where an invalid memory address dereference in the find() function is reported. The vulnerability’s root cause is a memory access issue in an internal routine, with CVSS-3.1 indicating a HIGH impact on availability and network attack vector, and no...

ROPium 代码问题漏洞

Ropium is an open source library/tool to make Rop-Exploits easy by the individual developer Boyan Milanov in France. It is used to help you build Rop exploits by finding and linking to widgets. A security vulnerability exists in ROPium that stems from the discovery that ROPium v3.1 contains inval...

CVE-2020-10137

Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FINDNODEINRANGE frames, allowing a remote, unauthenticated attacker to inject a FINDNODEINRANGE frame with an invalid random payload, denying service by blocking the processing of upcoming...

A crafted NTFS image can trigger an out-of-bounds read caused by an invalid attribute in ntfs_attr_find_in_attrdef in NTFS-3G < 2021.8.22.

...

CVE-2021-0998

In 'ih264efindbskipparams' of ih264eme.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Andro...

ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

There is a heap-based buffer over-read in the ncfindentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...

CVE-2021-24677

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles...

CVE-2021-24677

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles...

Design/Logic Flaw

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles...

CVE-2021-24677

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles...

CVE-2021-24677 Find My Blocks < 3.4.0 - Private Post Titles Disclosure

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles...