6232 matches found
PT-2022-25467 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a candidate number that...
PT-2022-22566 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A segmentation violation was discovered in SWFTools via the FoFiTrueType::writeTTF function at /xpdf/FoFiTrueType.cc. Recommendations: At the moment, there is no information about a newer...
PT-2022-22564 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A segmentation violation was discovered in SWFTools via the InfoOutputDev::type3D1 function at /pdf/InfoOutputDev.cc. This issue affects the InfoOutputDev component. Recommendations: At th...
PT-2022-22512 · Otfcc +1 · Otfcc +1
Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A segmentation violation was discovered in OTFCC commit 617837b via the /release-x64/otfccdump+0x6b6a8f endpoint. Recommendations: For OTFCC commit 617837b, consider avoiding the use of the...
PT-2022-21977 · Icecoder · Icecoder
Name of the Vulnerable Software and Affected Versions: ICEcoder version 8.1 Description: The issue allows attackers to execute a directory traversal. Recommendations: For ICEcoder version 8.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-2022-23690 · Whatsapp · Whatsapp
Name of the Vulnerable Software and Affected Versions: WhatsApp affected versions not specified Description: An integer overflow in WhatsApp could result in remote code execution in an established video call. The issue affects WhatsApp mobile apps. Recommendations: At the moment, there is no...
PT-2022-22505 · Otfcc +1 · Otfcc +1
Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A segmentation violation was discovered in OTFCC commit 617837b via the /release-x64/otfccdump+0x4fbc0b endpoint. Recommendations: At the moment, there is no information about a newer version that contains a...
PT-2022-22928 · Unknown · Evoh Nft Evohclaimable Contract
Name of the Vulnerable Software and Affected Versions: Evoh NFT EvohClaimable contract affected versions not specified Description: The issue is related to an access control vulnerability in the Evoh NFT EvohClaimable contract. This vulnerability allows remote attackers to execute fraudulent NFT...
PT-2022-37292 · Git +1 · File
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue was identified, potentially causing a crash. The crash involves the file zmagic, file buffer, and magic buffer...
arr-pm vulnerable to arbitrary shell execution when extracting or listing files contained in a malicious rpm
Impact Arbitrary shell execution is possible when using RPM::Filefiles and RPM::Fileextract if the RPM contains a malicious "payload compressor" field. This vulnerability impacts the extract and files methods of the RPM::File class in the affected versions of this library. Patches Version 0.0.12 ...
PT-2022-6227 · Microsoft · Azure Service Fabric Container
Name of the Vulnerable Software and Affected Versions: Azure Service Fabric Container affected versions not specified Description: The issue is related to the Azure Service Fabric Container and involves an elevation of privilege vulnerability. This vulnerability is associated with the WAagent...
PT-2022-37290 · Git +1 · Wabt
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a crash type identified as Container-overflow WRITE 4. The crash state involves several functions:...
PT-2022-22554 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A memory leak was discovered in SWFTools via /lib/mem.c. The issue affects SWFTools commit 772e55a2. Recommendations: At the moment, there is no information about a newer version that...
PT-2022-37289 · Git +1 · Xstream
Name of the Vulnerable Software and Affected Versions: No specific software or version information is provided in the input descriptions. Description: A security exception crash has been reported, involving the com.ctc.wstx.dtd.FullDTDReader.readContentSpec function, which is related to reading...
PT-2023-5553 · Gstreamer +10 · Gstreamer +10
Name of the Vulnerable Software and Affected Versions: GStreamer affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of GStreamer. The specific flaw exists within the parsing of MXF video files, resulting from the lac...
PT-2022-22556 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A segmentation violation was discovered in SWFTools via the MovieAddFrame function at /src/gif2swf.c. Recommendations: At the moment, there is no information about a newer version that...
PT-2022-22559 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A heap-buffer overflow was discovered in SWFTools via asan memcpy at /asan/asan interceptors memintrinsics.cpp. Recommendations: At the moment, there is no information about a newer versio...
PT-2022-6338 · Unknown · Mklogic-500
Name of the Vulnerable Software and Affected Versions: MKLogic-500 affected versions not specified Description: The issue is related to the presence of pre-installed credentials. Exploitation of this issue may allow a remote attacker to access the contents of the FTP server. Recommendations: At t...
PT-2022-25303 · Sbpei · Sbpei
Name of the Vulnerable Software and Affected Versions: SbPei affected versions not specified Description: A potential attacker can write one byte by arbitrary address at the time of the PEI phase, only during S3 resume boot mode, and influence the subsequent boot stages. This can lead to...
PT-2022-22546 · Otfcc +1 · Otfcc +1
Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A segmentation violation was discovered in OTFCC commit 617837b via the "/release-x64/otfccdump+0x65f724" endpoint. This issue affects the specified commit. Recommendations: For OTFCC commit 617837b, consider...