33 matches found
Zope AccessControl vulnerable to information disclosure through Python string `format` and `format_map` functions
ImpactPython's string format functionality allows someone controlling the format string to "read" objects accessible recursively via attribute access and subscription from accessible objects. Those attribute accesses and subscriptions use Python's full blown getattr and getitem, not the policy...
Information disclosure in AccessControl
ImpactPython's "format" functionality allows someone controlling the format string to "read" objects accessible recursively via attribute access and subscription from accessible objects. Those attribute accesses and subscriptions use Python's full blown getattr and getitem, not the policy...
PT-2025-22862
Name of the Vulnerable Software and Affected Versions docarray versions up to 0.40.1 Description A critical issue affects the getitem function of the /docarray/data/torch dataset.py file in the Web API component. This issue leads to improperly controlled modification of object prototype attribute...
Information Disclosure
AccessControl is vulnerable to Information Disclosure. The vulnerability is due to the formatmap function which allows attackers controlling the format string to read objects accessible via getattr and getitem which can result a critical information disclosure...
GHSA-8XV7-89VJ-Q48C Information disclosure in AccessControl
Impact Python's "format" functionality allows someone controlling the format string to "read" objects accessible recursively via attribute access and subscription from accessible objects. Those attribute accesses and subscriptions use Python's full blown getattr and getitem, not the policy...
SUSE CVE-2023-31518
A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via a crafted map file...
DEBIAN-CVE-2023-31518
A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via a crafted map file...
CVE-2023-31518
A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via a crafted map file...
Heap overflow
A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via a crafted map file...
CVE-2023-31518
A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via a crafted map file...
UBUNTU-CVE-2023-31518
A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via a crafted map file...
CVE-2023-31518
A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via a crafted map file...
CVE-2023-31518
A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via a crafted map file...
PT-2023-23370
Name of the Vulnerable Software and Affected Versions teeworlds version 0.7.5 Description A heap use-after-free issue in the CDataFileReader::GetItem component allows attackers to cause a Denial of Service DoS via a crafted map file. Recommendations For teeworlds version 0.7.5, consider avoiding...
Teeworlds 资源管理错误漏洞
Teeworlds is a multiplayer online shooter. A security vulnerability exists in Teeworlds version v0.7.5, which originates in the component CDataFileReader::GetItem that allows for post-release reuse, allowing an attacker to cause a denial of service DoS via a crafted mapping file...
CVE-2023-31518
A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via a crafted map file...
CVE-2023-31518
The CVE-2023-31518 entry concerns teeworlds v0.7.5, where a heap use-after-free in CDataFileReader::GetItem can be triggered by a crafted map file to cause a Denial of Service. The connected sources confirm the affected component and failure mode but do not provide patch details or fixed versions...
CVE-2023-31518: Use After Free
A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via a crafted map file...