6602 matches found
CVE-2022-1061
Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8...
CVE-2022-1061
Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8...
CVE-2022-1061
Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8...
CVE-2022-1061
Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8...
PYSEC-2022-175
Insecure Temporary File in GitHub repository horovod/horovod prior to 0.24.0...
CVE-2022-0315 Insecure Temporary File in horovod/horovod
Insecure Temporary File in GitHub repository horovod/horovod prior to 0.24.0...
Unrestricted file upload
Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.6...
CVE-2022-1033
CVE-2022-1033 affects crater-invoice/crater prior to 6.0.6 where there is no restriction on uploading dangerous file types. A PoC shows uploading a PHP webshell as an expense receipt, resulting in a stored file retrievable via attachment_receipt_url (e.g., /storage/50/2137webshell.php), enabling ...
CVE-2022-1031
CVE-2022-1031 affects radare2 (radareorg/radare2) prior to version 5.6.6, due to a use-after-free in the op_is_set_bp path. The vulnerability resides in the memory management of that directive, enabling memory corruption that can lead to a crash or broader impact as described in multiple sources....
CVE-2022-1031
Use After Free in opissetbp in GitHub repository radareorg/radare2 prior to 5.6.6...
Integer overflow
Able to create an account with long password leads to memory corruption / Integer Overflow in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-1034
CVE-2022-1034 affects ShowDoc
CVE-2022-1034 There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in star7th/showdoc
There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4...
CVE-2022-24764 Stack buffer overflow in pjproject
PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack buffer overflow vulnerability that affects PJSUA2 users or users that call the API pjmediasdpprint, pjmediasdpmediaprint. Applications that do not use PJSUA2 and do not directly...
CVE-2022-0514
Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5...
Design/Logic Flaw
Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5...
CVE-2022-0515 Cross-Site Request Forgery (CSRF) in crater-invoice/crater
Cross-Site Request Forgery CSRF in GitHub repository crater-invoice/crater prior to 6.0.4...
CVE-2022-0514 Business Logic Errors in crater-invoice/crater
Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5...
CVE-2022-0514
CVE-2022-0514 affects crater-invoice/crater prior to 6.0.5. The issue is a business logic flaw in Crater’s settings handling that lets an attacker alter the currency by tampering a parameter in the API request (e.g., /api/v1/company/settings with currency set to 1 and changing it to 2). The impac...