4628 matches found
Denial Of Service (DoS)
radare2.js is vulnerable to denial of service. The vulnerability exists due to the out-of-bound read in the library, allowing an attacker to access the memory location beyond the buffer, leading to an application crash...
AlmaLinux 8 : python-lxml (ALSA-2021:4158)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2021:4158 advisory. - An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safeattrsonly and forms arguments, the Cleaner class...
CVE-2022-0522
Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...
CVE-2022-0522
Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...
CVE-2022-0520
Use After Free in NPM radare2.js prior to 5.6.2...
CVE-2022-0520
Use After Free in NPM radare2.js prior to 5.6.2...
Design/Logic Flaw
Use After Free in NPM radare2.js prior to 5.6.2...
CVE-2022-0522
Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...
CVE-2022-0520
Use After Free in NPM radare2.js prior to 5.6.2...
Memory corruption
Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...
UBUNTU-CVE-2022-0522
Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...
CVE-2022-0522
CVE-2022-0522 concerns radare2/radare2.js: prior to 5.6.2, the NPM package allows access of memory location before the start of a buffer. Connected sources confirm this vulnerability is tied to radare2.js code paths and have led to vendor advisories and patch releases (e.g., radare2 5.6.4 and rel...
CVE-2022-0522 Access of Memory Location Before Start of Buffer in radareorg/radare2
Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...
CVE-2022-0522
Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...
CVE-2022-0520
CVE-2022-0520 is a Use After Free vulnerability in the radare2.js module for NPM, prior to version 5.6.2. The issue affects radare2.js code paths handling memory and can lead to instability or potential exploitation. Affected product/component: radare2.js (NPM) with Radare2 framework. Root cause:...
CVE-2022-0520
Use After Free in NPM radare2.js prior to 5.6.2...
CVE-2022-0520 Use After Free in radareorg/radare2
Use After Free in NPM radare2.js prior to 5.6.2...
CVE-2022-0520 Use After Free in radareorg/radare2
Use After Free in NPM radare2.js prior to 5.6.2...
llhttp: HTTP Request Smuggling due to spaces in headers
An HTTP Request Smuggling HRS vulnerability was found in the llhttp library, used by Node.JS. Spaces as part of the header names were accepted as valid. In situations where HTTP conversations are being proxied such as proxy, reverse-proxy, load-balancer, an attacker can use this flaw to inject...