5552 matches found
Malicious Package
Overview ing-lib-ow is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
CVE-2020-36599
lib/omniauth/failureendpoint.rb in OmniAuth before 1.9.2 and before 2.0 does not escape the messagekey value...
PT-2022-9003
Name of the Vulnerable Software and Affected Versions OmniAuth versions prior to 1.9.2 OmniAuth versions prior to 2.0 Description The issue is related to the lib/omniauth/failure endpoint.rb file in OmniAuth, where the message key value is not properly escaped. This could potentially lead to...
CVE-2020-36599: Improper Encoding or Escaping of Output
lib/omniauth/failureendpoint.rb in OmniAuth before 1.9.2 and before 2.0 does not escape the messagekey value...
CVE-2022-35110
SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c...
CVE-2022-35100
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via gfxlinegetbbox at /lib/gfxtools.c...
Memory corruption
SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c...
CVE-2022-35110
SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c...
CVE-2022-35100
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via gfxlinegetbbox at /lib/gfxtools.c...
CVE-2022-35100
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via gfxlinegetbbox at /lib/gfxtools.c...
SWFTools 安全漏洞
SWFTools is a set of utilities for working with Adobe Flash files SWF files by Matthias Kramm, a private developer. A security vulnerability exists in SWFTools, which stems from a memory leak in /lib/mem.c. The vulnerability is caused by the presence of a memory leak in the /lib/mem.c file...
PT-2022-11536
Name of the Vulnerable Software and Affected Versions IPESA e-Flow version 3.3.6 Description The issue allows path traversal for reading any file within the web root directory. This is achieved via the lib/js/build/STEResource.res path and the R query parameter. Recommendations For IPESA e-Flow...
CVE-2022-35110: Missing Release of Memory after Effective Lifetime
SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c...
CVE-2021-42052: Improper Limitation of a Pathname to a Restricted Directory
IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEResource.res path and the R query parameter...
MAL-2022-3827 Malicious code in ing-lib-authenticate (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c3ac7548488153407ae012be79d50d5f991924e33fbf536557d10c353be61af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
npos-tesseract Command Injection vulnerability
A command injection vulnerability affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js...
CVE-2020-28453
This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js...
CVE-2020-28437
This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js...