SWFTools 缓冲区错误漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools commit number:772e55a2, which stems from a heap buffer overflow in pngload in its /lib/png.c component...

CVE-2022-35080

SWFTools contains a heap-buffer overflow in the png_load function of /lib/png.c for commit 772e55a2 (CVE-2022-35080). Affected component is SWFTools; root cause is a heap-buffer overflow in png_load. CVSS indicates Local attack vector, no privileges required, user interaction required, with Avail...

CVE-2022-35080

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via pngload at /lib/png.c...

Denial Of Service (DoS)

nc-lib-gui is vulnerable to denial of service. The vulnerability exists because of allowing large characters to be inserted in the input field New Project which allows an attacker to cause an application crash via a malicious input...

Malicious Package

Overview 4ff-lib-foundation is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

SUSE SLED12: libpython2_7-1_0 / libpython2_7-1_0-32bit / python / python-32bit / etc (SUSE-SU-2022:3553-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3553-1 advisory. - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // bsc1202624...

@chumager/itdfw-site-base (>=2.4.0 <=2.4.5), @simpleview/sv-mosaic (>=28.0.0-staging-2b964a <=38.0.1-62799cabb) +4 more potentially affected by CVE-2022-23461 via jodit (>=3.10.2 <=3.23.3)

jodit NPM version =3.10.2, =2.4.0, =28.0.0-staging-2b964a, =1.0.15, =1.0.0, =1.5.1, =1.4.58, =1.6.90 Source cves: CVE-2022-23461 Source advisory: OSV:GHSA-42HX-VRXX-5R6V...

Ubuntu 16.04 ESM : Python vulnerability (USN-5629-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5629-1 advisory. It was discovered that the Python http.server module incorrectly handled certain URIs. An attacker could potentially use this to redirect web traffic. Tenable has...

CVE-2022-35085

SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c...

CVE-2022-35085

SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c...

CVE-2022-35085

Summary (CVE-2022-35085): SWFTools contains a memory leak in /lib/mem.c introduced by commit 772e55a2. Affects SWFTools components as discussed in multiple sources; CVSSv3.1 baseline indicates Local access, User interaction required, with Availability impact (High) and Medium overall severity. Th...

CVE-2016-20015

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for the smokeping user to gain root privileges. There is a race condition involving /var/lib/smokeping and chown...

Race condition

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for the smokeping user to gain root privileges. There is a race condition involving /var/lib/smokeping and chown...

UBUNTU-CVE-2016-20015

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for the smokeping user to gain root privileges. There is a race condition involving /var/lib/smokeping and chown...

armory_cli (>=0.3.3 <=0.3.28), armory_lib (>=0.1.0 <=0.3.28) +133 more potentially affected by CVE-2022-36113 via cargo (>=0.10.0 <=0.64.0)

cargo CARGO version =0.10.0, =0.3.3, =0.1.0, =0.10.0, =0.10.0, =0.1.0, =0.3.1, =0.0.1, =0.1.0, =0.1.0, =0.2.2, =0.6.0, =0.1.0, =0.1.1, =1.1.0 and more Source cves: CVE-2022-36113 Source advisory: OSV:GHSA-RFJ2-Q3H3-HM5J...

CVE-2022-38301

Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib...

CVE-2022-38301

Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib...

Theonedev Onedev 路径遍历漏洞

Theonedev Onedev is a JAVA-based all-in-one DevOps platform from the Theonedev team. The platform supports container build, orchestration, CI, Git management, team collaboration and other features to help developers build a simple, powerful development platform. Theonedev A path traversal...

PT-2022-24351 · Onedev · Onedev

Name of the Vulnerable Software and Affected Versions: Onedev version 7.4.14 Description: The issue allows attackers to access restricted files and directories by uploading a crafted JAR file into the "/opt/onedev/lib" directory, which is a path traversal vulnerability. Recommendations: For Onede...

Malicious code in builtin-pages-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3be644f30528e61fadc22a9526bbd5dc5460dedd27a297fe25b70ede89657a38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...