6142 matches found
CVE-2023-26991
SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...
Malicious Package
Overview arriva-ui-lib is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
CVE-2023-26991
SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...
SWFTools 资源管理错误漏洞
SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools version v0.9.2, which stems from a stack overflow vulnerability in the swfReadSWF2 function in lib/rfxswf.c. The vulnerability is...
CVE-2023-26991
SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...
CVE-2023-26991
CVE-2023-26991 affects SWFTools v0.9.2. The vulnerability is a stack-use-after-scope in the function swf_ReadSWF2 (lib/rfxswf.c). According to the CVSS data, it has a High impact (C/H/I/A) with Local attack vector, low attack complexity, no privileges required and user interaction required. The i...
PT-2023-20891 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools version 0.9.2 Description: A stack-use-after-scope issue was discovered in the swf ReadSWF2 function in lib/rfxswf.c. This issue affects the SWFTools software. Recommendations: For SWFTools version 0.9.2, at the moment, there is no...
CVE-2023-26991: Use After Free
SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swfReadSWF2 function in lib/rfxswf.c...
An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow.
...
CVE-2022-47924
An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions 0.1.0 wich can result in arbitrary code execution and DoS once the users triggers the validation...
CVE-2022-47924
An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions 0.1.0 wich can result in arbitrary code execution and DoS once the users triggers the validation...
CVE-2022-47924 Arbitrary Code Execution using the validate function of csaf-validator-lib
An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions 0.1.0 wich can result in arbitrary code execution and DoS once the users triggers the validation...
CVE-2022-47924 Arbitrary Code Execution using the validate function of csaf-validator-lib
An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions 0.1.0 wich can result in arbitrary code execution and DoS once the users triggers the validation...
CVE-2023-28884
In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index...
CVE-2022-47924: Improper Input Validation
An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions 0.1.0 wich can result in arbitrary code execution and DoS once the users triggers the validation...
CVE-2023-28884: Improper Neutralization of Input During Web Page Generation
In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index...
CVE-2020-36691: Uncontrolled Recursion
An issue was discovered in the Linux kernel before 5.8. lib/nlattr.c allows attackers to cause a denial of service unbounded recursion via a nested Netlink policy with a back reference...
CVE-2020-36691
An issue was discovered in the Linux kernel before 5.8. lib/nlattr.c allows attackers to cause a denial of service unbounded recursion via a nested Netlink policy with a back reference...
EulerOS 2.0 SP11 : emacs (EulerOS-SA-2023-1572)
According to the versions of the emacs package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c us...