DEBIAN-CVE-2022-48063

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

AZL-28051 CVE-2022-48063 affecting package binutils for versions less than 2.37-10

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

DEBIAN-CVE-2020-21427

Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file...

CVE-2020-22524

Buffer Overflow vulnerability in FreeImageLoad function in FreeImage Library 3.19.0r1828 allows attackers to cuase a denial of service via crafted PFM file...

PYSEC-2023-151

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the loadprompt parameter...

UBUNTU-CVE-2020-22524

Buffer Overflow vulnerability in FreeImageLoad function in FreeImage Library 3.19.0r1828 allows attackers to cuase a denial of service via crafted PFM file...

UBUNTU-CVE-2020-21427

Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file...

Memory corruption

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

Buffer overflow

Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 r1859 allows remote attackers to run arbitrary code via opening of crafted ico file...

FreeImage 安全漏洞

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A buffer overflow vulnerability exists in the FreeImage load function that can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service attack...

PT-2023-11620 · Unknown +2 · Freeimage Library +2

Name of the Vulnerable Software and Affected Versions: FreeImage Library version 3.19.0r1828 Description: The issue is related to a Buffer Overflow vulnerability in the FreeImage Load function, which allows attackers to cause a denial of service via a crafted PFM file. Recommendations: For...

FreeImage 安全漏洞

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A buffer overflow vulnerability exists in the FreeImage LoadPixelDataRLE8 function, which can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service attack...

FreeImage 安全漏洞

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A buffer overflow vulnerability exists in the FreeImage FreeImageLoad function. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service...

PT-2023-25510 · Langchain · Langchain

Name of the Vulnerable Software and Affected Versions: langchain version 0.0.171 Description: An issue in langchain allows a remote attacker to execute arbitrary code via a JSON file to the load prompt parameter. This is related to subclasses or a template. Recommendations: For langchain version...

LangChain 代码注入漏洞

LangChain builds applications using LLM through composability. A code injection vulnerability exists in LangChain version v.0.0.171 that could allow a remote attacker to execute arbitrary code via a json file and the loadprompt parameter...

AZL-27940 CVE-2023-32002 affecting package nodejs for versions less than 16.20.2-2

The use of Module.load can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CV...

ALPINE-CVE-2023-32002

The use of Module.load can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CV...

DEBIAN-CVE-2023-32002

The use of Module.load can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CV...

UBUNTU-CVE-2023-32002

The use of Module.load can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CV...

Node.js 安全漏洞

Node.js is an open source, cross-platform JavaScript runtime environment. A security vulnerability exists in Node.js versions 16.x, 18.x, and 20.x that stems from the use of Module.load to bypass the policy mechanism when given a module outside of the policy.json definition...