3358 matches found
ALPINE-CVE-2022-38533
In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file...
CVE-2022-35008
PNGDec commit 8abf6be was discovered to contain a stack overflow via /linux/main.cpp...
CVE-2022-35013
PNGDec commit 8abf6be was discovered to contain a FPE via SaveBMP at /linux/main.cpp...
PNGDec 缓冲区错误漏洞
PNGDec is an Arduino PNG image decoder library from the individual developer Larry Bank. A security vulnerability exists in PNGDec, which stems from a stack overflow issue in /linux/main.cpp...
PNGDec 资源管理错误漏洞
PNGDec is an Arduino PNG image decoder library from the individual developer Larry Bank. A security vulnerability exists in PNGDec that stems from a floating point exception in SaveBMP in the /linux/main.cpp file...
PNGDec 缓冲区错误漏洞
PNGDec is an Arduino PNG image decoder library from the individual developer Larry Bank. A security vulnerability exists in PNGDec that stems from a heap buffer overflow in SaveBMP in the /linux/main.cpp file...
DEBIAN-CVE-2022-35978
Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...
UBUNTU-CVE-2022-35978
Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...
CVE-2022-36526
D-Link GO-RT-AC750 GORTAC750revAv101b03 & GO-RT-AC750revBFWv200b02 is vulnerable to Authentication Bypass via function phpcgimain in cgibin...
CVE-2022-36526
D-Link GO-RT-AC750 GORTAC750revAv101b03 & GO-RT-AC750revBFWv200b02 is vulnerable to Authentication Bypass via function phpcgimain in cgibin...
CVE-2022-36525
D-Link Go-RT-AC750 GORTAC750revAv101b03 & GO-RT-AC750revBFWv200b02 is vulnerable to Buffer Overflow via authenticationcgimain...
PT-2022-23076 · Minetest +2 · Minetest +2
Name of the Vulnerable Software and Affected Versions: Minetest versions prior to 5.6.1 Description: The issue concerns a security vulnerability in Minetest, a free open-source voxel game engine, where a mod in single-player mode can set a global setting to control the Lua script loaded for the...
Minetest 安全漏洞
Minetest is a free open source voxel game engine by The Minetest Team team. It is used for module and game creation. A security vulnerability exists in Minetest 5.5.1 and earlier versions, which originates in single player, where a module can set a global setting to control a Lua script that is...
Adobe: Main Domain Takeover at https://www.marketo.net/
Resolved valid subdomain takeover report on Marketo. We appreciate the collaboration with the researcher...
Go Ethereum allows attackers to use manipulation of time-difference values to achieve replacement of main-chain blocks
Go Ethereum aka geth through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Riskless Uncle Making RUM, as exploited in the wild in 2020 through 2022...
CVE-2022-37450
Go Ethereum aka geth through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Riskless Uncle Making RUM, as exploited in the wild in 2020 through 2022...
Design/Logic Flaw
Go Ethereum aka geth through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Riskless Uncle Making RUM, as exploited in the wild in 2020 through 2022...
Cross-site Scripting (XSS)
jspwiki-main is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to the lack of sanitization in the startDay attribute in the execute function of WeblogPlugin.java, allowing an attacker to inject and execute malicious javascript through the maliciously crafted WeblogPlugin...
PT-2022-24009
Name of the Vulnerable Software and Affected Versions Go Ethereum aka geth versions 1.10.21 and earlier Description The issue allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks...