9174 matches found
PT-2022-21685
Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1 Description A SQL injection issue was found in 74cmsSE via the keyword parameter at the "/home/job/map" API endpoint. This allows for potential SQL injection attacks. Recommendations For 74cmsSE version 3.5.1, consider...
Malware in ucs-map
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2022-6733 Malicious code in ucs-map (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d5592ffb464b4e507aff7a98cbf774a4200f3adbc52563909384a63ada6c58e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ucs-map (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d5592ffb464b4e507aff7a98cbf774a4200f3adbc52563909384a63ada6c58e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1286 Malicious code in azure-arm-servicemap-samples-ts-beta (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 879b0fdb17c1119e579e5f7d71290575b29a45995616e170b1d21d8d316d5b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2022:2065-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2065-1 advisory. - IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs;...
Kity Minder code issue vulnerabilities
Baidu Kity Minder Baidu Brain Map is a handy thinking tool from Baidu, a Chinese company. A security vulnerability exists in Kity Minder v1.3.5, which was discovered via a server-side request forgery SSRF vulnerability in the init function in ImageCapture.class.php...
OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...
OSV-2022-457 Heap-buffer-overflow in CFF::Charset::collect_glyph_to_sid_map
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47790 Crash type: Heap-buffer-overflow READ 2 Crash state: CFF::Charset::collectglyphtosidmap cffsubsetplan::plansubsetcharset cffsubsetplan::create...
PT-2022-37022
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the CFF::Charset::collect glyph to sid map function, c...
GtkRadiant 1.6.6 Buffer Overflow Exploit
===== Intro ===== GtkRadiant is a cross-platform level editor software for idtech game engines such as Quake. It comes with data authoring tools and a BSP map compiler called q3map2 which parses MAP files. The code has been around for a long time and uses unsafe string copy and format functions. ...
GtkRadiant 1.6.6 Buffer Overflow
===== Intro ===== GtkRadiant is a cross-platform level editor software for idtech game engines such as Quake. It comes with data authoring tools and a BSP map compiler called q3map2 which parses MAP files. The code has been around for a long time and uses unsafe string copy and format functions. ...
VulnCheck KEV: CVE-2021-41277
Metabase contains a local file inclusion vulnerability in the custom map support in the API to read GeoJSON formatted data...
PT-2022-37005
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Stack-use-after-return READ 4. The crash state involves several functions, including conversation match...
Juniper Junos OS DoS (JSA11247)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11247 advisory. An Incorrect Behavior Order vulnerability in the MAP-E automatic tunneling mechanism of Juniper Networks Junos OS allows an attacker to send certain malformed IPv4 or IPv6...
net.praqma:memory-map (>=0.1.0, <=0.1.2), org.jenkins-ci.main:jenkins-test-harness (1.484) +7 more potentially affected by CVE-2021-21608 via org.jenkins-ci.main:jenkins-core (1.484)
org.jenkins-ci.main:jenkins-core MAVEN version 1.484 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:memory-map =0.1.0, =0.36, =0.37 - org.jenkins-ci.plugins:viewvc 1.7 Source cves:...
GHSA-9PQX-G3JH-QPQQ Dangling reference in `access::Map` with Constant
An issue has been discovered in the arc-swap crate before 0.4.8 and 1.x before 1.1.0 for Rust. Use of arcswap::access::Map with the Constant test helper or with a user-supplied implementation of the Access trait could sometimes lead to dangling references being returned by the map...
net.praqma:memory-map (>=0.1.0, <=0.1.2), org.jenkins-ci.main:jenkins-test-harness (1.484) +7 more potentially affected by CVE-2020-2162 via org.jenkins-ci.main:jenkins-core (1.484)
org.jenkins-ci.main:jenkins-core MAVEN version 1.484 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:memory-map =0.1.0, =0.36, =0.37 - org.jenkins-ci.plugins:viewvc 1.7 Source cves:...
OSV-2022-425 Heap-use-after-free in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47533 Crash type: Heap-use-after-free READ 1 Crash state: std::1::treenodebase& std::1::treestd::1::valuetypestd: std::1::pairstd::1::treeiteratorstd::1::valuetypestd::1::basic...
