Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via the incfopen function of modules/preprocs/nasm/nasm-pp.c. Exploiting this vulnerability is possible via a crafted file. Remediation There is no fixed version for yasm. References - GitHub Issue Credit: Clingto...

GHSA-RHF5-2378-3W3W markdown-it-decorate vulnerable to cross-site scripting (XSS)

markdown-it-decorate adds attributes, IDs and classes to Markdown, and the most recent version 1.2.2 was published in 2017. All versions are currently vulnerable to cross-site scripting XSS and there is no fixed version at this time...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. It contains an invalid arithmetic shift via the function parsetagandwiretype in protobuf-c/protobuf-c.c. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to it...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow. In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData. Remediation Upgrade tinyexr to version 1.0.6 or higher. References - GitHub Issue...

Arbitrary File Upload

Overview UmbracoCms is a package that installs Umbraco Cms in your Visual Studio ASP.NET project Affected versions of this package are vulnerable to Arbitrary File Upload via the Install Packages functionality, leading to Remote Code Execution. Note: As a pre-requisite for exploiting this...

Incorrect Bitwise Shift of Integer

Overview Affected versions of this package are vulnerable to Incorrect Bitwise Shift of Integer in the stbijpegdecodeblockprogac function. Remediation There is no fixed version for stb. References - GitHub Issue - GitHub PR...

PT-2022-2843 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to synchronization errors when using a shared resource, specifically a "race condition" situation, in the Windows Hyper-V hardware virtualization system. This c...

Command Injection

Overview git-promise is a Simple wrapper that allows you to run any git command using a more intuitive syntax. Affected versions of this package are vulnerable to Command Injection due to an inappropriate fix of a prior vulnerability in this package. Note: Please note that the vulnerability will...

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Overview git-clone is a Clone a git repository Affected versions of this package are vulnerable to Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' due to insecure usage of the --upload-pack feature of git. Note: A note was added to the README file of the package t...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the function stbttfindtable at stbtruetype.h. Remediation There is no fixed version for stb. References - GitHub Issue...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the function ttULONG at stbtruetype.h. Remediation There is no fixed version for stb. References - GitHub Issue...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the function ttUSHORT at stbtruetype.h. Remediation There is no fixed version for stb. References - GitHub Issue...

Double Free

Overview Affected versions of this package are vulnerable to Double Free via the component sixelchunkdestroy at /root/libsixel/src/chunk.c. Remediation There is no fixed version for libsixel. References - GitHub Issue...

Arbitrary Code Execution

Overview @pendo324/get-process-by-name is a Returns a list of processes that match a process name Affected versions of this package are vulnerable to Arbitrary Code Execution due to improper sanitization of getProcessByName function. PoC js const getProcessByName =...

Arbitrary Command Execution

Overview mc-kill-port is a package allowing termination of ports. Affected versions of this package are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument. PoC js const kill = require"mc-kill-port"; kill"abc|echo rce newFile.txt"...

Double Free

Overview Affected versions of this package are vulnerable to Double Free in sixelencoderoutputwithoutmacro which is called from sixelencoderencodeframe in the encoder.c function. Remediation There is no fixed version for libsixel. References - GitHub Issue Credit: p870613...

Arbitrary Code Execution

Overview Affected versions of this package are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed. PoC js const postLoader = require'post-loader' var payload =...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the XMLDocument::getRoot function in the renderDocument that handles the XMLDocument object improperly. Remediation There is no fixed version for svgpp. References - GitHub Issue Credit: 001SM...

Out-of-bounds Read

Overview fast-string-search is a module that can search substrings in a string by using N-API and boyer-moore-magiclen. Affected versions of this package are vulnerable to Out-of-bounds Read due to incorrect memory freeing and length calculation for any non-string input as the source. This allows...

Denial of Service (DoS)

Overview colors is a color manipulation library. Affected versions of this package are vulnerable to Denial of Service DoS that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the...