trivy-db

trivy-db Descripción general trivy-db es una herramienta CLI y una librería para manipular Trivy DB. Librería...

nvdcve

NVD/CVE® 作为 JSON 文件 重要提示 ：本仓库现在与 CVEProject/cvelist 项目部分冗余，该项目允许使用 git 探索 CVE®/NVD 修改历史，并通过 GitHub pull requests 提交新漏洞。但本仓库仍与字典同步，以便以 JSON 格式获取每个漏洞。 关于 本仓库包含描述来自 NVD 和 CVE® 字典的漏洞的 JSON 文件。 它有两个主要目标： 方便地以 JSON 格式获取漏洞描述（schema） 使用 git 探索 CVE®/NVD 修改历史 本仓库中的 JSON 文件是通过 NVD 的 JSON feeds 和 Travis CI...

October 2023: back to Positive Technologies, Vulristics updates, Linux Patch Wednesday, Microsoft Patch Tuesday, PhysTech VM lecture

October 2023: back to Positive Technologies, Vulristics updates, Linux Patch Wednesday, Microsoft Patch Tuesday, PhysTech VM lecture. Hello everyone! October was an interesting and busy month for me. I started a new job, worked on my open source Vulristics project, and analyzed vulnerabilities...

Heap overflow

An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarfformsdata a few data types were not checked for being in bounds, leading to a heap-based buffer over-read...