CVE-2022-41295

CVE-2022-41295 affects IBM Robotic Process Automation products. IBM Robotic Process Automation Client may be vulnerable to sensitive data being stored in temporary managed memory, enabling exposure of data in memory during operation. Affected products/versions: IBM Robotic Process Automation for ...

Stack overflow

Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString...

Information disclosure

Windows Remote Desktop Protocol RDP Information Disclosure Vulnerability...

Cross site scripting

"HCL Connections Security Update for Reflected Cross-Site Scripting XSS Vulnerability"...

Buffer overflow

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

Python < 2.7.14, 3.4.x < 3.4.8, 3.5.x < 3.5.5 PyString_DecodeEscape integer overflow (bpo-30657) - Linux

CPython aka Python is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

Directory traversal

sharkdp BAT before 0.18.2 executes less.exe from the current working directory...

Double free

mruby 2.1.2 has a double free in mrbdefaultallocf called from mrbfree and objfree...

Design/Logic Flaw

The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with current permission bits set to 644...

Improper access control

Intesync Solismed 3.3sp has Incorrect Access Control...

Design/Logic Flaw

game-music-emu before 0.6.1 mishandles unspecified integer values...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none...

CVE-2009-0425

CVE-2009-0425 describes an SQL injection in the PHP file index.php of Blue Eye CMS versions 1.0.0 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands through the clanek parameter, enabling partial confidentiality and integrity impact with a high severity (CVSS...

Code injection

gpsdrive aka gpsdrive-scripts 2.09 allows local users to overwrite arbitrary files via a symlink attack on an a /tmp/geo, a b /tmp/geocaching.loc, a c /tmp/geo., or a d /tmp/geo. temporary file, related to the 1 geo-code and 2 geo-nearest scripts, different vectors than CVE-2008-4959...