CVE-2021-23592

The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class...

Huawei EulerOS: Security Advisory for openjpeg2 (EulerOS-SA-2022-1634)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-21227

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

CVE-2022-21230

This affects all versions of package org.nanohttpd:nanohttpd. Whenever an HTTP Session is parsing the body of an HTTP request, the body of the request is written to a RandomAccessFile when the it is larger than 1024 bytes. This file is created with insecure permissions that allow its contents to ...

Code injection

All versions of package masuit.tools.core are vulnerable to Arbitrary Code Execution via the ReceiveVarData function in the SocketClient.cs component. The socket client in the package can pass in the payload via the user-controllable input after it has been established, because this socket client...

CVE-2022-25844

The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service ReDoS by providing a custom locale rule that makes it possible to assign the parameter in posPre: ' '.repeat of NUMBERFORMATS.PATTERNS1.posPre with a very high value. Note: 1 This package has been deprecated an...

CVE-2022-25854

The CVE affects @yaireo/tagify before 4.9.8. The root cause is that the placeholder input is not escaped in the Tagify rendering logic (tagify.js), enabling an attacker to inject and trigger XSS via a malicious placeholder value. Impact is XSS in inputs using Tagify; exploitation details are not ...

CVE-2022-34749 affecting package python-mistune for versions less than 0.8.3-5

CVE-2022-34749 affecting package python-mistune for versions less than 0.8.3-5. A patched version of the package is available...

CVE-2021-43396 affecting package glibc for versions less than 2.35-1

CVE-2021-43396 affecting package glibc for versions less than 2.35-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-27223 affecting package kernel for versions less than 5.15.32.1-2

CVE-2022-27223 affecting package kernel for versions less than 5.15.32.1-2. A patched version of the package is available...

CVE-1999-0656 affecting package kernel for versions less than 5.10.78.1-1

CVE-1999-0656 affecting package kernel for versions less than 5.10.78.1-1. A patched version of the package is available...

CVE-2022-23772 affecting package golang for versions less than 1.17.8-1

CVE-2022-23772 affecting package golang for versions less than 1.17.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-24742 affecting package qt5-qtsvg for versions less than 5.12.11-3

CVE-2020-24742 affecting package qt5-qtsvg for versions less than 5.12.11-3. An upgraded version of the package is available that resolves this issue...

CVE-2015-9541 affecting package qt5-qtsvg for versions less than 5.12.11-3

CVE-2015-9541 affecting package qt5-qtsvg for versions less than 5.12.11-3. An upgraded version of the package is available that resolves this issue...

CVE-2017-6519 affecting package avahi for versions less than 0.8-1

CVE-2017-6519 affecting package avahi for versions less than 0.8-1. An upgraded version of the package is available that resolves this issue...

Command injection

The package czproject/git-php before 4.0.3 are vulnerable to Command Injection via git argument injection. When calling the isRemoteUrlReadable$url, array $refs = NULL function, both the url and refs parameters are passed to the git ls-remote subcommand in a way that additional flags can be set...

Slackware: Security Advisory (SSA:2020-124-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2006-178-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-25648 Command Injection

The package git before 1.11.0 are vulnerable to Command Injection via git argument injection. When calling the fetchremote = 'origin', opts = function, the remote parameter is passed to the git fetch subcommand in a way that additional flags can be set. The additional flags can be used to perform...

CVE-2019-12855 affecting package python-twisted for versions less than 22.2.0-1

CVE-2019-12855 affecting package python-twisted for versions less than 22.2.0-1. An upgraded version of the package is available that resolves this issue...