USN-5458-1 vim vulnerabilities

It was discovered that Vim was incorrectly handling virtual column position operations, which could result in an out-of-bounds read. An attacker could possibly use this issue to expose sensitive information. CVE-2021-4193 It was discovered that Vim was not properly performing bounds checks when...

Tuxera NTFS-3G numeric error vulnerability

Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for supporting read and write NTFS partitions.Tuxera NTFS-3G suffers from a numeric error vulnerability that originates from integer underflow in fuselibreaddir, which can be exploited by attackers to cause...

CVE-2022-30787

An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

Tuxera NTFS-3G 数字错误漏洞

Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for supporting read and write NTFS partitions.Tuxera NTFS-3G suffers from a numeric error vulnerability that originates from integer underflow in fuselibreaddir, which can be exploited by attackers to cause...

CVE-2022-29181

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors segfault or reads from unrelated memory. Version 1.13.6...

WordPress plugin Amministrazione Aperta 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A file inclusion...

Out-of-bound Reads

linux kernel is vulnerable to out-of bound reads. The vulnerability exists in drivers/usb/gadget/legacy/inode.c due to mishandling in dev-buf release which allows an attacker to cause an application crash...

OpenClinica 路径遍历漏洞

OpenClinica is a commercial open source clinical trial software for electronic data capture EDC and clinical data management CDM. A security vulnerability exists in versions prior to OpenClinica 3.16 that stems from OpenClinica's susceptibility to multiple endpoint path traversals, which can lead...

GHSA-8R28-R8CP-G6CP Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop

This is an information disclosure vulnerability in Apache Hadoop before 2.6.4 and 2.7.x before 2.7.2 in the short-circuit reads feature of HDFS. A local user on an HDFS DataNode may be able to craft a block token that grants unauthorized read access to random files by guessing certain fields in t...

AMD BIOS 缓冲区错误漏洞

AMD BIOS is the base input and output system for AMD. A denial of service vulnerability exists in AMD BIOS, which stems from improper validation of the BIOS directory. An attacker could exploit this vulnerability to read content outside of a copy of the directory table in RAM, resulting in a...

AMD CPUs缓冲区错误漏洞

AMD CPUs are a family of CPUs from AMD U.S.A. A denial of service vulnerability exists in AMD CPUs, which stems from insufficient boundary checking in the SMU mailbox registers. An attacker could exploit the vulnerability to read content outside of the SRAM address range resulting in a potential...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

NewStart CGSL MAIN 6.02 : freerdp Multiple Vulnerabilities (NS-SA-2022-0063)

The remote NewStart CGSL host, running version MAIN 6.02, has freerdp packages installed that are affected by multiple vulnerabilities: - In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array...

Samsung SMR 缓冲区错误漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in Samsung SMR that stems from an incorrect buffer size checking logic in the aviextractor library allowing out-of-bounds reads, which can lead to a...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking, which may result in out-of-bounds reads that can be exploited by an attacker to disclose local information...

UReport2-console 代码问题漏洞

UReport2 is a high-performance pure Java reporting engine based on Spring architecture . A security vulnerability exists in all versions of UReport2-console, which can be exploited by an attacker to perform remote code execution, resulting in arbitrary file reads and deserialization of local...

CGAL libcgal Code Execution Vulnerability (CNVD-2022-61370)

Laurent Rineau CGAL is an open source application by Laurent Rineau. It provides easy access to efficient and reliable geometric algorithms in the form of C libraries. CGAL libcgal suffers from a code execution vulnerability that stems from a specially formatted file that could lead to...

CGAL libcgal Code Execution Vulnerability (CNVD-2022-61369)

Laurent Rineau CGAL is an open source application by Laurent Rineau. It provides easy access to efficient and reliable geometric algorithms in the form of C libraries. CGAL libcgal suffers from a code execution vulnerability that stems from a specially formatted file that could lead to...

CGAL libcgal Code Execution Vulnerability (CNVD-2022-61373)

CGAL is an open source application by Laurent Rineau. It provides easy access to efficient and reliable geometric algorithms in the form of C libraries. CGAL libcgal CGAL-5.1.1 version contains a code execution vulnerability that can be exploited by attackers to cause out-of-bounds reads and type...

CGAL libcgal Code Execution Vulnerability

CGAL is an open source application by Laurent Rineau. Provides easy access to efficient and reliable geometric algorithms in the form of C++ libraries. A code execution vulnerability exists in CGAL libcgal CGAL-5.1.1 version, which can be exploited by an attacker to craft a badly formatted file...