114 matches found
stb 缓冲区错误漏洞
stb is a single-file public domain library of stb for C/C++ by the individual developer Sean Barrett. A buffer error vulnerability exists in stb that stems from an out-of-bounds read due to the parameter w...
DRUPAL-CONTRIB-2024-060
The module creates an endpoint on the site at /postfile/upload that accepts a POST request for uploading a single file into a specified file system public, private, etc. This module accepts any uploaded file extension, including dangerous file formats so it can be used to bypass the...
DRUPAL-CONTRIB-2024-059
The module creates an endpoint on the site at /postfile/upload that accepts a POST request for uploading a single file into a specified file system public, private, etc. The module doesn't sufficiently protect against Cross Site Request Forgery under allowing an attacker to trick a site user into...
Fedora: Security Advisory (FEDORA-2024-4c8d4cda0d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-8f4d69d2ec)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 39 Update: stb-0^20240213gitae721c5-6.fc39
Single-file public domain libraries for C/C++...
[SECURITY] Fedora 38 Update: stb-0^20240213gitae721c5-5.fc38
Single-file public domain libraries for C/C++...
[SECURITY] Fedora 40 Update: stb-0^20240213gitae721c5-6.fc40
Single-file public domain libraries for C/C++...
[SECURITY] Fedora 38 Update: cjson-1.7.17-1.fc38
cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file...
Tinyfilemanager-Wh1Z-Edition - Effortlessly Browse And Manage Your Files With Ease Using Tiny File Manager [WH1Z-Edition], A Compact Single-File PHP File Manager
Introducing Tiny File Manager WH1Z-Edition, the compact and efficient solution for managing your files and folders with enhanced privacy and security features. Gone are the days of relying on external resources – I've stripped down the code to its core, making it truly lightweight and perfect for...
CVE-2023-6316
The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'singlefileupload' function in versions up to, and including, 5.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's...
The vulnerability of the _single_file Upload() function in the MW WP Form plugin for WordPress content management system allows a hacker to upload arbitrary files and execute arbitrary code.
The vulnerability of the singlefile Upload function in the MW WP Form plugin for WordPress content management system involves unlimited uploading of dangerous types of files. Exploiting this vulnerability could allow a malicious actor to upload arbitrary files and execute arbitrary code...
Fedora: Security Advisory for stb (FEDORA-2023-a93c06a1d9)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 37 Update: stb-0^20231011gitbeebb24-12.fc37
Single-file public domain libraries for C/C++...
[SECURITY] Fedora 38 Update: stb-0^20231011gitbeebb24-12.fc38
Single-file public domain libraries for C/C++...
CVE-2023-45677
stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in f-vendorlen = char'\0';. The root cause is that if len read in startdecoder is a negative number and setupmalloc successfully allocates memory in that case, but memor...
stb_image Code Issue Vulnerability
stb is a single-file public domain library for C/C ++. A security vulnerability exists in stbimage, which originates from a vulnerability that may cause a program to crash...
CVE-2023-45677
stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in f-vendorlen = char'\0';. The root cause is that if len read in startdecoder is a negative number and setupmalloc successfully allocates memory in that case, but memor...