13092 matches found
ASB-A-240973083
Bulletin has no description...
DSA-5268-1 ffmpeg - security update
Bulletin has no description...
ASB-A-244684957
In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel...
GHSA-PFQ8-RQ6V-VF5M vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu...
PT-2022-26776 · Rtf2Html · Rtf2Html
Name of the Vulnerable Software and Affected Versions: rtf2html version 0.2.0 Description: A heap overflow was discovered in the component /rtf2html/./rtf tools.h. Recommendations: For version 0.2.0, update to a newer version that contains a fix for this issue...
DLA-3174-1 pysha3 - security update
Bulletin has no description...
CVE-2022-43280
wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...
MAL-2022-7084 Malicious code in web3-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77fdc33138ce74bde93c5bcbd67fafc405aeeb7ae156a91124a5500d3f1b869c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Signature Verification Bypass
perl is vulnerable to signature verification bypass. The vulnerability exists in CHECKSUMS files which allows an attacker to use this flaw to bypass signature verification...
MGASA-2022-0381 Updated perl-Image-ExifTool packages fix security vulnerability
lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection. CVE-2022-23935...
Liferay Portal and Liferay DXP Vulnerable to XSS via the Document Library Module
A Cross-site scripting XSS vulnerability in Document Library module before 6.0.98 from Liferay Portal 7.4.3.30 through 7.4.3.36, and Liferay DXP 7.4 update 30 through update 36 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter...
CVE-2022-39408 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2022-39402 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2022-21638 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2022-21611 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2022-21594 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2022-42188
In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server...
PT-2022-37670 · Belden · Hirschmann
Уязвимость программного обеспечения управления сетью Hirschmann Industrial HiVision связана с возможностью обхода пути. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...
PT-2022-21872 · Hiwin · Hiwin Robot System
Name of the Vulnerable Software and Affected Versions: HIWIN Robot System Software version 3.3.21.9869 Description: The issue arises from the software's failure to properly address the terminated command source. This allows an attacker to craft code that can disconnect the HIWIN Robot System...