253 matches found
The vulnerability in the src/normal.c component of the text editor Vim allows a hacker to execute arbitrary code.
The vulnerability in the src/normal.c component of the Vim text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Surpass 路径遍历漏洞
Surpass is a PHP package developed primarily for Laravel by the individual developer Sukohi Kuhoh. It is used to manage uploading images and displaying thumbnails using Ajax. A path traversal vulnerability exists in Surpass versions prior to 1.0.0, which stems from unknown code in the file...
PYSEC-2022-43144
Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc...
Soil 跨站脚本漏洞
Soil is Roots open source a WordPress plugin . Used to apply theme-independent front-end modifications. A cross-site scripting vulnerability exists in Soil versions prior to 4.1.0, which originates in the function languageattributes in the file src/Modules/CleanUpModule.php, where manipulation of...
bible-online SQL注入漏洞
bible-online is an online Bible application by James M.Z. Personal Developer. bible-online suffers from an SQL injection vulnerability that originates in a function query in the file src/main/java/custom/application/search.java of the component Search Handler, which operates to cause SQL injectio...
OESA-2022-2131 emacs security update
Emacs is the extensible, customizable, self-documenting real-time display editor.At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a projec...
[SECURITY] Fedora 37 Update: llhttp-6.0.10-1.fc37
This project is a port of httpparser to TypeScript. llparse is used to generate the output C source file, which could be compiled and linked with the embedder's program like Node.js. This copy of the library is compiled with LLHTTPSTRICTMODE set to 0 disabled, which is the default...
CVE-2022-39280 Regular expression denial of service in dparse
dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...
JPEGDEC 安全漏洞
JPEGDEC is a JPEG decoder optimized for Arduino by the individual developer Larry Bank. A security vulnerability exists in JPEGDEC that stems from a segmentation error in the fseek module of the /src/jpeg.inl file...
Command Injection
node-latex-pdf is vulnerable to command injection. Insecure handling of compilation and execution of source file in selflatex function in node-latex-pdf.js allows an attacker to inject and execute malicious commands...
Cesanta MJS 代码问题漏洞
Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS mJS: Restricted JavaScript engine...
libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c
A flaw was found in libsolv. A buffer overflow vulnerability could cause a denial of service. The highest threat from this vulnerability is to system availability...
UBUNTU-CVE-2021-40589
ZAngband zangband-data 2.7.5 is affected by an integer underflow vulnerability in src/tk/plat.c through the variable fileheader.bfOffBits...
PT-2022-12155 · Fis +3 · Fis Gt.M +3
Name of the Vulnerable Software and Affected Versions: FIS GT.M versions through V7.0-000 Description: An issue was discovered related to a lack of NULL checks in calls to ious open in sr unix/ious open.c, allowing attackers to crash the application by dereferencing a NULL pointer. Recommendation...
The vulnerability of the `pool_disabled_solvable` function in the `src/repo.h` component of the Libsolv library allows a malicious actor to trigger a service failure.
The vulnerability of the pooldisabledsolvable function in the src/repo.h file of the Libsolv library is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...
CVE-2022-26181
Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligneddealloc:src/lepton/bitops.cc:108...
Vulnerability of the eval_lambda() function (src/eval.c) in the Vim text editor, which allows a hacker to trigger a buffer overflow.
The vulnerability of the evallambda function src/eval.c in the Vim text editor is caused by buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to trigger a buffer overflow...
CVE-2021-46507
Jsish v3.5.0 was discovered to contain a stack overflow via JsiLogMsg at src/jsiUtils.c...