292 matches found
PYSEC-2022-43144
Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc...
Soil 跨站脚本漏洞
Soil is Roots open source a WordPress plugin . Used to apply theme-independent front-end modifications. A cross-site scripting vulnerability exists in Soil versions prior to 4.1.0, which originates in the function languageattributes in the file src/Modules/CleanUpModule.php, where manipulation of...
bible-online SQL注入漏洞
bible-online is an online Bible application by James M.Z. Personal Developer. bible-online suffers from an SQL injection vulnerability that originates in a function query in the file src/main/java/custom/application/search.java of the component Search Handler, which operates to cause SQL injectio...
OESA-2022-2131 emacs security update
Emacs is the extensible, customizable, self-documenting real-time display editor.At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a projec...
[SECURITY] Fedora 37 Update: llhttp-6.0.10-1.fc37
This project is a port of httpparser to TypeScript. llparse is used to generate the output C source file, which could be compiled and linked with the embedder's program like Node.js. This copy of the library is compiled with LLHTTPSTRICTMODE set to 0 disabled, which is the default...
CVE-2022-39280 Regular expression denial of service in dparse
dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version...
JPEGDEC 安全漏洞
JPEGDEC is a JPEG decoder optimized for Arduino by the individual developer Larry Bank. A security vulnerability exists in JPEGDEC that stems from a segmentation error in the fseek module of the /src/jpeg.inl file...
Command Injection
node-latex-pdf is vulnerable to command injection. Insecure handling of compilation and execution of source file in selflatex function in node-latex-pdf.js allows an attacker to inject and execute malicious commands...
Cesanta MJS 代码问题漏洞
Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS mJS: Restricted JavaScript engine...
libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c
A flaw was found in libsolv. A buffer overflow vulnerability could cause a denial of service. The highest threat from this vulnerability is to system availability...
UBUNTU-CVE-2021-40589
ZAngband zangband-data 2.7.5 is affected by an integer underflow vulnerability in src/tk/plat.c through the variable fileheader.bfOffBits...
Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in workflow-cps
workflow-cps allows pipelines to load Groovy source files. This is intended to be used to allow Global Shared Libraries to execute without sandbox protection. In workflow-cps 2689.v434009a31bf1 and earlier, any Groovy source files bundled with Jenkins core and plugins could be loaded this way and...
PT-2022-12155 · Fis +3 · Fis Gt.M +3
Name of the Vulnerable Software and Affected Versions: FIS GT.M versions through V7.0-000 Description: An issue was discovered related to a lack of NULL checks in calls to ious open in sr unix/ious open.c, allowing attackers to crash the application by dereferencing a NULL pointer. Recommendation...
Libsolv pool_disabled_solvable DoS
The vulnerability of the pooldisabledsolvable function in the src/repo.h file of the Libsolv library is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...
CVE-2022-26181
Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligneddealloc:src/lepton/bitops.cc:108...
Vim eval_lambda buffer overflow
The vulnerability of the evallambda function src/eval.c in the Vim text editor is caused by buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to trigger a buffer overflow...
CVE-2021-46512
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsapply at src/mjsexec.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46507
Jsish v3.5.0 was discovered to contain a stack overflow via JsiLogMsg at src/jsiUtils.c...