The vulnerability of the Rouge formatting tool, a program for grammatical analysis and format conversion of Markdown Kramdown, arises from the use of externally controlled input data for class selection. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Rouge formatting tools for grammatical analysis and Markdown format conversion allows attackers to gain access to confidential data, compromise its integrity, and cause service failures. This vulnerability is related to the lack of restrictions on the space used by the...

haproxy: an HTTP method name may contain a space followed by the name of a protected resource

haproxy has an input validation flaw that could allow a remote attacker to bypass implemented security restrictions. An HTTP method name may contain a space followed by the name of a protected resource. Given this, It is possible that an server would interpret this as a request for that protected...

UBUNTU-CVE-2022-21696

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions it is possible to change the username to that of another chat participant with an additional space character at the end of the nam...

OnionShare 输入验证错误漏洞

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. Used to securely and anonymously share files, host websites, and chat with friends using the Tor network, OnionShare is vulnerable to an input validatio...

CVE-2021-45067

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...

Security Bulletin: Vulnerability in Apache Log4j may affect IBM Spectrum Protect for Space Management (CVE-2021-44832)

Summary A vulnerability in Apache Log4j could result in remote code execution. IBM Spectrum Protect for Space Management includes the IBM Spectrum Protect Backup-Archive Client which installs the vulnerable Log4j files. The below fix packages include Apache Log4j 2.17.1. Vulnerability Details...

CVE-2021-45059

Adobe InDesign version 16.4 and earlier is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2021-45063

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a use-after-free vulnerability in the processing of Format event actions that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to...

CVE-2021-45460

A vulnerability has been identified in SICAM PQ Analyzer All versions V3.18. A service is started by an unquoted registry entry. As there are spaces in this path, attackers with write privilege to those directories might be able to plant executables that will run in place of the legitimate proces...

PT-2022-28306

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.261 Description The issue concerns a fix for async free space accounting for empty parcels in the binder. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28329

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.90 Description The issue concerns a fix for async free space accounting for empty parcels in the binder. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28323

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.170 Description The issue concerns a fix for async free space accounting for empty parcels in the binder. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28315

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.224 Description The issue concerns a fix for async free space accounting for empty parcels in the binder. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28347

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.13 Description The issue concerns a fix for async free space accounting for empty parcels in the binder. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PVS and MCS Devices Cache Disk Quickly Consumed By NTFSDisableLastAccessUpdate

- A Citrix Provisioned VDI, both MCS and PVS provisioned devices may consume most of its available cache disk space soon after boot, with or without any user interaction. - A machine left unattended appears to be consuming cache disk space while Procmon and Resource Monitor do not show...

GHSA-5VWC-R48G-WJ6C Abomonation transmutes &T to and from &[u8] without sufficient constraints

An issue was discovered in the abomonation crate through version 0.7.3 for Rust. Because transmute operations are insufficiently constrained, there can be an information leak or ASLR bypass...

Abomonation transmutes &T to and from &[u8] without sufficient constraints

An issue was discovered in the abomonation crate through version 0.7.3 for Rust. Because transmute operations are insufficiently constrained, there can be an information leak or ASLR bypass...

haproxy: an HTTP method name may contain a space followed by the name of a protected resource

haproxy has an input validation flaw that could allow a remote attacker to bypass implemented security restrictions. An HTTP method name may contain a space followed by the name of a protected resource. Given this, It is possible that an server would interpret this as a request for that protected...

PT-2025-37509

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the tracing subsystem related to handling synthetic events. Specifically, the synthetic event field "char file" can read a string value without...

CVE-2021-45695

An issue was discovered in the mopa crate through 2021-06-01 for Rust. It incorrectly relies on Trait memory layout, possibly leading to future occurrences of arbitrary code execution or ASLR bypass...