3225 matches found
CVE-2022-43221: Missing Release of Memory after Effective Lifetime
open5gs v2.4.11 was discovered to contain a memory leak in the component src/upf/pfcp-path.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PFCP packet...
CVE-2022-43222
Open5GS v2.4.11 is affected by a memory leak in src/smf/pfcp-path.c that can be exploited to cause a Denial of Service via crafted PFCP packets. The CVE entry documents a HIGH severity (CVSS 3.1 v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Connected sources corroborate the vulnerability in the mem...
CVE-2022-43151: Missing Release of Memory after Effective Lifetime
timg v1.4.4 was discovered to contain a memory leak via the function timg::QueryBackgroundColor at /timg/src/term-query.cc...
D-Link DIR-816 A2 缓冲区错误漏洞
The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from a stack overflow in the srcip parameter of /goform/form2IPQoSTcAdd...
CVE-2021-42523
There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'errmsg' of 'sqlite3exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it...
roaring-landmask (0.4.0) potentially affected by CVE-2022-3358 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3358 Source advisory: OSV:GHSA-4F63-89W9-3JJV...
roaring-landmask (0.4.0) potentially affected by CVE-2022-3358 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3358 Source advisory: OSV:RUSTSEC-2022-0059...
CVE-2022-1725
A NULL pointer dereference vulnerability was found in Vim's vimregexecstring function of the src/regexp.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a NULL pointer dereference that causes a denial of service. Mitigation Untrusted vim scrip...
CVE-2022-38936
An issue has been found in PBC through 2022-8-27. A SEGV issue detected in the function pbcwmessageinteger in src/wmessage.c:137...
CVE-2022-38936: Unchecked Return Value
An issue has been found in PBC through 2022-8-27. A SEGV issue detected in the function pbcwmessageinteger in src/wmessage.c:137...
CVE-2022-37248
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting XSS via src/helpers/Cp.php...
Cross site scripting
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting XSS via src/helpers/Cp.php...
CVE-2022-37248: Improper Neutralization of Input During Web Page Generation
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting XSS via src/helpers/Cp.php...
Pixel＆tonic Craft CMS 跨站脚本漏洞
Pixel & tonic Craft CMS is a content management system CMS from the US company Pixel & tonic. A cross-site scripting vulnerability exists in Craft CMS version 4.2.0.1, which stems from a security issue in the src/helpers/Cp.php page...
CVE-2022-38890
Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njsutf8next at src/njsutf8.h...
CVE-2022-38890
CVE-2022-38890 affects Nginx NJS 0.7.7. A segmentation violation is triggered by the njs_utf8_next function in src/njs_utf8.h. Public sources consistently describe the vulnerability as a segmentation fault in NJS, with NVD citing a CVSS v3.1 base score of 5.5 (Medium) and local attack vector, req...
ouqiang gocron Cross-site scripting vulnerability
Cross site scripting XSS vulnerability in ouqiang gocron through 1.5.3, allows attackers to execute arbitrary code via scope.row.hostname in web/vue/src/pages/taskLog/list.vue...
CVE-2022-38890: Out-of-bounds Read
Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njsutf8next at src/njsutf8.h...