3220 matches found
[SECURITY] Fedora 35 Update: golang-gopkg-src-d-git-4-4.13.1-8.fc35
A highly extensible git implementation in pure go...
CVE-2022-32434: Out-of-bounds Write
EIPStackGroup OpENer v2.3.0 was discovered to contain a stack overflow via /bin/posix/src/ports/POSIX/OpENer+0x56073d...
PT-2022-21320
Name of the Vulnerable Software and Affected Versions EIPStackGroup OpENer version 2.3.0 Description A stack overflow issue was discovered in EIPStackGroup OpENer. The issue occurs via /bin/posix/src/ports/POSIX/OpENer+0x56073d. Recommendations For EIPStackGroup OpENer version 2.3.0, at the momen...
roaring-landmask (0.4.0) potentially affected by CVE-2022-2097 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-2097 Source advisory: OSV:GHSA-3WX7-46CH-7RQ2...
Fedora: Security Advisory for golang-gopkg-src-d-git-4 (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
roaring-landmask (0.4.0) potentially affected by CVE-2022-2097 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-2097 Source advisory: OSV:RUSTSEC-2022-0032...
[SECURITY] Fedora 36 Update: golang-gopkg-src-d-git-4-4.13.1-8.fc36
A highly extensible git implementation in pure go...
CVE-2022-32324: Out-of-bounds Write
PDFAlto v0.4 was discovered to contain a heap buffer overflow via the component /pdfalto/src/pdfalto.cc...
PT-2022-21229
Name of the Vulnerable Software and Affected Versions PDFAlto version 0.4 Description A heap buffer overflow issue was discovered in PDFAlto via the component /pdfalto/src/pdfalto.cc. Recommendations For PDFAlto version 0.4, at the moment, there is no information about a newer version that contai...
Deserialization of untrusted data
ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload...
CVE-2022-33107: Deserialization of Untrusted Data
ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload...
CVE-2021-40944
In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...
CVE-2021-40944
Removed by vendor...
CVE-2021-40944: NULL Pointer Dereference
In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...
Design/Logic Flaw
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsarrayconverttoslowarray at src/njsarray.c...
Code injection
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsstringoffset at src/njsstring.c...
CVE-2022-31307
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsstringoffset at src/njsstring.c...
CVE-2022-31307
The provided connected records confirm a concrete vulnerability: Nginx NJS version 0.7.2 contains a segmentation violation in the function njs_string_offset (src/njs_string.c). This is the root cause described consistently across CVE-2022-31307 entries (NVD, Red Hat, OSV, CVE lists). The impact i...
