1268 matches found
[SECURITY] Fedora 35 Update: golang-gopkg-src-d-git-4-4.13.1-8.fc35
A highly extensible git implementation in pure go...
openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2022-2097 via openssl-src (=110.0.7+1.1.0i)
openssl-src CARGO version =110.0.7+1.1.0i is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - openssl-sys =0.9.35, =0.9.37 Source cves: CVE-2022-2097 Source advisory: OSV:GHSA-3WX7-46CH-7RQ2...
roaring-landmask (=0.4.0) potentially affected by CVE-2022-2097 via openssl-src (=300.0.0+3.0.0)
openssl-src CARGO version =300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask =0.4.0 Source cves: CVE-2022-2097 Source advisory: OSV:GHSA-3WX7-46CH-7RQ2...
Fedora: Security Advisory for golang-gopkg-src-d-git-4 (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2022-2097 via openssl-src (=110.0.7+1.1.0i)
openssl-src CARGO version =110.0.7+1.1.0i is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - openssl-sys =0.9.35, =0.9.37 Source cves: CVE-2022-2097 Source advisory: OSV:RUSTSEC-2022-0032...
[SECURITY] Fedora 36 Update: golang-gopkg-src-d-git-4-4.13.1-8.fc36
A highly extensible git implementation in pure go...
Deserialization of untrusted data
ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload...
CVE-2021-40944
In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...
CVE-2021-40944
In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...
Design/Logic Flaw
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsarrayconverttoslowarray at src/njsarray.c...
Code injection
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsstringoffset at src/njsstring.c...
CVE-2022-31307
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsstringoffset at src/njsstring.c...
CVE-2022-31307
The provided connected records confirm a concrete vulnerability: Nginx NJS version 0.7.2 contains a segmentation violation in the function njs_string_offset (src/njs_string.c). This is the root cause described consistently across CVE-2022-31307 entries (NVD, Red Hat, OSV, CVE lists). The impact i...
CVE-2022-31306
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsarrayconverttoslowarray at src/njsarray.c...
CVE-2022-31306
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsarrayconverttoslowarray at src/njsarray.c...
MAL-2022-3231 Malicious code in frontend-src (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82e9d69203fc3786cb5e2c10c0de2d32487d039a88f4c90fce6cec3c70e92b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Stack overflow
In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability...
CVE-2022-2000
An out-of-bounds write vulnerability was found in Vim's appendcommand function of the src/exdocmd.c file. This issue occurs when an error for a command goes over the end of IObuff. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap buffer overflo...
CVE-2022-31055 Improper Access Control in kctf
kCTF is a Kubernetes-based infrastructure for capture the flag CTF competitions. Prior to version 1.6.0, the kctf cluster set-src-ip-ranges was broken and allowed traffic from any IP. The problem has been patched in v1.6.0. As a workaround, those who want to test challenges privately can mark the...