5738 matches found
PT-2022-18884 · Apache · Apache James
Name of the Vulnerable Software and Affected Versions: Apache James versions prior to 3.6.3 Apache James versions prior to 3.7.1 Description: The issue is related to a buffering attack that relies on the use of the STARTTLS command. It is similar to a previously solved problem in Apache James...
PYSEC-2022-43188
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict unhandledRejection exiting AND using next start or a custom server...
PYSEC-2022-43188
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict unhandledRejection exiting AND using next start or a custom server...
CVE-2022-36046 Unexpected server crash in Next.js version 12.2.3
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict unhandledRejection exiting AND using next start or a custom server...
CVE-2022-36046
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict "unhandledRejection" exiting AND using next start or a "custom serve...
CVE-2022-36046: Uncaught Exception
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict unhandledRejection exiting AND using next start or a custom server...
GHSA-WFF4-FPWG-QQV3 Unexpected server crash in Next.js
Impact When specific requests are made to the Next.js server it can cause an unhandledRejection in the server which can crash the process to exit in specific Node.js versions with strict unhandledRejection handling. - Affected: All of the following must be true to be affected by this CVE - Node.j...
PT-2022-23140 · Next.Js +1 · Next.Js +1
Name of the Vulnerable Software and Affected Versions: Next.js version 12.2.3 Description: The issue affects Next.js when used with Node.js version above v15.0.0 and strict unhandledRejection exiting, and when using next start or a custom server. Specific requests to the Next.js server can cause ...
iowaheadstart.com Cross Site Scripting vulnerability OBB-2866269
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE SLES12: java-1_7_1-ibm / java-1_7_1-ibm-alsa / java-1_7_1-ibm-devel / etc (SUSE-SU-2022:2898-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2898-1 advisory. - Updated to Java 7.1 Service Refresh 5 Fix Pack 15 bsc1202427: - CVE-2022-34169: Fixed an integer truncation issue in the Xalan Ja...
Raptor Heap Buffer Overflow DoS
The vulnerability of the raptorxmlwriterstartelementcommon function in the Raptor library is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CLSA-2022-1661174726 Fixed CVE-2022-2581 in vim
CVE-2022-2581: fix illegal memory access when pattern starts with illegal byte...
OESA-2022-1844 kernel security update
Security Fixes: The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol .bss. This allows Xen PV guest OS users to cause a denial of service or gain privileges.CVE-2022-36123 In v4l2m2mquerybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to...
mg-start-node (>=1.0.1, <=1.0.5) potentially affected by unknown CVE via mongobd (0.0.1-security.0)
mongobd NPM version 0.0.1-security.0 is affected by a known vulnerability. The following packages have a transitive dependency on mongobd and may be impacted: - mg-start-node =1.0.1, =1.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2022-4685...
mg-start-node (>=1.0.1, <=1.0.5) potentially affected by unknown CVE via mongobd (0.0.1-security.0)
mongobd NPM version 0.0.1-security.0 is affected by a known vulnerability. The following packages have a transitive dependency on mongobd and may be impacted: - mg-start-node =1.0.1, =1.0.5 Source cves: unknown CVE Source advisory: GHSA-PWW6-CQMQ-4M78...
Important: kernel
Issue Overview: An out-of-bounds write flaw was found in the Linux kernels framebuffer-based console driver functionality in the way a user triggers ioctl FBIOPUTVSCREENINFO with malicious data. This flaw allows a local user to crash or potentially escalate their privileges on the system...
EulerOS 2.0 SP5 : java-1.8.0-openjdk (EulerOS-SA-2022-2272)
According to the versions of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions tha...
EulerOS 2.0 SP8 : java-1.8.0-openjdk (EulerOS-SA-2022-2224)
According to the versions of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported...
