CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2025-32783

XWiki Platform is a generic wiki platform. A vulnerability in versions from 5.0 to 16.7.1 affects users with Message Stream enabled and a wiki configured as closed from selecting "Prevent unregistered users to view pages" in the Administrations Rights. The vulnerability is that any message sent i...

`FormatContext` stream accessors can cause undefined behavior from safe code

Affected versions of stainlessffmpeg exposed several safe public methods on FormatContext that accepted a streamindex parameter and used it in unsafe pointer operations without checking whether the index was valid. These methods performed pointer arithmetic and dereferenced the resulting stream...

SUSE CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

Dual Utilization of Perturbation for Stream Data Publication under Local Differential Privacy

Stream data from real-time distributed systems such as IoT, tele-health, and crowdsourcing has become an important data source. However, the collection and analysis of user-generated stream data raise privacy concerns due to the potential exposure of sensitive information. To address these...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

DEBIAN-CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

UBUNTU-CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2022-47112

7-Zip 22.01 is affected by CVE-2022-47112: it does not report an error for certain invalid xz files due to issues with stream flags and reserved bits. Some later versions are unaffected. Affected product: 7-Zip 22.01; root cause: inability to report errors for specific malformed xz inputs. Impact...

PT-2025-17393 · 7 Zip +3 · 7-Zip +2

Name of the Vulnerable Software and Affected Versions: 7-Zip versions 22.01 through 24.09 Description: The issue involves 7-Zip not reporting an error for certain invalid xz files, specifically those with issues related to stream flags and reserved bits. Recommendations: For versions 22.01 throug...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2025-28231

Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges...

CVE-2025-28231

CVE-2025-28231 affects Itel Electronics IP Stream v1.7.0.6, with an underlying root cause of incorrect access control that enables unauthenticated remote attackers to execute arbitrary commands with Administrator privileges. The entry is rated CVSS v3.1: 9.1 (CRITICAL), Network attack vector, Low...

PT-2025-17322 · Itel Electronics · Itel Electronics Ip Stream

Name of the Vulnerable Software and Affected Versions: Itel Electronics IP Stream version 1.7.0.6 Description: The issue is related to incorrect access control, allowing unauthorized attackers to execute arbitrary commands with Administrator privileges. Recommendations: For Itel Electronics IP...

Itel Electronics IP Stream 安全漏洞

Itel Electronics IP Stream is an IP streaming application from Itel Electronics. A security vulnerability exists in Itel Electronics IP Stream version v1.7.0.6, which stems from improper access control and could lead to the execution of arbitrary commands with administrator privileges...

Missing Authentication for Critical Function

Overview rasa-pro is a State-of-the-art open-core Conversational AI framework for Enterprises that natively leverages generative AI for effortless assistant development. Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the voice connector APIs fo...

Apple Multiple Products Memory Corruption Vulnerability

Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file...

CVE-2025-32783

XWiki Platform is a generic wiki platform. A vulnerability in versions from 5.0 to 16.7.1 affects users with Message Stream enabled and a wiki configured as closed from selecting "Prevent unregistered users to view pages" in the Administrations Rights. The vulnerability is that any message sent i...

CVE-2025-32783

XWiki Platform vulnerability CVE-2025-32783 affects versions 5.0–16.7.1 when Message Stream is enabled and the wiki is configured as closed (Prevent unregistered users to view pages). A message sent in a subwiki to "everyone" is exposed to the main wiki via the Dashboard, even if the subwiki is p...