9699 matches found
GHSA-M43H-HFRQ-X8WX SystemDS CPU exhaustion vulnerability
The Security Team noticed that the termination condition of the for loop in the readExternal method is a controllable variable, which, if tampered with, may lead to CPU exhaustion. As a fix, we added an upper bound and termination condition in the read and write logic. We classify it as a...
SystemDS CPU exhaustion vulnerability
The Security Team noticed that the termination condition of the for loop in the readExternal method is a controllable variable, which, if tampered with, may lead to CPU exhaustion. As a fix, we added an upper bound and termination condition in the read and write logic. We classify it as a...
The vulnerability of the OGG Core Library, a data stream management tool from Oracle GoldenGate, allows a hacker to gain full control over the application.
The vulnerability of the OGG Core Library, a data stream management tool of Oracle GoldenGate, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...
CVE-2022-31017
Zulip is an open-source team collaboration tool. Versions 2.1.0 through and including 5.2 are vulnerable to a logic error. A stream configured as private with protected history, where new subscribers should not be allowed to see messages sent before they were subscribed, when edited causes the...
CVE-2022-31017
Zulip Server contains a logic error in versions 2.1.0 through 5.2 where a private stream with protected history, upon edits, erroneously causes an API event that includes the edited message to all current subscribers. The issue stems from the server sending the edited message via an API event to ...
The vulnerability of the streamGetEdgeID function in the Redis database management system allows a attacker to compromise the confidentiality, integrity, and accessibility of data.
The vulnerability of the streamGetEdgeID function in the Redis database management system is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of data...
UBUNTU-CVE-2022-33105
Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID...
Malicious Package
Overview node-red-contrib-aws-stream-manager is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerab...
Malicious Package
Overview red-contrib-aws-stream-manager is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...
Redis Labs Redis 安全漏洞
Redis Labs Redis is an open source, web-enabled, memory-based, persistent logging, key-value Key-Value storage database written in ANSI C, with a multi-language API, from Redis Labs. A security vulnerability exists in Redis, which stems from the discovery that Redis v7.0 contains a memory leak vi...
Malicious code in @zipmex/events-stream-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b626ed2ba8317a3c709a45a9d17f5ef193b73c0b157c6dc10c88a6c9a08cc513 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-794 Malicious code in @zipmex/events-stream-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b626ed2ba8317a3c709a45a9d17f5ef193b73c0b157c6dc10c88a6c9a08cc513 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sfdc-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50390ed1cd3695772872a4a39fe10ca0945ca2aedf8136df6c4e3789f3960b0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6057 Malicious code in sfdc-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50390ed1cd3695772872a4a39fe10ca0945ca2aedf8136df6c4e3789f3960b0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2349 Malicious code in datadog-app-stream-admin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2bb8c835585dd549dff499a67f8ac42c774755fe17d7c7f54561aa816afca2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in datadog-app-stream-admin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2bb8c835585dd549dff499a67f8ac42c774755fe17d7c7f54561aa816afca2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
UBUNTU-CVE-2014-125017
A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpzadecodestream. The manipulation leads to memory corruption. The attack can be initiated remotely. The name of the patch is Fixes Invalid Writes. It is recommended to apply a patch to fix thi...
FFmpeg 缓冲区错误漏洞
FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A code execution vulnerability exists in FFmpeg rpzadecodestream, which can be exploited by an attacker to trigger an out-of-bounds read memory access and execute arbitrary code on the syst...
Virtuozzo Hybrid Server 7.5 Update 3 Hotfix 2 (7.5.3-407)
The Hotfix 2 for Virtuozzo Hybrid Server 7.5 Update 3 provides new features as well as stability and usability bug fixes. Vulnerability id: PSBM-140018 Unable to set an IP address to containers based on the vzlinux-stream-9-x8664 and centos-stream-9-x8664 templates. Vulnerability id: PSBM-140305...
