9306 matches found
CVE-2022-38229
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSymDCTHuffTable at /xpdf/Stream.cc...
CVE-2022-38229
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSymDCTHuffTable at /xpdf/Stream.cc...
CVE-2022-35108
CVE-2022-35108 concerns SWFTools, where a segmentation fault was reported in DCTStream::getChar() within /xpdf/Stream.cc. The core vulnerability is triggered by this function in SWFTools, as documented across multiple sources (e.g., NVD/NVB, Red Hat, Ubuntu, OSV, Nessus plugin, and related adviso...
PT-2022-24301 · Xpdf · Xpdf
Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A heap-buffer overflow issue was discovered in XPDF via the getChar function in DCTStream at /xpdf/Stream.cc. Recommendations: At the moment, there is no information about a newer version that...
XPDF 安全漏洞
XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF has a security vulnerability that originates from DCTStream::decodeImage in /xpdf/Stream.cc contains a floating point exception FPE...
XPDF 缓冲区错误漏洞
XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF suffers from a buffer error vulnerability that stems from DCTStream::transformDataUnit in /xpdf/Stream.cc contains a heap buffer overflow...
CVE-2022-37423
Neo4j APOC Awesome Procedures on Cypher before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling directories via apoc.log.stream...
Directory traversal
Neo4j APOC Awesome Procedures on Cypher before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling directories via apoc.log.stream...
Neo4j 路径遍历漏洞
Neo4j is a Java-based and fully ACID-compatible graphical database from Neo4j, Inc. that supports data migration, add-ons, and more. A security vulnerability exists in Neo4j APOC Awesome Procedures on Cypher version 4.3.0.7, version 4.x up to and including 4.4.0.8, which stems from allowing...
This Week in Spring - August 1st, 2022
Aloha, Spring fans! Welcome to another installment of This Week in Spring! Im still on vacation on the beautiful island of Maui, Hawaii, but I wanted to say hello "aloha!" and share this weeks latest roundup of all thats good and glorious in the wide and wonderful world of Springdom. Funny thing,...
[SECURITY] Fedora 36 Update: commit-stream-0.1.2-8.fc36
OSINT tool for finding Github repositories by extracting commit logs in real time from the Github event API...
DEBIAN-CVE-2021-33453
An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread in stream.c:1538...
CVE-2021-33453
An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread in stream.c:1538...
DEBIAN-CVE-2022-34503
QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...
DEBIAN-CVE-2022-31144
Redis is an in-memory database that persists on disk. A specially crafted XAUTOCLAIM command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7.0.4. The patch is released in version...
UBUNTU-CVE-2022-31144
Redis is an in-memory database that persists on disk. A specially crafted XAUTOCLAIM command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7.0.4. The patch is released in version...
PT-2022-3806
Name of the Vulnerable Software and Affected Versions: Redis versions 7.0.0 through 7.0.3 Description: The issue is related to a heap overflow that can potentially lead to remote code execution. This occurs when a specially crafted XAUTOCLAIM command is executed on a stream key in a specific stat...
Fedora: Security Advisory for commit-stream (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
redis -- Potential remote code execution vulnerability
The Redis core team reports: A specially crafted XAUTOCLAIM command on a stream key in a specific state may result with heap overflow, and potentially remote code execution...