1166 matches found
java-xmlbuilder 代码问题漏洞
java-xmlbuilder is James Murty personal developer of a utility program . It allows the construction of simple XML documents using relatively sparse Java code. A code issue exists in versions of java-xmlbuilder prior to 1.1, which stems from the presence of an unknown feature that causes xml...
SUSE CVE-2007-4133
The 1 hugetlbvmtruncatelist and 2 hugetlbvmtruncate functions in fs/hugetlbfs/inode.c in the Linux kernel before 2.6.19-rc4 perform certain priotree calculations using HPAGESIZE instead of PAGESIZE units, which allows local users to cause a denial of service panic via unspecified vectors...
SUSE CVE-2012-2870
libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service application crash via a crafted XSLT expression that is not properly identified during XPath navigation, related to 1 the...
SUSE CVE-2016-9909
The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of the less than character in attribute values...
SUSE CVE-2017-2986
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video FLV codec. Successful exploitation could lead to arbitrary code execution...
SUSE CVE-2018-5773
An issue was discovered in markdown2 aka python-markdown2 through 2.3.5. The safemode feature, which is supposed to sanitize user input against XSS, is flawed and does not escape the input properly. With a crafted payload, XSS can be triggered, as demonstrated by omitting the final '' character...
SUSE CVE-2020-11523
libfreerdp/gdi/region.c in FreeRDP versions 1.0 through 2.0.0-rc4 has an Integer Overflow...
SUSE CVE-2021-20206
An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...
SUSE CVE-2021-26222
The ezxmlnew function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool...
SUSE CVE-2021-29948
Signatures are written to disk before and read during verification, which might be subject to a race condition when a malicious local process or user is replacing the file. This vulnerability affects Thunderbird 78.10...
CVE-2022-1943 affecting package kernel for versions less than 5.15.92.1-1
CVE-2022-1943 affecting package kernel for versions less than 5.15.92.1-1. A patched version of the package is available...
PT-2023-16399 · Wallabag · Wallabag
Name of the Vulnerable Software and Affected Versions: wallabag versions prior to 2.5.3 Description: The issue concerns an improper authorization vulnerability in the wallabag GitHub repository. It affects the export feature, which allows users to export entries in various formats, such as PDF,...
AZL-13126 CVE-2023-0433 affecting package vim for versions less than 9.0.1247-1
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225...
CVE-2023-0054 affecting package vim for versions less than 9.0.1145-1
CVE-2023-0054 affecting package vim for versions less than 9.0.1145-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-23492
The Login with Phone Number WordPress Plugin, version 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' parameter of its 'lwpforgotpassword' action...
CVE-2022-3113 affecting package kernel for versions less than 5.15.86.1-1
CVE-2022-3113 affecting package kernel for versions less than 5.15.86.1-1. A patched version of the package is available...
CVE-2022-3110 affecting package kernel for versions less than 5.15.86.1-1
CVE-2022-3110 affecting package kernel for versions less than 5.15.86.1-1. A patched version of the package is available...
CVE-2022-47943 affecting package kernel for versions less than 5.15.86.1-1
CVE-2022-47943 affecting package kernel for versions less than 5.15.86.1-1. A patched version of the package is available...
CVE-2022-42898 affecting package krb5 for versions less than 1.19.4-1
CVE-2022-42898 affecting package krb5 for versions less than 1.19.4-1. An upgraded version of the package is available that resolves this issue...