CVE-2022-39051 Perl Code execution in Template Toolkit

Attacker might be able to execute malicious Perl code in the Template toolkit, by having the admin installing an unverified 3th party package...

CVE-2022-39051

CVE-2022-39051 affects OTRS/OTRS Community Edition where an admin installing an unverified third‑party package could allow execution of malicious Perl code via the Template Toolkit vulnerability. Affected products/versions include OTRS and OTRS Community Edition (see connected PTSecurity entries/...

OTRS 安全漏洞

OTRS is an application from the German company OTRS. A service management software. A security vulnerability exists in OTRS version 7.0.x prior to 7.0.37, and OTRS version 8.0.x prior to 8.0.25, which stems from the possibility that an attacker could execute malicious Perl code in the template...

Fedora: Security Advisory for ctk (FEDORA-2022-d9f1bb102d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for ctk (FEDORA-2022-eaeeb0ca2b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: ctk-0.1-0.24.20190721.fc36

The Common Toolkit is a community effort to provide support code for medical image analysis, surgical navigation, and related projects. This package contains the CTK Core library...

[SECURITY] Fedora 35 Update: ctk-0.1-0.24.20190721.fc35

The Common Toolkit is a community effort to provide support code for medical image analysis, surgical navigation, and related projects. This package contains the CTK Core library...

GHSA-XFHG-9PJG-XG7G VTK NULL pointer dereference vulnerability

There is a NULL pointer dereference vulnerability in VTK, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe as the return value can be NULL and that NULL pointer dereference may...

DEBIAN-CVE-2021-42521

There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe as the return value can be NULL and that NULL pointer...

PYSEC-2022-255

There is a NULL pointer dereference vulnerability in VTK, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe as the return value can be NULL and that NULL pointer dereference may...

UBUNTU-CVE-2021-42521

There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe as the return value can be NULL and that NULL pointer...

VTK 代码问题漏洞

VTK is an open source software system for image processing, 3D graphics, body drawing and visualization. VTK suffers from a code issue vulnerability that stems from its IO/Infovis/vtkXMLTreeReader.cxx component not checking the return value of the libxml2 API "xmlDocGetRootElement" and attempting...

The vulnerability of the Open AMT Cloud Toolkit software, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of the Open AMT Cloud Toolkit software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain increased privileges...

CVE-2022-25899

Authentication bypass for the Open AMT Cloud Toolkit software maintained by IntelR before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-25899

Authentication bypass for the Open AMT Cloud Toolkit software maintained by IntelR before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-25899

Authentication bypass for the Open AMT Cloud Toolkit software maintained by IntelR before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-25899

CVE-2022-25899 affects Intel’s Open AMT Cloud Toolkit prior to versions 2.0.2 and 2.2.2. The issue is described as an authentication bypass that may allow an unauthenticated user to escalate privileges via network access. Public sources (Intel advisory, Red Hat/NCSC entries) confirm the affected ...

CVE-2022-25899

Authentication bypass for the Open AMT Cloud Toolkit software maintained by IntelR before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

The GitHub Actions ToolKit provides a set of packages to make creating actions easier. The core.exportVariable function uses a well known delimiter that attackers can use to break out of that specific variable and assign values to other arbitrary variables. Workflows that write untrusted values t...

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a heap buffer overflow in the /release-x64/otfccdump+0x6b05ce file...