2939 matches found
Ruby 安全漏洞
Ruby is a cross-platform, object-oriented, dynamically typed programming language from the individual developer Yukihiro Matsumoto. A security vulnerability exists in Ruby versions prior to 0.4.2, which stems from a regular expression denial of service in the UtilescapeElement method...
Linux Distros Unpatched Vulnerability : CVE-2011-1675
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows...
CVE-2025-27220
In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service ReDoS vulnerability exists in the UtilescapeElement method...
CVE-2025-27220
In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service ReDoS vulnerability exists in the UtilescapeElement method...
AZL-57712 CVE-2025-25724 affecting package libarchive for versions less than 3.7.7-2
listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custo...
UBUNTU-CVE-2025-25724
listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custo...
openSUSE Security Advisory (SUSE-SU-2024:1943-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
UBUNTU-CVE-2025-26308
A memory leak has been identified in the parseSWFFILTERLIST function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...
UBUNTU-CVE-2025-26304
A memory leak has been identified in the parseSWFEXPORTASSETS function in util/parser.c of libming v0.4.8...
UBUNTU-CVE-2025-26307
A memory leak has been identified in the parseSWFIMPORTASSETS2 function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...
CVE-2025-26304
A memory leak has been identified in the parseSWFEXPORTASSETS function in util/parser.c of libming v0.4.8...
PT-2025-7597 · Libming · Libming
Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory leak has been identified in the readSizedString function in util/read.c, which allows attackers to cause a denial of service via a crafted file. Recommendations: For libming version 0.4.8, consider...
CVE-2025-26308
CVE-2025-26308 affects libming v0.4.8, where a memory leak in parseSWF_FILTERLIST (util/parser.c) can be triggered by a crafted SWF file to cause denial of service. The linked sources corroborate the issue across multiple feeds (NVD, Red Hat, Veracode, OSV, etc.), all citing the same memory-leak ...
CVE-2024-57078
A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
@code-dungeon/yardstick (>=0.0.3 <=0.0.17), @kcutils/color (=0.2.0-rc.3) +39 more potentially affected by CVE-2024-57085 via @stryker-mutator/util (>=0.0.1 <=8.7.0)
@stryker-mutator/util NPM version =0.0.1, =0.0.3, =0.2.0-rc.0, =1.1.0, =1.0.0-alpha.3, =1.1.59, =1.0.0, =1.0.0, =5.2.0, =8.7.0 and more Source cves: CVE-2024-57085 Source advisory: OSV:GHSA-9J5Q-479X-43G2...
@stryker-mutator/util vulnerable to Prototype Pollution
A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57078
A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57085
A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57078
CVE-2024-57078 describes a prototype pollution in cli-util v1.1.27, specifically affecting the lib.merge function. The underlying issue is prototype contamination that attackers can leverage to trigger a Denial of Service (DoS) via a crafted payload. Public documents consistently identify cli-uti...
