bwm-ng 代码问题漏洞

bwm-ng is a small and simple console-based real-time network and disk io bandwidth monitor. A security vulnerability exists in bwm-ng v0.6.2 src/options.c, which stems from an arbitrary null write in the getcmdlnoptions function in src/options.c. The vulnerability is caused by the presence of an...

CVE-2018-20574 affecting package yaml-cpp for versions less than 0.6.2-6

CVE-2018-20574 affecting package yaml-cpp for versions less than 0.6.2-6. A patched version of the package is available...

CVE-2018-20573 affecting package yaml-cpp for versions less than 0.6.2-6

CVE-2018-20573 affecting package yaml-cpp for versions less than 0.6.2-6. A patched version of the package is available...

CVE-2021-22548 Arbitrary enclave memory overread vulnerability in Asylo TrustedPrimitives::UntrustedCall

An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted memory to trusted memory, if the latter is later copied out, it allows for reading of memory regions from the trusted region. It is recommended to update past 0.6.2 or git commit...

PT-2021-15137 · Google · Asylo

Name of the Vulnerable Software and Affected Versions: Asylo versions prior to 0.6.2 Description: An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. Recommendations: For Asylo versions prior to 0.6.2, update past 0.6.2 or apply the git commit...

CVE-2021-27378

An issue was discovered in the randcore crate before 0.6.2 for Rust. Because readu32into and readu64into mishandle certain buffer-length checks, a random number generator may be seeded with too little data...

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the InlineArray implementation an unaligned reference may be generated for a type that has a large alignment requirement.

...

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation the array size is not checked when constructed with pair().

...

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation the array size is not checked when constructed with unit().

...

Mozilla Rust Input Validation Error Vulnerability (CNVD-2021-30574)

Rust is a general-purpose, compiled programming language. An input validation error vulnerability exists in Mozilla Rust version 0.6.2, which can be exploited by an attacker to cause an error in the Chunk implementation when constructing arrays using without checking the array size...

Mozilla Rust Input Validation Error Vulnerability

Rust is a general-purpose, compiled programming language. An input validation error vulnerability exists in Mozilla Rust version 0.6.2, which originates in the nonlinearray implementation and can be exploited by an attacker to generate unaligned references for types with large alignment...

PT-2020-16214

Name of the Vulnerable Software and Affected Versions sized-chunks crate versions through 0.6.2 Description An issue was discovered in the sized-chunks crate, where the Chunk implementation has memory-safety issues. Specifically, the array size is not checked when constructed with unit, pair, or...

GHSA-49RV-G7W5-M8XX Cross-Site Scripting in @novnc/novnc

Versions of @novnc/novnc prior to 0.6.2 are vulnerable to Cross-Site Scripting XSS. The package fails to validate input from the remote VNC server such as the VNC server name. This allows an attacker in control of the remote server to execute arbitrary JavaScript in the noVNC web page. It affects...

Cross-Site Scripting in @novnc/novnc

Versions of @novnc/novnc prior to 0.6.2 are vulnerable to Cross-Site Scripting XSS. The package fails to validate input from the remote VNC server such as the VNC server name. This allows an attacker in control of the remote server to execute arbitrary JavaScript in the noVNC web page. It affects...

DEBIAN-CVE-2014-5013

DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...

CVE-2014-5012

DOMPDF before 0.6.2 allows denial of service...

DOMPDF Remote Code Execution Vulnerability

DOMPDF is a converter to convert HTML to PDF. A remote code execution vulnerability exists in DOMPDF versions prior to 0.6.2. No details of the vulnerability are provided at this time...

DOMPDF Information Disclosure Vulnerability

DOMPDF is a converter to convert HTML to PDF. An information disclosure vulnerability exists in versions of DOMPDF prior to 0.6.2. The vulnerability stems from a configuration or other error in the operation of a networked system or product. An unauthorized attacker could exploit the vulnerabilit...

PT-2020-7695 · Dompdf +2 · Dompdf +2

Name of the Vulnerable Software and Affected Versions: DOMPDF versions prior to 0.6.2 Description: The issue allows information disclosure. Recommendations: For versions prior to 0.6.2, update to version 0.6.2 or later to resolve the issue...

WordPress wp-code-highlightjs plugin cross-site request forgery vulnerability

WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-code-highlightjs plugin is a highlighting plugin used in it. A cross-site request forgery vulnerability exists in WordPre...