1949 matches found
CVE-2022-2889 Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
GHSA-9Q29-JCJW-FW7H Moodle Incorrect Authorization vulnerability
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course...
GSD-2022-1003986 eth: tg3: silence the GCC 12 array-bounds warning
eth: tg3: silence the GCC 12 array-bounds warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003262 netfilter: nf_tables: memleak flow rule from commit path
netfilter: nftables: memleak flow rule from commit path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...
GSD-2022-1003192 netfilter: nf_tables: disallow non-stateful expression in sets earlier
netfilter: nftables: disallow non-stateful expression in sets earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.13 by commit...
CVE-2021-40944
In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...
BELL-CVE-2022-31081
Bulletin has no description...
PT-2025-18926
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A crash occurs when the NDOB bit is set using commands like "sg write same --ndob" and the code attempts to access the se cmd-t data sg, which is NULL. This issue affects the availability of t...
CVE-2022-2206 Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
CVE-2022-2183 Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
PT-2022-19730 · Unknown · Cla-Assistant
Name of the Vulnerable Software and Affected Versions: CLA assistant affected versions not specified Description: The issue is due to improper error handling, allowing an authenticated user to crash the CLA assistant instance, which could impact the application's availability. Recommendations: At...
MantisBT SQL Injection via mc_project_get_users function
In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mcprojectgetusers function through the API SOAP...
MGASA-2022-0199 Updated ffmpeg packages fix security vulnerability
This update provides ffmpeg version 4.3.4, which fixes several security vulnerabilities and other bugs which were corrected upstream...
openshift-origin-node Improper Input Validation vulnerability
Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly...
GHSA-5GX6-F2QQ-475F EGroupware Code Injection vulnerability
phpgwapi/js/fckeditor/editor/dialog/fckspellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote attackers to execute arbitrary commands v...
GHSA-9568-HCJ9-RF7V Webkit PDFs for TYPO3 has SQL Injection vulnerability
SQL injection vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
phpMyAdmin Directory Traversal vulnerability
Directory traversal vulnerability in libraries/displaytbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in a...
GHSA-XW83-PWRM-9J74 Twig remote code execution in templates
The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the self variable in a template...
CVE-2022-29173 No protection against rollback attacks in go-tuf
go-tuf is a Go implementation of The Update Framework TUF. go-tuf does not correctly implement the client workflow for updating the metadata files for roles other than the root role. Specifically, checks for rollback attacks are not implemented correctly meaning an attacker can cause clients to...
