1949 matches found
GHSA-2Q26-R8C4-JFX5 Edgewall Trac Cross-site request forgery (CSRF) vulnerability
Cross-site request forgery CSRF vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors...
GSD-2022-1002254 drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
drm/amd/display: Fix a NULL pointer dereference in amdgpudmconnectoraddcommonmodes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by...
CVE-2022-1420 Use of Out-of-range Pointer Offset in vim/vim
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774...
Denial Of Service (DoS)
strikeentco/set is vulnerable to denial of service. The vulnerability exists due to improper input validation in the main.js file, allowing an attacker to perform remote code execution...
CVE-2021-46518
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsdisown at src/mjscore.c...
CVE-2021-44988
Jerryscript v3.0.0 and below was discovered to contain a stack overflow via ecmafindnamedproperty in ecma-helpers.c...
pytorch-lightning is vulnerable to Deserialization of Untrusted Data
pytorch-lightning is vulnerable to Deserialization of Untrusted Data...
phpservermon is vulnerable to CRLF Injection
phpservermon is vulnerable to Improper Neutralization of CRLF Sequences...
GSD-2021-1002191 cfg80211: fix management registrations locking
cfg80211: fix management registrations locking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...
GSD-2021-1002157 mlxsw: thermal: Fix out-of-bounds memory accesses
mlxsw: thermal: Fix out-of-bounds memory accesses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...
GSD-2021-1002024 comedi: dt9812: fix DMA buffers on stack
comedi: dt9812: fix DMA buffers on stack This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.159 by commit...
Prototype Pollution
json-ptr is vulnerable to prototype pollution. The vulnerability exists in 'setValueAtPath' and 'unsetValueAtPath' functions in 'util.ts' because the type of user provided keys are not properly validated. An attacker is able to inject properties into existing construct prototypes and modify...
CVE-2021-3872
vim is vulnerable to Heap-based Buffer Overflow...
Denial Of Service (DoS)
lua5.3 is vulnerable to denial of service. The vulnerability exists due to a negation overflow and segmentation fault in getlocal and setlocal...
Privilege Escalation
openssh is vulnerable to privilege escalation. The vulnerability exists due to insecure initialization...
Regular Expression Denial Of Service (ReDoS)
soap is vulnerable to regular expression denial of service. The use of an inefficient regex pattern for match in handleResponse function of http.js allows a malicious user to crash the application by providing a malicious input...
Ether_MP3_CD_Burner 1.3.8 - Buffer Overflow (SEH)
Exploit Title: EtherMP3CDBurner 1.3.8 - Buffer Overflow SEH Date: 24.09.2021 Software Link: https://mp3-avi-mpeg-wmv-rm-to-audio-cd-burner.software.informer.com/download/?caa8ec-1.2 Software Link 2: https://anonfiles.com/X2Ff36J6ue/ethercdburnerexe Exploit Author: Achilles Tested Version: 1.3.8...
Denial Of Service (DOS)
libsixel.so is vulnerable to denial of service DoS. The vulnerability exists when an attacker send a malicious file, causing a stack buffer overflow in the function gifprocessraster at fromgif.c...