157 matches found
PT-2025-26091 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns an uninitialized variable use in the wil write file wmi function. A commit changed simple write to buffer to memdup user, but forgot to update the return value,...
OESA-2025-1585 nasm security update
NASM is the Netwide Assembler, a free portable assembler for the Intel 80x86 microprocessor series, using primarily the traditional Intel instruction mnemonics and syntax. It also provides tools in RDOFF binary format, includes linker, library manager, loader, and information dump. Security Fixes...
OESA-2025-1584 nasm security update
NASM is the Netwide Assembler, a free portable assembler for the Intel 80x86 microprocessor series, using primarily the traditional Intel instruction mnemonics and syntax. It also provides tools in RDOFF binary format, includes linker, library manager, loader, and information dump. Security Fixes...
CVE-2024-8958
CVE-2024-8958 affects composiohq/composio v0.4.3, with an unrestricted file write/read vulnerability in the filetools actions due to improper file path validation. This allows reading and writing files anywhere on the server, potentially enabling privilege escalation or remote code execution. No ...
CVE-2024-54449: Relative Path Traversal
The API used to interact with documents in the application contains two endpoints with a flaw that allows an authenticated attacker to write a file with controlled contents to an arbitrary location on the underlying file system. This can be used to facilitate RCE. An account with ‘read’ and ‘writ...
CVE-2024-49421
Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows adjacent attackers to write file in arbitrary location...
CVE-2024-20398: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to obtain read/write file system access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI...
The vulnerability of the ieee_write_file function in the /output/outieee.c component of the Netwide Assembler (NASM) compiler allows a hacker to cause a service failure.
The vulnerability of the ieeewritefile function in the /output/outieee.c component of the Netwide Assembler NASM compiler is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...
Medium: nasm
Issue Overview: Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash. CVE-2023-38665 Affected Packages: nasm Issue Correction: Run dnf update nasm --releasever 2023.4.20240611 or dnf update --advisory ALAS2023-2024-642 --releasever...
CVE-2024-0402
CVE-2024-0402: A path traversal flaw in GitLab CE/EE allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace. Affected versions are 16.0–16.0.x up to 16.6.5, 16.7.x up to 16.7.3, and 16.8.x up to 16.8.0. Exploitation details are not provi...
CVE-2023-42527
Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive information...
PT-2023-6819 · Gpac +2 · Gpac +2
Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev605-gfc9e29089-master Description: The issue is related to a heap-buffer-overflow in the gf isom use compact size function of the GPAC multimedia platform. This can be exploited to cause a denial of service. The...
SUSE CVE-2023-38665
Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash...
AZL-35021 CVE-2023-38665 affecting package nasm 2.16.01-2
Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash...
DEBIAN-CVE-2023-38665
Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash...
UBUNTU-CVE-2023-38665
Null pointer dereference in ieeewritefile in nasm 2.16rc0 allows attackers to cause a denial of service crash...
nasm 代码问题漏洞
Nasm is an open source programming tool software from The Nasm Development Team team. A security vulnerability exists in nasm version 2.16rc0, which stems from a null pointer dereference issue in ieeewritefile...
Path traversal
In imo.im 2022.11.1051, a path traversal vulnerability delivered via an unsanitized deeplink can force the application to write a file into the application's data directory. This may allow an attacker to save a shared library under a special directory which the app uses to dynamically load module...
PT-2023-5284 · Libeconf +1 · Libeconf +1
Name of the Vulnerable Software and Affected Versions: libeconf affected versions not specified Description: The issue is related to the econf writeFile function in the libeconf library, which is used for configuration file analysis and management. It involves a buffer overflow in memory, allowin...