CVE-2022-46908

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE...

CVE-2022-46908: Undefined Security Weakness

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE...

CVE-2022-46908

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE...

CVE-2022-46908

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE...

CVE-2021-30218

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

ALPINE-CVE-2021-30218

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

CVE-2021-30218

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

Null pointer dereference

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

CVE-2021-30218

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

CVE-2021-30218

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

CVE-2021-30218

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

CVE-2021-30218

CVE-2021-30218 affects samurai 1.2 and is caused by a NULL pointer dereference in writefile() within util.c triggered by a crafted build file. The issue is documented across multiple feeds (Red Hat, NVD, OSV, Veracode) with consistent description. CVSS data (NVD) indicates a low to medium overall...

CVE-2021-30218

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

PT-2021-18670

Name of the Vulnerable Software and Affected Versions samurai version 1.2 Description The issue is related to a NULL pointer dereference in the writefile function, located in util.c, which can be triggered by a crafted build file. Recommendations For version 1.2, consider restricting access to th...

CVE-2021-30218: NULL Pointer Dereference

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

samurai 代码问题漏洞

samurai is a ninja-compatible build utility written in C. A security vulnerability exists in samurai 1.2, which originates from dereferencing a NULL pointer in writefile in util.c via a crafted build file...

CVE-2021-28154

Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...

CVE-2021-28154

Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...

CVE-2021-28154

Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...

CVE-2021-28154: Missing Authorization

Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...