Security

Dependency cache path traversal in Gradle

cve-program ·

Vendor product: gradle

postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to c…

cve-program ·

Vendor product: postgresql

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS atta…

cve-program ·

https://hibernate.org/validator/: hibernate-validator

Gradle has incorrect permission assignment for symlinked files used in copy or archiving operations

cve-program ·

Vendor product: gradle

.NET Denial of Service Vulnerability

cve-program ·

Vendor product: Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) · Vendor product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) · Vendor product: Microsoft Visual Studio 2022 version 17.0

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

cve-program ·

Vendor product: n/a

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

cve-program ·

Vendor product: AutoCAD, Advance Steel and Civil 3D

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new on…

cve-program ·

Vendor product: Apache Ant

Apache XML Graphics Batik: Information disclosure vulnerability

cve-program ·

Vendor product: Apache XML Graphics Batik

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause p…

cve-program ·

Vendor product: n/a

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

nvd ·

In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, t…

nvd ·

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have e…

nvd ·

This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.

nvd ·

eivindfjeldstad-dot below 1.0.3 is vulnerable to Prototype Pollution.The function 'set' could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.

nvd ·

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.

nvd ·

Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The c…

nvd ·

The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors.

nvd ·

Inefficient Regular Expression Complexity in chalk/ansi-regex

cve-program ·

Vendor product: chalk/ansi-regex

Git's `git apply` overwriting paths outside the working tree

cve-program ·

Vendor product: git

drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket buffers have memory allocated but not freed).

cve-program ·

Vendor product: n/a

In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for…

cve-program ·

Vendor product: Android

Heap-based Buffer Overflow in vim/vim

cve-program ·

Vendor product: vim/vim

Heap-based Buffer Overflow in vim/vim

cve-program ·

Vendor product: vim/vim

Use of Uninitialized Variable in vim/vim

cve-program ·

Vendor product: vim/vim

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames i…

cve-program ·

Vendor product: n/a

Use after free in append_command in vim/vim

cve-program ·

Vendor product: vim/vim

Stack-based Buffer Overflow in vim/vim

cve-program ·

Vendor product: vim/vim

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim

cve-program ·

Vendor product: vim/vim

Use After Free in vim/vim

cve-program ·

Vendor product: vim/vim

Heap-based Buffer Overflow in vim/vim

cve-program ·

Vendor product: vim/vim

Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.

cve-program ·

Vendor product: n/a

Out-of-bounds Read in vim/vim

cve-program ·

Vendor product: vim/vim

hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.

cve-program ·

Vendor product: n/a

Heap-based Buffer Overflow in vim/vim

cve-program ·

Vendor product: vim/vim

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in vim/vim

cve-program ·

Vendor product: vim/vim

Git vulnerable to local clone-based data exfiltration with non-local transports

cve-program ·

Vendor product: git

An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check.

cve-program ·

Vendor product: n/a

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary…

cve-program ·

Vendor product: Apache Log4j

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branc…

cve-program ·

Vendor product: n/a

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server t…

cve-program ·

Vendor product: Apache Batik

Heap-based Buffer Overflow in function cmdline_erase_chars in vim/vim

cve-program ·

Vendor product: vim/vim

In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer.alloc()` to return uninitialized memory. This method is intended to be safe and only return initialized, or cleared, memory. The third argument spe…

cve-program ·

Vendor product: Node.js

Node.js versions 9.7.0 and later and 10.x are vulnerable and the severity is MEDIUM. A bug introduced in 9.7.0 increases the memory consumed when reading from the network into JavaScript using the net.Socket object directly as a stream. An …

cve-program ·

Vendor product: Node.js

The `'path'` module in the Node.js 4.x release line contains a potential regular expression denial of service (ReDoS) vector. The code in question was replaced in Node.js 6.x and later so this vulnerability only impacts all versions of Node…

cve-program ·

Vendor product: Node.js

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to detect specific files on the user's computer when affected Microsoft scripting eng…

cve-program ·

Vendor product: Internet Explorer

The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution. An attack is possible from malicious websites open in a web browser on the same computer, or another …

cve-program ·

Vendor product: Node.js

Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Service. In order to address this vulnerability, the implementations of Buffer.alloc() and Buffer.fill() were updated so that …

cve-program ·

Vendor product: Node.js

All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node process which provides an http server supporting TLS server to crash. This can be accomplished b…

cve-program ·

Vendor product: Node.js

All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node server providing an http2 server to crash. This can be accomplished by interacting with th…

cve-program ·

Vendor product: Node.js