apache tiles vulnerabilities and exploits

(subscribe to this query)

Apache Tiles 2.1 prior to 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows remote malicious users to conduct cross-site scripting (XSS) attacks or obtain sensitive information via unspe...

Apache Tiles 2.1.1 Apache Tiles 2.1.0

** UNSUPPORTED WHEN ASSIGNED ** The value set as the DefaultLocaleResolver.LOCALE_KEY attribute on the session was not validated while resolving XML definition files, leading to possible path traversal and eventually SSRF/XXE when passing user-controlled data to this key. Passing...

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to a Null Pointer Dereference leading a crash in the RemoteFX (rfx) handling. Inside the `rfx_process_message_tileset` function, the ...

Freerdp Freerdp 3.0.0 Freerdp Freerdp Debian Debian Linux 10.0 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Fedoraproject Fedora 39

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `progressive_decompress` function. This issue is likely down to incorrect calculations of the `nXSrc` and `nYSr...

Freerdp Freerdp 3.0.0 Freerdp Freerdp Debian Debian Linux 10.0 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Fedoraproject Fedora 39

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the `clear_decompress_bands_data` function in which there is no offset validation. Abuse of this vulnerability may ...

Freerdp Freerdp 3.0.0 Freerdp Freerdp Debian Debian Linux 10.0 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Fedoraproject Fedora 39

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions there is a Global-Buffer-Overflow in the ncrush_decompress function. Feeding crafted input into this function can trigger the overflow which has only bee...

Freerdp Freerdp 3.0.0 Freerdp Freerdp Fedoraproject Fedora 37 Fedoraproject Fedora 38 Fedoraproject Fedora 39 Debian Debian Linux 10.0

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS (e.g. abort due to `WINPR_ASSERT` with default compilation flags). When an insufficient blockLen is provided...

Freerdp Freerdp 3.0.0 Freerdp Freerdp Debian Debian Linux 10.0 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Fedoraproject Fedora 39

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the `zgfx_decompress_segment` function. In the context of `CopyMemory`, it's possib...

Freerdp Freerdp 3.0.0 Freerdp Freerdp Debian Debian Linux 10.0 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Fedoraproject Fedora 39

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the `gdi_CreateSurface` function. This issue affects FreeRDP based clients ...

Freerdp Freerdp 3.0.0 Freerdp Freerdp Debian Debian Linux 10.0 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Fedoraproject Fedora 39

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `general_LumaToYUV444` function. This Out-Of-Bounds Read occurs because processing is done on the `in` variable ...

Freerdp Freerdp 3.0.0 Freerdp Freerdp Debian Debian Linux 10.0 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Fedoraproject Fedora 39

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook