vulnerabilities and exploits

(subscribe to this query)

A crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22.

Tuxera Ntfs-3g Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfs_get_attribute_value, in NTFS-3G < 2021.8.22.

Tuxera Ntfs-3g Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

vim is vulnerable to Heap-based Buffer Overflow

Vim Vim Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Debian Debian Linux 9.0 Debian Debian Linux 10.0

In XeroSecurity Sn1per 9.0 (free version), insecure permissions (0777) are set upon application execution, allowing an unprivileged user to modify the application, modules, and configuration files. This leads to arbitrary code execution with root privileges.

Xerosecurity Sn1per 9.0

2 Github repositories

vim is vulnerable to Use of Uninitialized Variable

Vim Vim Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Debian Debian Linux 9.0 Debian Debian Linux 10.0

Live555 up to and including 1.08 has a memory leak in AC3AudioStreamParser for AC3 files.

Live555 Live555

A XSS vulnerability exists in Versa Director Release: 16.1R2 Build: S8. An attacker can use the administration web interface URL to create a XSS based attack.

Versa-networks Versa Director 16.1r2

1 Github repository

In archive/zip in Go prior to 1.16.8 and 1.17.x prior to 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of an incomplete fix for CVE-2021-33196.

Golang Go Netapp Cloud Insights Telegraf -

In OpenBMC 2.9, crafted IPMI messages allow an malicious user to cause a denial of service to the BMC via the netipmid (IPMI lan+) interface.

Openbmc-project Openbmc 2.9.0

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook