Security
Headlines
HeadlinesLatestCVEs

Tag

#git

CVE-2020-19909: curl: cap the maximum allowed values for retry time arguments by bagder · Pull Request #4166 · curl/curl

Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via crafted value as the retry delay.

CVE
#vulnerability#git
CVE-2023-39599: CVE/CVE-2023-39599/Readme.md at main · desencrypt/CVE

Cross-Site Scripting (XSS) vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Social Settings parameter.

CVE-2023-39141: webui-aria2 CVE-2023-39141

webui-aria2 commit 4fe2e was discovered to contain a path traversal vulnerability.

CVE-2021-33390: Heap Use After Free in the deletestringbox() function (different than #7) (#10) · Issues · Dwight Aplevich / dpic · GitLab

dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421.

CVE-2021-32422: Improved robustness to fuzzed input (d317e406) · Commits · Dwight Aplevich / dpic · GitLab

dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array.

CVE-2022-28073: Fix uaf crash in aaft (tests_64927) ##crash · radareorg/radare2@59a9dfb

A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.

CVE-2022-28071: Fix UAF in aaft (tests_64923) ##crash · radareorg/radare2@6544881

A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0.