Fedora Project Fedora 38

Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows

Western Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk

Unauthenticated SQL Injection in graph_view.php in Cacti

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.

Buffer overflow and overread in phar_dir_read()

Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low)

Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.

Remote Code Execution (RCE)

FreeRDP Out-Of-Bounds Read in ncrush_decompress

FreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_data

FreeRDP Out-Of-Bounds Read in planar_skip_plane_rle

FreeRDP OutOfBound Read in zgfx_decompress_segment

FreeRDP Out-Of-Bounds Read in interleaved_decompress

FreeRDP vulnerable to integer underflow in nsc_rle_decode

Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go

Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go

Code injection via go command with cgo in cmd/go

An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Mock: privilege escalation for users that can access mock configuration

Invalid offset validation leading to Out Of Bound Write in FreeRDP

Out-Of-Bounds Write in FreeRDP

A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.

A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django's "Uploading multiple files" documentation suggested otherwise.

Moodle: rce due to lfi risk in some misconfigured shared hosting environments

FreeRDP ExtractRunLengthRegular* out of bound read

IntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDP

Out-Of-Bounds Write in FreeRDP

Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS).

UPX bele.h get_ne64 heap-based overflow

freerdp_image_copy out of bound read

heap buffer overflow in libaom

Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c. This vulnerability allows attackers to cause undefined behavior within the application.

Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious HID device. (Chromium security severity: High)

Heap-based Buffer Overflow in radareorg/radare2

Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)

Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass mixed content policy via a crafted HTML page. (Chromium security severity: Low)

FreeRDP rdp_redirection_read_base64_wchar out of bound read