Archive
9 August 2022
Vulnerabilities first published on this day (UTC), newest first.
206 results · Feed
-
Unscored —
An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technolo…
-
Unscored —
Path traversal via Clean on Windows in path/filepath
Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and Go 1.18.3 on Windows allows potential directory traversal attack.
-
Medium 6.5
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of mall…
-
Unscored —
The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory…
-
Unscored —
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of mall…
-
Unscored —
The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory…