CVE-2022-25897 The package org.eclipse.milo:sdk-server before 0.6.8 is vulnerable to Denial of Service when sending CloseSession requests with the 'deleteSubscription' parameter set to False.
This issue does not affect installations using MELOS. The update package has been updated on the download site. Update packages have been pushed to the
CVE-2022-38529 An attacker could exploit this vulnerability to gain code execution.
This issue is resolved with this update. As a precaution, if you have rleUncompress installed, we recommend uninstalling it immediately. V7.4.4 Hotfix for
CVE-2022-39832 An issue was discovered in PSPP 1.6.2
There is a heap-based buffer overflow at the function read_string in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application
CVE-2022-3099 Use After Free in GitHub repository vim/vim prior to 9.0.0360.
This issue has been fixed in Vim 9.0.0360. After upgrading to Vim 9.0 you may notice that you are receiving the message:
CVE-2022-36640 In InflData v1.8.10, there was no authentication, allowing unauthenticated attackers to execute arbitrary commands.
This issue was fixed in version v1.8.10.5. CVE-2018-1000710 influxData before v1.8.10.5 contains an unauthenticated remote code execution vulnerability. A
Episode
00:00:00
00:00:00