Schwachstellen, die jetzt zählen.

code.gitea.io/gitea: Gitea: Information disclosure via improper access token validation in Actions runner registration

code.gitea.io/gitea: gitea: Arbitrary code execution via unverified commit in pull request review workflows

loguru: loguru: Denial of Service via inefficient regular expression complexity

imagecodecs: imagecodecs: Denial of Service via stack-based buffer overflow in lossless JPEG parser

imagecodecs: imagecodecs: Denial of Service via infinite loop in CCITT Group 4 decoding

ffmpeg: ffmpeg: Information disclosure via uninitialized heap memory in Huffyuv decoder

ffmpeg: ffmpeg: Information disclosure via uninitialized palette entries in CDXL decoder

ffmpeg: ffmpeg: Information disclosure via crafted Sun Raster image

ffmpeg: ffmpeg: Information disclosure via truncated PCX image

ffmpeg: ffmpeg: information disclosure via crafted Go2Meeting stream

ansible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository URL (e.g.

A flaw was found in ansible-core's ansible.builtin.git module. The module invokes git (ls-remote, clone, fetch) with the repository URL as a positional argument and without a "--" separator, so a repository URL that begins with a dash is interpreted by git as a command-line option. A caller that passes an attacker-controlled repository URL to the module can trigger argument injection (for example --upload-pack/--exec), resulting in arbitrary command execution on the host…

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

DSA-6600-1 vim - security update

vim: Mehrere Schwachstellen ermöglichen Codeausführung