Java: DoS Vulnerability in JSON-JAVA

Summary A denial of service vulnerability in JSON-Java was discovered by ClusterFuzz. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used. There are two issues: 1 the parser bug can be used to circumvent a check that is supposed to...

The vulnerability of the process_cu_tu_index function in the dwarf.c component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the processcutuindex function in the dwarf.c component of the GNU Binutils development environment is related to reading data from buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created binar...

The vulnerability of the bfd_section_from_shdr function in the bfd/elf.c component of the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the bfdsectionfromshdr function in the bfd/elf.c component of the GNU Binutils development environment is related to insufficient input validation. Exploiting this vulnerability allows an attacker to cause service failures remotely...

The vulnerability of the bfd_cache_close function in the bfd/cache.c component of the GNU Binutils development environment allows a perpetrator to access confidential data, compromise its integrity, and cause service failure.

The vulnerability of the bfdcacheclose function in the bfd/cache.c component of the GNU Binutils development environment is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the /bfd/pef.c component of the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the /bfd/pef.c component of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure through the use of a specially created file...

PT-2023-7106 · NetGear · Netgear Cax30

Name of the Vulnerable Software and Affected Versions: NETGEAR CAX30 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR CAX30 routers. The specific flaw exists within the sso binary, resulting fr...

The vulnerability of the read_section function in the dwarf2.c component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the readsection function in the dwarf2.c component of the GNU Binutils development environment relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created ELF file...

IBM WebSphere Application Server Liberty Installed (Linux / Unix)

Binary data ibmwebsphereapplicationserverlibertynixinstalled.nbin...

Extreme Networks ExtremeXOS Web Detection

Binary data extremenetworksexoswebdetect.nbin...

SolarWinds Network Configuration Manager Installed (Windows)

Binary data solarwindsnetworkconfigurationmanagerwininstalled.nbin...

Veeam One Installed (Windows)

Binary data veeamonewininstalled.nbin...

GHSA-HM92-VGMW-QFMX chromedriver Command Injection vulnerability

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

chromedriver Command Injection vulnerability

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

CVE-2023-26156

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

mariadb: use-after-poison in Binary_string::free_buffer

A flaw was found in the MariaDB Server. It contains a use-after-free via the component,Binarystring::freebuffer at /sql/sqlstring.h, affecting availability...

Atlassian Confluence Authentication Bypass (CONFSERVER-93142) (Direct Check)

Binary data confluencecve-2023-22518.nbin...

SideCopy Exploiting WinRAR Flaw in Attacks Targeting Indian Government Entities

The Pakistan-linked threat actor known as SideCopy has been observed leveraging the recent WinRAR security vulnerability in its attacks targeting Indian government entities to deliver various remote access trojans such as AllaKore RAT, Ares RAT, and DRat. Enterprise security firm SEQRITE describe...

HPE OneView Authentication Bypass (CVE-2023-30908)

Binary data hpeoneviewcve-2023-30908.nbin...

HPE OneView Detection

Binary data hpeoneviewdetect.nbin...

Command Injection

Overview chromedriver is a ChromeDriver for Selenium Affected versions of this package are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attack...