8989 matches found
PT-2022-29758
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A general protection fault issue was discovered in the legacy parse param function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...
PT-2022-29438
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A general protection fault issue exists in the legacy parse param function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...
PT-2022-30073
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A general protection fault issue exists in the legacy parse param function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...
PT-2022-30142
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential issue exists due to a missing of node put in wcd934x codec parse data. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
The vulnerability in the ext/date/lib/parse_date.c component of the PHP interpreter allows a attacker to compromise the confidentiality of information.
The vulnerability of the ext/date/lib/parsedate.c component of the PHP interpreter involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of sensitive information...
PT-2025-8463
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free vulnerability has been identified in the Linux kernel, specifically in the si parse power table function. This issue arises when the allocation of array members fails,...
PT-2022-36948
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 8 crash has been reported. The crash involves the following functions: cli bcomp freemeta, cli bcomp addpatt, and readdb parse...
PT-2022-36947
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: cli sigopts handler, readdb parse ldb subsignature, and...
CVE-2021-40398
An out-of-bounds write vulnerability exists in the parserasterdata functionality of Accusoft ImageGear 19.10. A specially-crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...
PT-2022-36941
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 2 crash has been reported. The crash involves the functions cli ac addsig, cli add content match pattern, and readdb parse ldb...
PT-2022-11227 · Accusoft · Accusoft Imagegear
Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.10 Description: An out-of-bounds write issue exists in the parse raster data functionality. A specially-crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger th...
PT-2022-36942
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the functions krb parse, ndpi search kerberos, and che...
The vulnerability of the urllib.parse module in the Python programming language allows a hacker to inject arbitrary data into the server’s response.
The vulnerability of the urllib.parse module in the Python programming language is related to the failure to handle CRLF sequences properly. Exploiting this vulnerability allows an attacker to send specially crafted data containing CR-LF characters to the application, thereby altering the behavio...
CVE-2022-27823
Improper size check in sapefdparsemetaHEADERold function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file...
PT-2022-18613
Name of the Vulnerable Software and Affected Versions libsapeextractor library versions prior to SMR Apr-2022 Release 1 Description The issue is related to an improper size check in the sapefd parse meta HEADER function, which allows for an out of bounds read. This can be triggered by a crafted...
PT-2022-18611
Name of the Vulnerable Software and Affected Versions libsapeextractor library versions prior to SMR Apr-2022 Release 1 Description The issue is related to an improper size check in the sapefd parse meta HEADER old function, which allows for an out of bounds read. This can be triggered by a craft...
PT-2022-18612
Name of the Vulnerable Software and Affected Versions libsapeextractor library versions prior to SMR Apr-2022 Release 1 Description The issue is related to an improper size check in the sapefd parse meta DESCRIPTION function, which allows for an out of bounds read via a crafted media file...
golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag
A flaw was found in golang.org. In x/text, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag...
golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension
A flaw was found in golang.org. In x/text, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension...
Prototype Pollution
Overview protobufjs is a protocol buffer for JavaScript & TypeScript. Affected versions of this package are vulnerable to Prototype Pollution which can allow an attacker to add/modify properties of the Object.prototype. This vulnerability can occur in multiple ways: 1. by providing untrusted user...