golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.

...

PT-2021-28297

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ crash occurred, involving the AK::StringImpl::create, AK::String::String, and AK::URLParser::parse data url functions...

PT-2021-28294

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 1 crash has been reported. The crash occurs in the AK::Utf8CodePointIterator::operator function, which is called by...

pcl:ply_reader_fuzzer: Heap-buffer-overflow in std::__1::__function::__func<std::__1::function<void

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=6660857449807872 Project: pcl Fuzzing Engine: afl Fuzz Target: plyreaderfuzzer Job Type: aflasanpcl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x6020000000d8...

The vulnerability of the parse_fix_phrase() function in the Exim message forwarding agent, related to writing beyond buffer boundaries in memory, allows a hacker to elevate their privileges in the system and execute arbitrary code.

The vulnerability of the parsefixfrase function in the Exim message forwarding agent is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an intruder with privileges in the system to execute arbitrary code...

CVE-2021-25640

In Apache Dubbo prior to 2.6.9 and 2.7.9, the usage of parseURL method will lead to the bypass of white host check which can cause open redirect or SSRF vulnerability...

Stack overflow

Stack overflow vulnerability in parsestatementlist Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...

CVE-2020-36374

Stack overflow vulnerability in parsecomparison Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...

CVE-2020-36367

Stack overflow vulnerability in parseblock Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...

Cesanta MJS 缓冲区错误漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for resource-constrained microcontrollers. A stack overflow vulnerability exists in parsestatementlist in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via a specially crafted file to cause a denial of servi...

Cesanta MJS 缓冲区错误漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parsecomparison in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

PT-2021-12019

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the parse statement list function, which allows remote attackers to cause a Denial of Service DoS via a crafted file. Recommendations: For Cesanta MJS...

PT-2021-12016

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the parse value function, which allows remote attackers to cause a Denial of Service DoS via a crafted file. Recommendations: For Cesanta MJS version 1.20....

PT-2021-12023

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the parse shifts function, which allows remote attackers to cause a Denial of Service DoS via a crafted file. Recommendations: For Cesanta MJS version...

PT-2021-12018

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the parse statement function, which allows remote attackers to cause a Denial of Service DoS via a crafted file. Recommendations: For Cesanta MJS version...

PT-2021-12022

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the parse plus minus function, which allows remote attackers to cause a Denial of Service DoS via a crafted file. Recommendations: For Cesanta MJS version...

PT-2021-12017

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the parse block function, which allows remote attackers to cause a Denial of Service DoS via a crafted file. Recommendations: For Cesanta MJS version 1.20....

Cesanta MJS 缓冲区错误漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parsestatement in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

Cesanta MJS 缓冲区错误漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parseequality in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

Cesanta MJS 缓冲区错误漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parseshifts in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...