68551 matches found
CVE-2018-25027
CVE-2018-25027 affects the Rust libpulse-binding crate prior to 1.2.1. The issue is a use-after-free in objects returned by get_format_info (and get_context per related advisories), leading to potential memory safety problems in PulseAudio bindings. Affected component: libpulse-binding (Rust crat...
CVE-2018-25028
CVE-2018-25028 affecting the Rust libpulse-binding crate prior to 1.2.1. The issue is a use-after-free in get_context (memory corruption risk) due to improper handling of underlying C objects. Public sources consistently describe this as a use-after-free vulnerability in the library, with multipl...
CVE-2018-25023
An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type...
CVE-2018-25023
The CVE-2018-25023 issue affects the Rust smallvec crate prior to 0.6.13. It allows creating an uninitialized value of any type, including references, due to the unsafe handling of uninitialized memory. The vulnerability is documented across OSV/GHSA entries, which note the fix involved avoiding ...
CVE-2018-25023
An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type...
ROS-2-1622
2.1622 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...
CVE-2018-4302
creationtimestamp| type| source ---|---|--- 2021-12-23 22:19:45+00:00| seen| https://t.me/cibsecurity/34590...
CVE-2018-4478
creationtimestamp| type| source ---|---|--- 2021-12-23 22:19:44+00:00| seen| https://t.me/cibsecurity/34589...
CVE-2018-4302
A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution...
CVE-2018-4478
A validation issue was addressed with improved logic. This issue is fixed in macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan. An attacker with physical access to a device may be able to elevate privileges...
CVE-2018-4302
CVE-2018-4302 describes a null pointer dereference in processing maliciously crafted XML that could cause an app to terminate or execute arbitrary code. The issue is associated with libxml2 and is fixed across Apple platforms: macOS High Sierra 10.13, iOS 11, watchOS 4, and iCloud for Windows 7.0...
CVE-2018-4302
A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution...
CVE-2018-4478
CVE-2018-4478 affects macOS High Sierra and related Security Updates. Description states a validation issue was addressed with improved logic, enabling elevation of privileges if exploited. It is fixed in macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, and Security Update 2018-003 El ...
CVE-2021-44028
XXE can occur in Quest KACE Desktop Authority before 11.2 because the log4net configuration file might be controlled by an attacker, a related issue to CVE-2018-1285...
Design/Logic Flaw
XXE can occur in Quest KACE Desktop Authority before 11.2 because the log4net configuration file might be controlled by an attacker, a related issue to CVE-2018-1285...
CVE-2021-44028
XXE can occur in Quest KACE Desktop Authority before 11.2 because the log4net configuration file might be controlled by an attacker, a related issue to CVE-2018-1285...
CVE-2018-13979
CVE-2018-13979 entry is rejected/not used and does not represent an active vulnerability.