18847 matches found
CVE-2020-11019
CVE-2020-11019 在 FreeRDP 小于等于 2.0.0 版本中,当日志设置为 "WLOGTRACE" 运行时,由于读取无效数组索引,可能导致应用程序崩溃。数据可以字符串形式打印到本地终端。此问题已在 2.1.0 版本中修复。 身份认证| 攻击复杂度| 攻击向量 ---|---|--- SINGLE| LOW| NETWORK 机密性| 完整性| 可用性 ---|---|--- NONE| NONE| PARTIAL CVSS Score: 4 参考资料...
Astra Linux – Vulnerability in Mariadb 10.3
MariaDB version 10.5.13 allows a hamaria::extra application to crash due to certain SELECT statements...
Astra Linux – Vulnerability in SQLite3
SQLite 3.30.1 improperly handles certain SELECT statements involving a non-existent VIEW, resulting in an application crash...
Astra Linux – Vulnerability in DjVuLibre
A flaw was discovered in djvulibre-3.5.28 and earlier. A malicious read operation in the function DJVU::DataPool::hasdata, through a crafted djvu file, may cause the application to crash and lead to other issues...
Astra Linux – Vulnerability in glibc
The mqnotify function in the GNU C Library also known as glibc versions 2.32 and 2.33 has a use-after-free vulnerability. It may access the notification thread attributes object passed through its struct sigevent parameter after it has been freed by the caller, resulting in a denial of service...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glibc (UTSA-2023-002881)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002881 advisory. A flaw was found in glibc. In an uncommon situation, the gaihinet function may use memory that has been freed, resulting in an application crash. This issue is only...
Linux Distros Unpatched Vulnerability : CVE-2026-79590
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that...
DEBIAN-CVE-2026-79590
A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...
UBUNTU-CVE-2026-79590
A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...
CVE-2026-79590
A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...
CVE-2026-79590
A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...
CVE-2026-61555
A flaw was found in OpenEXR, a widely used image format in the motion picture industry. When processing a specially crafted EXR image file, an attacker could trigger an application crash. This occurs because the software attempts to access an empty list of image views when a specific header...
PT-2026-89615
A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...
CVE-2026-79590
A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...
CVE-2026-79590
A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...
CVE-2026-79590
A NULL pointer dereference in the Prism parser of mruby 4.0.0 allows an attacker who supplies a crafted Ruby source file to cause the parser to pass a NULL pointer to nonnull string-handling functions, leading to undefined behavior and an application crash . The CVSS 3.1 score is 6.5 (Medium) — n...
CVE-2026-79590
A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...
A NULL pointer dereference vulnerability in mruby 4.0.0
A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cairo (UTSA-2026-093027)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093027 advisory. cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application...
CVE-2026-71442
CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...