1728 matches found
CVE-2024-53856
rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1...
Trellix HX 安全漏洞
Trellix HX is an endpoint security solution from FireEye USA Trellix. A security vulnerability exists in Trellix HX version 10.0.0. An attacker exploiting this vulnerability could cause a denial of service by sending specially crafted data...
The vulnerability of the EVTaskGuardian service of the Vault Enterprise platform for archiving corporate information allows a perpetrator to execute arbitrary code.
The vulnerability of the EVTaskGuardian service, a platform for archiving corporate information in Vault Enterprise, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data...
The vulnerability of the EVStgOfflineOpns service on the Vault Enterprise platform for archiving corporate information allows a perpetrator to execute arbitrary code.
The vulnerability of the EVStgOfflineOpns service of the corporate information archiving platform Vault Enterprise is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data...
The vulnerability of the EVExchangeWebServicesProxy service of the Vault Enterprise platform for archiving corporate information allows a perpetrator to execute arbitrary code.
The vulnerability of the EVExchangeWebServicesProxy service of the Vault Enterprise platform for archiving corporate information is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially craft...
The vulnerability of the MonitoringMiddleTier service of the Vault Enterprise platform for archiving corporate information allows a perpetrator to execute arbitrary code.
The vulnerability of the MonitoringMiddleTier server service of the Vault Enterprise platform for archiving corporate information is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially...
Out of bounds write triggered by crafted coverage data
Function grcov::covdir::getcoverage uses the unsafe function getuncheckedmut without validating that the index is in bounds. This results in memory corruption, and could potentially allow arbitrary code execution provided that an attacker can feed the tool crafted coverage data...
CVE-2024-12130
An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to read beyond the boundaries of an allocated memory. If exploited, a threat actor could leverage this vulnerability to execute...
CVE-2024-11155
A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To...
CVE-2024-53856
rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1...
DEBIAN-CVE-2024-53856
rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1...
CVE-2024-53856 rPGP Panics on Malformed Untrusted Input
rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1...
CVE-2024-53856
rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1...
The vulnerability of the Vault Enterprise platform’s server for archiving corporate information, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.
The vulnerability of the Vault Enterprise platform’s server for archiving corporate information is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data to the TCP port used by t...
pcp: pmcd heap corruption through metric pmstore operations
A vulnerability was found in Performance Co-Pilot PCP. This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash...
CVE-2024-51428
An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service DoS via a crafted data channel packet...
CVE-2024-51428
An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service DoS via a crafted data channel packet...
CVE-2024-51428
CVE-2024-51428 affects Espressif ESP-IDF, specifically version 5.3.0 , where a vulnerability in the data channel handling can allow an unauthenticated attacker to cause a Denial of Service (DoS) by sending a crafted data channel packet. The available documents consistently describe DoS impact but...