1805 matches found
firefox: thunderbird: Use-after-free in XSLT
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash...
CVE-2024-53856
rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1...
Trellix HX 安全漏洞
Trellix HX is an endpoint security solution from FireEye USA Trellix. A security vulnerability exists in Trellix HX version 10.0.0. An attacker exploiting this vulnerability could cause a denial of service by sending specially crafted data...
The vulnerability of the EVTaskGuardian service of the Vault Enterprise platform for archiving corporate information allows a perpetrator to execute arbitrary code.
The vulnerability of the EVTaskGuardian service, a platform for archiving corporate information in Vault Enterprise, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data...
The vulnerability of the EVStgOfflineOpns service on the Vault Enterprise platform for archiving corporate information allows a perpetrator to execute arbitrary code.
The vulnerability of the EVStgOfflineOpns service of the corporate information archiving platform Vault Enterprise is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data...
The vulnerability of the EVExchangeWebServicesProxy service of the Vault Enterprise platform for archiving corporate information allows a perpetrator to execute arbitrary code.
The vulnerability of the EVExchangeWebServicesProxy service of the Vault Enterprise platform for archiving corporate information is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially craft...
The vulnerability of the MonitoringMiddleTier service of the Vault Enterprise platform for archiving corporate information allows a perpetrator to execute arbitrary code.
The vulnerability of the MonitoringMiddleTier server service of the Vault Enterprise platform for archiving corporate information is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially...
Out of bounds write triggered by crafted coverage data
Function grcov::covdir::getcoverage uses the unsafe function getuncheckedmut without validating that the index is in bounds. This results in memory corruption, and could potentially allow arbitrary code execution provided that an attacker can feed the tool crafted coverage data...
CVE-2024-12130
An “out of bounds read” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to read beyond the boundaries of an allocated memory. If exploited, a threat actor could leverage this vulnerability to execute...
CVE-2024-11155
A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To...
CVE-2024-53856
rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1...
DEBIAN-CVE-2024-53856
rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1...
CVE-2024-53856
rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1...
CVE-2024-53856 rPGP Panics on Malformed Untrusted Input
rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1...
CVE-2024-53856: Improper Handling of Length Parameter Inconsistency
rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1...
The vulnerability of the Vault Enterprise platform’s server for archiving corporate information, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.
The vulnerability of the Vault Enterprise platform’s server for archiving corporate information is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data to the TCP port used by t...
pcp: pmcd heap corruption through metric pmstore operations
A vulnerability was found in Performance Co-Pilot PCP. This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash...
CVE-2024-51428
An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service DoS via a crafted data channel packet...
CVE-2024-51428
The Espressif Esp idf development framework (version 5.3.0 ) is vulnerable to a Denial of Service (DoS) condition. This issue arises when an attacker sends a specially crafted data channel packet to the affected system. While the documents indicate that a patch may not be immediately available, i...
