4171 matches found
openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c
A flaw was found in OpenJPEG’s t2 encoder. This flaw allows an attacker who can provide crafted input to be processed by OpenJPEG to cause a NULL pointer dereference issue. The highest threat to this vulnerability is to system availability...
python-pygments: ReDoS in multiple lexers
A denial of service attack was discovered against pygments. Some of the regular expressions used to tokenise source code for highlighting have exponential complexity. A specially crafted input file could cause pygments to take effectively infinite time to parse, consuming CPU resources and denyin...
PT-2021-23605 · Busybox +3 · Busybox +3
Name of the Vulnerable Software and Affected Versions: Busybox affected versions not specified Description: A NULL pointer dereference in Busybox's hush applet can lead to denial of service when processing a crafted shell command. This issue arises due to missing validation after a x03 delimiter...
PT-2021-23606 · Busybox +3 · Busybox +3
Name of the Vulnerable Software and Affected Versions: Busybox affected versions not specified Description: The issue arises from an attacker-controlled pointer free in Busybox's hush applet, leading to a denial of service and possible code execution when a crafted shell command is processed. Thi...
PT-2021-5079 · Microsoft · Windows Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Hyper-V component of the Windows operating system. Exploitation of this issue may allow a remote attacker to cau...
USN-5133-1 A security issue was fixed in ICU
It was discovered that ICU contains a use after free issue. An attacker could use this issue to cause a denial of service with crafted input...
USN-5133-1: ICU vulnerability
It was discovered that ICU contains a use after free issue. An attacker could use this issue to cause a denial of service with crafted input...
Cisco Firepower Threat Defense 操作系统命令注入漏洞
Cisco Firepower Threat Defense FTD is a suite of unified software from Cisco that provides next-generation firewall services. Cisco Firepower Threat Defense Software suffers from operating system command injection vulnerabilities that stem from insufficient validation of user-supplied command...
CVE-2021-3802
A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability...
EulerOS 2.0 SP3 : openjpeg (EulerOS-SA-2021-2601)
According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in OpenJPEG's encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during...
CLSA-2021-1634925719 Fixed CVEs in vim: CVE-2021-3778, CVE-2021-3796
CVE-2021-3778: crafted input leads to heap-based buffer overflow - CVE-2021-3796: crafted input leads to use-after-free...
Pulse Secure Pulse Connect Secure 资源管理错误漏洞
Pulse Secure Pulse Connect Secure aka PCS, formerly known as Juniper Junos Pulse is an SSL VPN solution from Pulse Secure, Inc. in the United States. Pulse Connect Secure suffers from a resource management error vulnerability that stems from insufficient validation of user-supplied input. An...
CVE-2021-1529
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation by the system CLI. An attacker could exploit this vulnerability by authenticating t...
Cisco IOS XE SD-WAN Software Command Injection Vulnerability
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation by the system CLI. An attacker could exploit this vulnerability by authenticating t...
CLSA-2021-1634745118 Fix of CVE: CVE-2021-3778, CVE-2021-3796
CVE-2021-3778: crafted input leads to heap-based buffer overflow - CVE-2021-3796: crafted input leads to use-after-free...
Fix of CVE: CVE-2021-3778, CVE-2021-3796
CVE-2021-3778: crafted input leads to heap-based buffer overflow - CVE-2021-3796: crafted input leads to use-after-free...
GPAC buffer overflow vulnerability (CNVD-2021-84264)
GPAC is an open source multimedia framework. GPAC suffers from a buffer overflow vulnerability that stems from an issue discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow that can be exploited by an attacker to cause a denial of service DOS via crafte...
Gpac MP4Box memory leak vulnerability
Gpac MP4Box is a multimedia packager. It is mainly used to process ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from AVI, MPG, MKV, MPEG-2 TS and other container files.Gpac MP4Box suffers from a memory leak vulnerability that can be exploited by attackers to cause a...
CVE-2020-22674
An issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isomintern.c, which allows attackers to cause a denial of service DoS via a crafted input...