Espressif ESP-IDF Buffer Error Vulnerability

Espressif ESP-IDF is an IoT development framework from China's Lexin Information Technology Espressif. A buffer error vulnerability exists in Espressif ESP-IDF, which can be exploited by attackers to crash an application. The following products and versions are affected: Espressif ESP-IDF 2.x,...

Laravel Nova 3.7.0 - 'range' DoS

Exploit Title: Laravel Nova 3.7.0 - 'range' DoS Date: June 22, 2020 Exploit Author: iqzer0 Vendor Homepage: https://nova.laravel.com/ Software Link: https://nova.laravel.com/releases Version: Version v3.7.0 Tested on: Manjaro / Chrome v83 An authenticated user can crash the application by setting...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. A heap buffer overflow in WebAssembly during Memory/Table resizing allows an attacker to crash the application...

Delta Electronics TPEditor Buffer Overflow Vulnerability (CNVD-2020-46851)

Delta Electronics TPEditor is a Windows-based Delta text panel programming software from Delta Electronics, Taiwan, China. A buffer overflow vulnerability exists in Delta Electronics TPEditor version 1.97 and earlier. The vulnerability can be exploited by an attacker with a specially crafted...

PT-2020-14824 · Delta Electronics · Tpeditor

Name of the Vulnerable Software and Affected Versions: Delta Electronics TPEditor versions 1.97 and prior Description: A write-what-where condition may be exploited by processing a specially crafted project file, potentially allowing an attacker to read or modify information, execute arbitrary...

CVE-2020-16199

Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read/modify information, execute arbitrary code, and/or crash the...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. Memory corruption due to missing sign-extension for ValueTags on ARM64 allows an attacker to crash the application...

Denial Of Service (DoS)

libtiff is vulnerable to denial of service. An attacker is able to crash the application through excessive memory consumption in tifopen.c, tiflzw.c, and tifaux.c...

Denial Of Service (DoS)

webkitgtk is vulnerable to denial of service DoS. The vulnerability exists through two array index errors, leading to out-of-bounds memory reads, were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash...

CVE-2020-10597

Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information and/or crash the application...

CVE-2018-14553

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd not bundled...

libvorbis: stack buffer overflow in bark_noise_hybridmp function

A stack-based buffer overflow was found in the encoder functionality of the libvorbis library. An attacker could create a malicious file to cause a denial of service, crashing the application containing the library...

CVE-2018-19565

CVE-2018-19565 is a vulnerability in LibRaw/dcraw (up to dcraw 9.28) caused by a buffer over-read in crop_masked_pixels, which can allow a crafted image to crash the host application that bundles the dcraw code or leak private information. The Connected documents (Red Hat, openSUSE, SUSE security...

LibRaw 'LibRaw::unpack' function null pointer backreference vulnerability

LibRaw is a C++ library for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A null pointer back-reference vulnerability exists in the 'LibRaw::unpack' function src/librawcxx.cpp file in versions of LibRaw prior to 0.18.7. An attacker can exploit this vulnerability with a specially...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user can pass a packed TIFF file to the putcontig8bitCIELab function in tifgetimage.c to cause an out-of-bounds read that can crash the application...

DEBIAN-CVE-2017-7519

In Ceph, a format string flaw was found in the way libradosstriper parses input from user. A user could crash an application or service using the libradosstriper library...

GE CIMPLICITY Stack Buffer Overflow Vulnerability

GE CIMPLICITY is an HMI software. GE CIMPLICITY suffers from a stack buffer overflow vulnerability that could be exploited by a remote attacker to submit a special request to crash the application or execute arbitrary code...

Buffer Overflow Vulnerability in Tenda W15E Devices

The Tenda W15E device is a dual-band wireless router from China's Tenda. A heap buffer overflow vulnerability exists in the Tenda W15E device, which allows remote attackers to exploit the vulnerability to submit a special request that could crash an application...

Microsoft Windows Explorer Denial of Service Vulnerability

Microsoft Windows is a popular computer operating system. A security vulnerability in the implementation of Microsoft Windows Explorer when attempting to open a non-existent file allows an attacker to exploit the vulnerability by submitting a special request to crash the application...

Advantech WebOP Designer Heap Buffer Overflow Vulnerability

Advantech WebOP is an operator panel product. A heap buffer overflow vulnerability exists in Advantech WebOP Designer, which could be exploited by a remote attacker to submit a special request that could crash the application or execute arbitrary code...