625 matches found
PT-2024-40687 · Fasterxml · Jackson Dataformat Cbor
Name of the Vulnerable Software and Affected Versions: Jackson dataformat CBOR affected versions not specified Description: The issue is related to a security exception in the Jackson dataformat CBOR library. The crash occurs in the java.base/java.util.Arrays.copyOf method, which is called by...
Hyperledger Aries Cloud Agent Python Data Forgery Issue Vulnerability
Hyperledger Aries Cloud Agent Python is a tool for building the foundation of decentralized identity applications and services that run in non-mobile environments. A data forgery issue vulnerability exists in Hyperledger Aries Cloud Agent Python versions prior to 0.7.0, which stems from a data...
PT-2023-35641 · Fasterxml · Jackson-Dataformat-Xml
Name of the Vulnerable Software and Affected Versions: Jackson Dataformat YAML affected versions not specified Description: A security exception occurs in the Jackson Dataformat YAML library, specifically in the com.fasterxml.jackson.dataformat.yaml.YAMLParser class, when the currentName or...
The vulnerability of the H5Dchunk.c component in the HDF5 file processing library allows a attacker to cause a service failure.
The vulnerability of the H5Dchunk.c component in the HDF5 file processing library is related to the lack of checks for division by zero. Exploiting this vulnerability can allow a remote attacker to cause a service failure using a specially created HDF file...
UBUNTU-CVE-2020-18494
Buffer Overflow vulnerability in function H5Sclose in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file...
DEBIAN-CVE-2023-29451
Specially crafted string can cause a buffer overrun in the JSON parser library leading to a crash of the Zabbix Server or a Zabbix Proxy...
PT-2023-35865 · Hdf5 · Hdf5
Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow issue has been identified, which can cause a crash. The crash occurs due to a WRITE 1 heap-buffer-overflow. Technical details about the issue include the involvement of...
CVE-2023-22970
Bottles before 51.0 mishandles YAML load, which allows remote code execution via a crafted file...
RosarioSIS Stores Sensitive Data in a Mechanism without Access Control
RosarioSIS prior to 11.0 allows anyone, regardless of authentication status, to download and view file attachments under the salaries module. In addition, the file names contain a date in a YYYY-MM-DD format and a random six-string digit, making enumerating file names with automated tools...
PT-2023-15535 · Apache · Apache Sling Commons Json
Name of the Vulnerable Software and Affected Versions: Apache Sling Commons JSON bundle affected versions not specified Description: The issue is related to improper input validation, allowing an attacker to trigger unexpected errors by supplying specially-crafted input. The...
PT-2023-21435 · Apple · Garageband
Name of the Vulnerable Software and Affected Versions: GarageBand versions prior to 10.4.8 Description: An out-of-bounds read issue was addressed with improved input validation. Parsing a maliciously crafted MIDI file may lead to an unexpected application termination or arbitrary code execution...
Siemens JT Open and JT Utilitiesh Out-of-Bounds Read Vulnerability
The JT Open Toolkit is an application programming interface API for software developers who support JT, a publicly available data format developed by Siemens Digital Industry Software and widely used for communication, visualization, numerical modeling and various other purposes. An out-of-bounds...
PT-2023-35535 · Hdf5 · Hdf5
Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified, which can cause a crash. The crash occurs due to an overflow in the heap buffer, specifically a READ 8 operation. The issue is related to...
Siemens JT Open and JT Utilitiesh Memory Corruption Vulnerability
JT Open Toolkit is an application programming interface API for software developers who support JT, a publicly released data format developed by Siemens Digital Industry Software and widely used for communication, visualization, digital modeling, and various other purposes.Siemens JT Open and JT...
SUSE CVE-2016-4331
When decoding data out of a dataset encoded with the H5ZNBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execution...
SUSE CVE-2016-4333
The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's terminator. Due to this, an aggressor can cause the loop's index to point outside the bounds of the...
SUSE CVE-2017-17506
In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Oplineplinedecode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...
SUSE CVE-2018-11203
A division by zero was discovered in H5Dbtreedecodekey in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...