3766 matches found
@candlelabs/sdk (>=1.0.1, <=1.0.2), @infobiotech/js-error (>=0.1.0, <=0.1.6) +12 more potentially affected by CVE-2022-38900 via decode-uri-component (0.2.0)
decode-uri-component NPM version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on decode-uri-component and may be impacted: - @candlelabs/sdk =1.0.1, =0.1.0, =0.22.0-alpha.20, =0.22.0-alpha.0, =0.32.1, =0.32.3, =2.3.5, =1.0.0, =0.3.0,...
GHSA-W573-4HG7-7WGQ decode-uri-component vulnerable to Denial of Service (DoS)
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS...
CVE-2022-38900
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS...
AZL-44976 CVE-2022-38900 affecting package js-jquery 3.5.0-4
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS...
CVE-2022-38900
CVE-2022-38900 is tied to the decode-uri-component package v0.2.0, with an Improper Input Validation defect that can cause a DoS. The connected IBM/Advisory documents in the provided set do not disclose affected products, specific exploit vectors, or a remediation version. No additional technical...
decode-uri-component 输入验证错误漏洞
decode-uri-component is a decode URI component by the individual developer Sam Verschueren. A security vulnerability exists in decode-uri-component version 0.2.0, which stems from insufficient validation of user input...
CVE-2022-38900: Improper Input Validation
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS...
PT-2022-36791 · Git +1 · Libredwg
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash involves the functions bit calc CRC, decode preR13, and dwg decod...
PT-2025-38331
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where the core thread may call v4l2 m2m buf done to set the destination buffer to done for late architecture. If the late architecture calls v4l2 m2m b...
golang: encoding/gob: stack exhaustion in Decoder.Decode
A flaw was found in golang. When calling Decoder, Decode on a message that contains deeply nested structures, a panic can occur due to stack exhaustion and allows an attacker to impact system availability...
golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service
An uncontrolled resource consumption flaw was found in Golang math/big. A too-short encoded message can cause a panic in Float.GobDecode and Rat.GobDecode in math/big in Go, potentially allowing an attacker to create a denial of service, impacting availability...
golang: encoding/gob: stack exhaustion in Decoder.Decode
A flaw was found in golang. When calling Decoder, Decode on a message that contains deeply nested structures, a panic can occur due to stack exhaustion and allows an attacker to impact system availability...
The vulnerability in the `QuickTimeVideo::decodeBlock` function of the `quicktimevideo.cpp` file in the library and command-line utilities for managing image metadata from Exiv2 allows a attacker to perform a denial-of-service attack.
The vulnerability in the QuickTimeVideo::decodeBlock function of the quicktimevideo.cpp file in the library and command-line utilities for managing image metadata in Exiv2 is related to pointer aliasing errors. Exploiting this vulnerability could allow an attacker to trigger a denial-of-service...
The vulnerability of the decode_png() function in the TorchVision computer vision system, which allows a intruder to trigger a service failure
The vulnerability of the decodepng function in the TorchVision computer vision system lies in the handling of PNG format files, where data is read beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...
No title provided
REJECTED CVE In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix exposure in nfsd4decodebitmap The Linux kernel CVE team has assigned CVE-2021-47213 to this issue...
PT-2024-11228 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel related to the NFSD, specifically in the nfsd4 decode bitmap function. The issue was reported by [email protected]. Recommendation...
golang: encoding/gob: stack exhaustion in Decoder.Decode
A flaw was found in golang. When calling Decoder, Decode on a message that contains deeply nested structures, a panic can occur due to stack exhaustion and allows an attacker to impact system availability...
Amazon Linux 2 : go-rpm-macros (ALAS-2022-1863)
The version of go-rpm-macros installed on the remote host is prior to 3.0.15-23. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1863 advisory. 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed from this...
