17856 matches found
Design/Logic Flaw
js-libp2p is the official javascript Implementation of libp2p networking stack. Versions older than v0.38.0 of js-libp2p are vulnerable to targeted resource exhaustion attacks. These attacks target libp2p’s connection, stream, peer, and memory management. An attacker can cause the allocation of...
Design/Logic Flaw
Out-of-bounds read in gathertree in PaddlePaddle before 2.4...
Design/Logic Flaw
tdpServer of TP-Link RE300 V1 improperly processes its input, which may allow an attacker to cause a denial-of-service DoS condition of the product's OneMesh function...
Design/Logic Flaw
An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary commands during the GFM export process...
Design/Logic Flaw
Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an unwritten? assumption in the rest of the Linux network stack that packet...
The vulnerability of the SPNEGO security mechanism for Microsoft Windows operating systems allows a perpetrator to disclose protected information.
The vulnerability of the SPNEGO NEGOEX security mechanism for Microsoft Windows operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...
Design/Logic Flaw
The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Denial of Service Attack on the affected system. Affected releases are TIBCO Software...
Design/Logic Flaw
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed...
Design/Logic Flaw
In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no additional execution privileges needed...
Design/Logic Flaw
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed...
Design/Logic Flaw
When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the...
Design/Logic Flaw
A use-after-free in respjsippubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk denial of service by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing...
Design/Logic Flaw
Use After Free in GitHub repository vim/vim prior to 9.0.0882...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
The vulnerability of the implementation of the executable file DesignReview.exe of the software for applying electronic annotations in Autodesk Design Review allows a perpetrator to execute arbitrary code.
The vulnerability of the implementation of the executable file DesignReview.exe of the Autodesk Design Review software for applying electronic annotations is related to writing beyond the buffer boundaries during the processing of .dwf or .pct format files. Exploiting this vulnerability can allow...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...