8095 matches found
The vulnerability of the `cv::BmpDecoder::readData` function in the `modules/imgcodecs/src/grfmt_bmp.cpp` file of the Computer Vision Library (OpenCV), a freely available computer vision and image processing library for general-purpose numerical algorithms, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the cv::BmpDecoder::readData function in the modules/imgcodecs/src/grfmtbmp.cpp file of the Computer Vision Library OpenSource Computer Vision Library – OpenCV involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain...
The vulnerability of the apr_time_exp*() and apr_os_exp_time*() functions in the APR library allows a hacker to gain access to confidential data, as well as to cause service interruptions.
The vulnerability of the aprtimeexp and aprosexptime functions in the APR library lies in the reading of data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...
The vulnerability in the checkout.c component of the Git method implementation in the Libgit2 C language allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the checkout.c component, which implements Git methods in the C language using Libgit2, is related to the use of a name with an incorrect reference. Exploiting this vulnerability allows an attacker who operates remotely to access confidential data, compromise its integrity, a...
The vulnerability of the ex_retab function in the src/indent.c file of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the exretab function in the src/indent.c file of the Vim text editor is related to the issue where the operation escapes the buffer boundaries into memory when :retab 0 is used. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise i...
The vulnerability of the PgBouncer connection pool program in PostgreSQL allows for unauthorized access to sensitive data. By not properly securing the SQL query structure, attackers can gain access to confidential information, compromise its integrity, and cause service failures.
The vulnerability of the PostgreSQL PgBouncer connection pool program lies in the fact that the data received from the initial request message is treated as already decoded data. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity,...
The vulnerability of the internal/dcraw_common.cpp component of the LibRaw image processing library, which involves reading data beyond the permissible buffer limits, allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the internal/dcrawcommon.cpp component in the LibRaw image processing library relates to reading data beyond the permissible buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the DBI interface module of the Perl database library allows attackers to gain access to confidential data and also cause service interruptions.
The vulnerability of the DBI interface module in Perl DBI is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...
CVE-2022-39236 Matrix Javascript SDK improper beacon events can cause availability issues
Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Starting with version 17.1.0-rc.1, improperly formed beacon events can disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the...
The vulnerability of the FillUniColor function in the utils.cpp component of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the FillUniColor function in the utils.cpp component of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, relates to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidenti...
The vulnerability of the gchar_cursor function in the misc1.c text editor Vim allows a hacker to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the gcharcursor function in the misc1.c file of the Vim text editor involves reading data beyond the allowable buffer limits. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of C and C++ garbage collectors using Boehm-Demers-Weiser GC allows a intruder to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of garbage collectors in C and C++ languages, such as Boehm-Demers-Weiser GC, involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and ev...
The vulnerabilities of the `fillin_rpath` and `decompose_rpath` functions in the GNU C Library allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the fillinrpath and decomposerpath functions in the GNU C Library’s system library is related to an unreliable search path. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability in the src/undo.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the src/undo.c component of the Vim text editor lies in the fact that “undo” leaves the end of the visual area at the end of the line. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failur...
Security Bulletin: IBM PureData System For Operational Analytics A1791 is affected by an OSPF vulnerability (CVE-2013-0149)
Abstract The IBM PureData System for Operational Analytics A1791 includes network switches which are used in part for external network access. When configured to use the Open Shortest Path First OSPF protocol these switches are vulnerable and allow remote attackers to cause a denial of service...
CVE-2022-23144
There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system...
The vulnerability of the inode_init_owner function in the fs/inode.c component of the Linux operating system allows a hacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the inodeinitowner function in the fs/inode.c component of the Linux operating system’s kernel is related to insecure privilege management. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability in the kernel/sched/wait.c component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability in the kernel/sched/wait.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the LD_LIBRARY_PATH environment variable allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the LDLIBRARYPATH environment variable in the GNU C Library is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability in the `src/libraw_cxx.cpp` component of the LibRaw image processing library allows a hacker to trigger a service failure.
The vulnerability of the src/librawcxx.cpp component in the LibRaw image processing library is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...
The vulnerability of the `av_buffersrc_add_frame_flags` function in the `buffersrc` component of the FFmpeg multimedia library allows a attacker to cause a service failure.
The vulnerability of the avbuffersrcaddframeflags function in the buffersrc component of the FFmpeg multimedia library is related to improper memory release before deleting the last pointer. Exploiting this vulnerability allows an attacker to cause service failure remotely...