Coraza - Web Application Firewall: Input validation error vulnerability

Coraza – Web Application Firewall versions 3.0.4 to 3.8.1 had a vulnerability related to input validation errors. This issue arose from an exact comparison of the entire Content-Type value during the request body processor selection. As a result, URL-encoded request bodies containing media type...

Zephyr buffer error vulnerability

Zephyr versions 2.3.0 to 4.4.2 have a buffer error vulnerability. This vulnerability stems from the user-level verifier in the pecitransfer system call, which only checks the device object permissions. It does not validate the buf pointers and len values of the embedded structures pecibuf,...

WSO2 API Manager input validation error vulnerability

Versions 4.1.0 through 4.1.0.153, 4.2.0 through 4.2.0.105, and 4.3.0 through 4.3.0.20 of WSO2 API Manager contain an input validation error vulnerability. This vulnerability arises because the callback URL parameter fails to validate user-supplied inputs; it may be exploited by malicious actors t...

FreeRDP buffer error vulnerability

Versions of FreeRDP prior to 3.32.1 have a buffer error vulnerability. This vulnerability arises from the process of converting PNG clipboard items into CFDIB format by using winprreadpngfrombuffer. This function allocates a buffer for PNG images with a depth less than 8, but winprbitmapwritebuff...

Cisco Secure Client input validation error vulnerability

Cisco Secure Client versions 4.9.00086, 4.9.01095, 4.9.02028, 4.9.03047, 4.9.03049, 4.9.04043, 4.9.04053, 4.9.05042, 4.9.06037, 4.10.00093, 4.10.01075, 4.10.02086, 4.10.03104, 4.10.04065, 4.10.04071, 4.10.05085, 4.10.05095, 5.0.00238, 4.10.05111, 5.0.00529, 5.0.00556, 4.10.06079, 5.0.01242,...

Cisco Open Source Snort3 numerical error vulnerability

Multiple versions of Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense FTD software, and Cisco UTD SNORT IPS Engine software contain a numerical error vulnerability. This vulnerability stems from incomplete error checks during Snort 3’s parsing of GRE packet data. It could allow...

Pillow buffer error vulnerability

Versions of Pillow prior to 13.0.0 contain a buffer error vulnerability. This vulnerability arises because src/PIL/WmfImagePlugin.py passes unvalidated 32-bit WMF or EMF sizes to the drawwmf handler in src/display.c. The handler allocates a DIB based on truncated 16-bit bcWidth and bcHeight field...

Michelle Tilley TOML Parser for Node.js resource management error vulnerability

Michelle Tilley’s TOML Parser for Node.js versions prior to 5.0.1 contain a resource management error vulnerability. This vulnerability arises from repeatedly slicing and reassembling path prefixes when handling long point-based keys, header fields, array headers, and inline table keys. This...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability arises because the streaming RPC component fails to limit the number of streams declared in streamsettings.extrastreamids within a single RPC request. Remote attackers can send requests...

Splunk SOAR processing logic error vulnerability

Versions of Splunk SOAR prior to 8.7.0 contain a logic error vulnerability stemming from a failure in protection mechanisms...

Splunk Enterprise resource management error vulnerability

Versions prior to Splunk Enterprise 10.4.4, 10.2.8, 10.0.11, and 9.4.16 contain a resource management error vulnerability stemming from improper control over resource lifecycle...

Vyper buffer error vulnerability

Vyper versions prior to 0.2.9 contain a buffer error vulnerability. This vulnerability arises because the forwarder proxy deployed via the built-in createforwarderto function reports a fixed value of 4096 bytes for RETURNDATASIZE instead of the actual size of returned data. When the function...

Vyperlang: Vyper buffer error vulnerability

In the version of VyperLang from 0.3.8 to 0.5.0b1, there is a buffer error vulnerability. This vulnerability stems from compiler errors in the parseIfExp function. The issue arises when using a wider result type for memory layout, which allows reading nested arrays with narrower inner boundaries...

Cisco Cyber Vision Digital Error Vulnerability

Cisco Cyber Vision has a numerical error vulnerability, which stems from incorrect calculations and may lead to denial-of-service attacks...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability arises from the failure to consistently enforce the configured maxbodysize limit during non-persistent HTTP/1 and HTTP/2 parsing, as well as in parsing responses from memcache and...

Fedora Modularity: libmodulemd buffer error vulnerability

Fedora Modularity’ libmodulemd has a buffer error vulnerability. This vulnerability stems from an internal loop in the rpm-map output path of module stream v2, which incorrectly uses the number of digest algorithms as the boundary, instead of the number of checksums in the current digest table...

Cisco Open Source Snort3 buffer error vulnerability

Cisco Open Source Snort3 contains a buffer error vulnerability. This vulnerability arises from incomplete validation during Snort 3’s parsing of Teredo packets; it may allow unauthenticated remote attackers to send specially crafted Teredo packets to target devices. As a result, the Snort 3...

Velneo vServer input validation error vulnerability

Versions 36.0 and 37.0 prior to Velneo vServer 36.6 contain an input validation error vulnerability. This vulnerability stems from improper array index validation and may lead to a denial of service...

Vyper numeric error vulnerability

A numerical error vulnerability exists in Vyper versions 0.3.4 through 0.5.0b1. It arises because the createfromblueprint function calculates the remaining blueprint size via a uint256 subtraction without first checking whether codeoffset is smaller than the blueprint’s code size. As a result, a...

Pillow buffer error vulnerability

Versions 9.4.0 through 13.0.0 of Pillow contain a buffer error vulnerability. This vulnerability arises when the ImagingJpegEncode function calls jpegwritemarker for JPEG COM annotations; specifically, when the ICC configuration file fills the encoding buffer exactly to 65536 bytes. Libjpeg write...