cPython HTTP Request Processing

The vulnerability of the cPython programming language in Python is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to compromise data integrity or cause service failures...

OverlayFS SUID Privilege Escalation

The vulnerability of the OverlayFS component in Firejail’s SUID mode is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

DBI interpreter Heap Buffer Overflow DoS

The vulnerability of the DBI interpreter for the Perl programming language is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

PDFium Uninitialized Resource Confidential Information DoS

The vulnerability of the PDFium component in the Google Chrome browser is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information or cause service failures...

Contiki-NG RPL DoS

The vulnerability of the RPL routing protocol implementation in Contiki-NG IoT devices is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

demon Libvirt Memory Leak DoS

The vulnerability of the demon for controlling Libvirt virtualization relates to the repeated release of memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

ImageMagisk Zero Division DoS

The vulnerability of the coders/jp2.c file, a program set for reading and editing ImageMagisk files, is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

Google Chrome Memory Use After Free Information Disclosure

The vulnerability of the Network Internals component in Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential information or cause service failures...

Ceph Pointer Swap DoS

The vulnerability of the Ceph storage system is related to errors during the POST request with an invalid XML tag. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ZeroMQ Uncontrolled Resource Consumption DoS

The vulnerability of the ZeroMQ messaging library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

libscp_v0.c Stack Buffer Overflow DoS

The vulnerability of several functions in libscpv0.c affects the RDP server xrdp. It involves buffer overflow in the data stack buffer. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

CVE-2021-32755 Certificate pinning is not enforced on the web socket connection

Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for users running iOS 13 or higher. This new...

QEMU Buffer Overflow DoS

The vulnerability of QEMU’s emulation software-related hardware lies in reading data from buffers beyond acceptable limits. Exploiting this vulnerability allows an attacker to cause system failures...

Huawei microprogram memory leak DoS

The vulnerability of Huawei’s microprogramming code in software and hardware devices is related to memory leaks. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

QEMU Buffer Overflow DoS

The vulnerability of QEMU’s emulation software-related hardware lies in the execution of operations that exceed the permissible buffer data size. Exploiting this vulnerability allows an attacker to compromise data integrity and cause system failures...

E2fsprogs Re-hashing Buffer Overflow DoS

The vulnerability of the re-hashing function in the E2fsprogs utility library for working with file systems lies in the fact that the operation exceeds the permissible buffer data size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and...

Ffmpeg Pointer Manipulation DoS

The vulnerability of the Ffmpeg multimedia library is related to the use of a zero pointer. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

DoS

The vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implemented in Cisco Video Surveillance devices of the 7000 series is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a perpetrator to cause slow memory leaks, device...

ReportLab XML Blind XPath Injection

The vulnerability of the toColorevalarg function in the ReportLab library is related to an XML document processing error. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

JSON Processing Library Buffer Overflow DoS

The vulnerability of many components of the JSON file processing library in C is related to the operation that goes beyond the allowable buffer size limits. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...