Raptor Library Heap Buffer Overflow DoS

The vulnerability of the raptorxmlwriterstartelementcommon component in the Raptor library is related to an incorrect definition of the maximum number of announcements allowed. Exploiting this vulnerability allows a remote attacker to compromise data integrity or cause service failures...

OpenJPEG Buffer Overflow DoS

The vulnerability of the OpenJPEG library for image encoding and decoding is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failure...

OpenEXR storeSSE Confidential Information DoS

Vulnerability of the storeSSE function in software for storing images with wide dynamic range brightness in OpenEXR format. Exploitation of this vulnerability allows a remote attacker to access confidential information or cause service failures...

QTgaFile Component Resource Management Error DoS

The vulnerability of the QTgaFile component of the cross-platform software development framework for Qt is related to a bug in the resource management mechanism. Exploiting this vulnerability allows an attacker to cause service failures...

fly-admin-int-check Vulnerability Confidential Data Compromise

The vulnerability of the software for regulating the integrity of fly-admin-int-check is related to the improper verification of integrity by unauthorized users. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data, compromise its...

Astra Safepolicy DoS

The vulnerability of the astra-safepolicy security configuration software is related to incorrect data processing in the /etc/fstab file. Exploiting this vulnerability allows an attacker to cause service failures...

Poppler PDF Rendering Library Heap Buffer Overflow DoS

The vulnerability of the Object.h component in the Poppler PDF rendering library is related to a lack of implementation for flow control. Exploiting this vulnerability allows an attacker to cause service failures...

Astra Safepolicy DoS

The vulnerability of the astra-safepolicy security configuration software is related to incorrect data processing in the stderr output. Exploiting this vulnerability allows a remote attacker to cause service failures...

ImageMagick ReadXPMImage Buffer Overflow DoS

The vulnerability of the ReadXPMImage function in the coders/xpm.c component of the console-based image editing tool ImageMagick involves allowing the operation to be within acceptable buffer data limits. Exploiting this vulnerability allows a remote attacker to gain access to confidential data,...

RTAS kernel Authentication Bypass

The vulnerability of the RTAS component of the Linux operating system is related to improper handling of memory access. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

IKE Xauth Authentication

The vulnerability related to user authentication within the Xauth protocol of the IKE protocol is linked to improper validation during the file transmission to the program’s input. Exploiting this vulnerability allows an attacker to cause service failures...

fly-admin-date Time Access Control DoS

The vulnerability of the software for setting the time in the fly-admin-date operating system is related to lack of access control. Exploiting this vulnerability allows a perpetrator to cause service failures...

Libvirt Information Disclosure

The vulnerability of the Libvirt virtualization management library is related to incorrect permission checking. Exploiting this vulnerability allows a remote attacker to access confidential information or cause service failures...

Crmsh Cluster Privilege Bypass

The vulnerability of the Crmsh cluster management interface is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

EulerOS Virtualization 3.0.2.2 : openldap (EulerOS-SA-2021-2152)

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. A...

A user without PR can reset user authentication failures information

Impact The script service method used to reset the authentication failures record can be executed by any user with Script rights and does not require Programming rights as it should have. Note that being able to reset the authentication failure record mean that an attacker with script right might...

ImageMagick saveBinaryCLProgram Buffer Overflow DoS

The vulnerability of the saveBinaryCLProgram function in the magick/opencl.c component of the ImageMagick console graphics editor allows for the manipulation of zero-point pointers. Exploiting this vulnerability enables a remote attacker to gain access to confidential data, compromise its...

ImageMagick ReadMATImageV4 Heap Buffer Overflow DoS

The vulnerability of the ReadMATImageV4 function in the ImageMagick console graphics editor’s coders/mat.c component is related to the use of previously uninitialized variables. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cau...

Libxml2 Heap Buffer Overflow DoS

The vulnerability of the htmlParseTryOrFinish function in the HTMLparser.c component of the Libxml2 library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failures...

QEMU Disasinsn Buffer Overflow DoS

The vulnerability of the disasinsn function in the target/i386/translate.c component of the QEMU hardware emulation software is related to the lack of restrictions on instruction size. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and caus...