CVE-2020-36150

Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory block...

CVE-2020-36150

Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory block...

CVE-2020-36150

CVE-2020-36150 affects libmysofa 0.5–1.1, caused by incorrect input handling in the loudness function, leading to a heap buffer overflow and access to unallocated memory. Connected advisories confirm this CVE alongside multiple related fixes; openSUSE/SUSE advisories update libmysofa to 0.9.1 to ...

CVE-2020-36149

Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions e.g. in embedded environment...

CVE-2020-36150

Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory block...

CVE-2020-36151

CVE-2020-36151 affects libmysofa (versions 0.5–1.1). The root cause is incorrect handling of input data in mysofa_resampler_reset_mem, leading to a heap buffer overflow that can overwrite large blocks of memory. Connected advisories confirm fixes in libmysofa 0.9.1 via openSUSE/SUSE security upda...

CVE-2020-36148

Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions e.g. in embedded environment...

CVE-2020-36148

CVE-2020-36148 affects the libmysofa library (versions 0.5–1.1). The issue is an incorrect handling of input data in verifyAttribute, which can cause a NULL pointer dereference and segmentation fault under restricted memory protection, or a near-NULL overwrite when memory is unrestricted (e.g., e...

CVE-2020-36148

Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions e.g. in embedded environment...

CVE-2021-22306

There is an out-of-bound read vulnerability in Mate 30 10.0.0.182C00E180R6P2. A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause out-of-bound, compromising normal service...

PT-2021-8085 · Koji +1 · Koji +1

Name of the Vulnerable Software and Affected Versions: koji affected versions not specified Description: The issue is related to inadequate input neutralization during web page generation, which can lead to XSS attacks via a specially crafted web interface. Recommendations: At the moment, there i...

HCL Commerce Denial of Service Vulnerability

HCL Commerce is a software platform framework for e-commerce from HCL India. The software includes marketing, sales, customer and order processing functionality in a customizable and integrated package. It is a unified platform that provides the ability to conduct business directly with consumers...

HCL Commerce 安全漏洞

HCL Commerce is a software platform framework for e-commerce from HCL India. The software includes marketing, sales, customer and order processing functionality in a customizable and integrated package. It is a unified platform that provides the ability to conduct business directly with consumers...

CVE-2020-14231

A vulnerability in the input parameter handling of HCL Client Application Access v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the...

HCL Client Application Access 缓冲区错误漏洞

HCL Client Application Access is an integrated HCL Notes and HCL Domino application from HCL India. A buffer overflow vulnerability exists in HCL Client Application Access version v9, which stems from a vulnerability in the handling of input parameters could be exploited by an authenticated...

The vulnerability of the Cisco IOS XE operating system’s web management infrastructure, related to errors in processing input data, allows attackers to gain access to protected information or cause service interruptions.

The vulnerability of the Web management infrastructure of the Cisco IOS XE operating system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures...

Cisco Jabber Authorization Issues Vulnerability

Cisco Jabber is the United States Cisco Cisco company's set of unified communications client solutions. The program provides online status display, instant messaging, voice and other features. There is an authorization issue vulnerability in Cisco Jabber that arises from the software allowing...

USN-4656-2 xorg-server vulnerabilities

USN-4656-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server XKB extension incorrectly handled certain inputs. A local attacker could possibly use this issue to...

The vulnerability of the core.arh component of the EKRA 200 microprocessor series allows a hacker to cause a system failure.

The vulnerability of the core.arh component of the microprogramming software for PLC ERCA is related to insufficient processing of input data during updates. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted HEX/LDR file...

USN-4643-1 atftp vulnerabilities

It was discovered that atftp's FTP server did not properly handler certain input. An attacker could use this to to cause a denial of service crash or possibly execute arbitrary code. CVE-2019-11365 It was discovered that atftp's FTP server did not make proper use of mutexes when locking certain...