Fedora 32 : libmysofa (2021-4e40ccb5e6)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-4e40ccb5e6 advisory. - Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and...

Heap overflow

Incorrect handling of input data in mysofaresamplerresetmem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block...

CVE-2020-36151

Incorrect handling of input data in mysofaresamplerresetmem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block...

CVE-2020-36149

CVE-2020-36149 concerns libmysofa (versions 0.5–1.1) where incorrect handling of input data in changeAttribute can cause a NULL pointer dereference and segmentation fault, especially under memory-restricted or embedded environments. Connected advisories confirm the root cause in changeAttribute (...

PT-2020-4087 · Microsoft · Windows Routing Utilities +1

Name of the Vulnerable Software and Affected Versions: Windows Routing Utilities affected versions not specified Description: The issue is related to errors in handling input data, which can be exploited to cause a denial of service. This can happen when an attacker logs on to an affected system...

USN-4433-1 openjdk-lts vulnerabilities

Johannes Kuhn discovered that OpenJDK incorrectly handled access control contexts. An attacker could possibly use this issue to execute arbitrary code. CVE-2020-14556 It was discovered that OpenJDK incorrectly handled memory allocation when reading TIFF image files. An attacker could possibly use...

The vulnerability of the handler in the SnCloneVault.sys driver of the Secret Net Studio information protection system, which allows a hacker to cause a service failure.

The vulnerability of the handler in the SnCloneVault.sys driver of the Secret Net Studio information protection system is related to deficiencies in the control of input data in the driver. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the built-in software in Intel NUC Kits stems from insufficient input data validation. This allows attackers to gain access to protected information, cause system failures, or enhance their privileges.

The vulnerability of the built-in software in the Intel NUC Kit is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to access protected information, cause service failures, or increase their privileges...

CVE-2018-7721

Cross Site Scripting XSS exists in MetInfo 6.0.0 via /feedback/index.php because app/system/feedback/web/feedback.class.php mishandles input data...

ImageMagick 'coders/rle.c' heap buffer overflow vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A heap buffer overflow vulnerability exists in ImageMagick due to ImageMagick failing to adequately define user input...

Invision Power Board Local File Inclusion / SQL Injection

============================================= - Release date: December 4th, 2009 - Discovered by: Dawid Golunski - Severity: Moderately High ============================================= I. VULNERABILITY ------------------------- Invision Power Board = 3.0.4 Local PHP File Inclusion and SQL...

Invision Power Board <= 3.0.4 LFI and <=3.0.4 and <=2.3.6 SQL Injection

No description provided by source. ============================================= - Severity: Moderately High ============================================= I. VULNERABILITY ------------------------- Invision Power Board = 3.0.4 Local PHP File Inclusion and SQL Injection Invision Power Board = 2.3....