php: Uninitialized array in pg_query_params() leading to RCE

A vulnerability was found in PHP due to an uninitialized array in pgqueryparams function. When using the Postgres database extension, supplying invalid parameters to the parameterized query may lead to PHP attempting to free memory, using uninitialized data as pointers. This flaw allows a remote...

CVE-2022-31625

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or...

openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

A flaw was found in OpenSSL. It is possible to trigger an infinite loop by crafting a certificate that has invalid elliptic curve parameters. Since certificate parsing happens before verification of the certificate signature, any process that parses an externally supplied certificate may be subje...

Bosch IP cameras 资源管理错误漏洞

Bosch IP cameras is a German Bosch network camera. Bosch IP cameras has a denial of service vulnerability, which stems from the failure to filter invalid parameters in URLs entered by users with administrator privileges, and can be exploited by attackers to cause the camera to become unresponsive...

Google TensorFlow suffers from an unspecified vulnerability (CNVD-2021-36361)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from an unspecified vulnerability that stems from passing invalid parameters to tf.rawops.SparseCountSparseOutput.No details of the vulnerability are provided at this...

Google TensorFlow 安全漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from an unspecified vulnerability that stems from passing invalid parameters to tf.rawops.SparseCountSparseOutput.No details of the vulnerability are provided at this...

Cross-Site Request Forgery (CSRF)

play framework is vulnerable to cross-site request forgery CSRF. An attacker is able to bypass the CSRF filter by making CORS simple requests with content types that contain parameters that are invalid and unable to be parsed...

DEBIAN-CVE-2010-3439

It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command...

CVE-2010-3439

It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command...

CVE-2010-3439

It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command...

Command injection

It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command...

CVE-2010-3439

It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command...

CVE-2010-3439

It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command...

TYPO3 Input Validation Error Vulnerability (CNVD-2019-40293)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. An input validation error vulnerability exists in TYPO3 that stems from the program's failure to check for valid parameters, which can be exploited by an attacker to send an email to an...

CVE-2010-3439

It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command...

Huawei Mate 9 Pro GPU Driver Arbitrary Memory Release Vulnerability

The Huawei Mate 9 Pro is a smartphone product of the Chinese company Huawei Huawei. An arbitrary memory release security vulnerability exists in the GPU driver of the Huawei Mate 9 Pro phone due to insufficient validation of parameter legitimacy by the memory management module. An attacker can...

CVE-2018-7713

The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service assertion failure because size.width = 120 may be false. Note: “OpenCV CVAssert is not an assertion C-like assert, it is regular C++ exception which can...

Hikvision has design logic flaws

Hikvision DS-2CD2710F-I, DS-5C-I Series are network camera products developed by Hikvision China. A design logic vulnerability exists in Hikvision that fails to properly check for erroneous parameters when receiving and processing standard parameters. An attacker could exploit the vulnerability t...

Autodesk Backburner Manager 3 Null Pointer Reference Denial of Service Vulnerability

Backburner is network rendering management software. A null pointer reference denial of service vulnerability exists in Autodesk Backburner Manager 3. An attacker can cause a denial of service by sending a large number of invalid parameters resulting in a null pointer reference...

UBUNTU-CVE-2014-3512

Multiple buffer overflows in crypto/srp/srplib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via an invalid SRP 1 g, 2 A, or 3 B parameter...