568 matches found
CVE-2018-20821
CVE-2018-20821 : LibSass up to version 3.5.5 is vulnerable to a denial of service due to uncontrolled recursion in Sass::Parser::parse_css_variable_value (parser.cpp). The root cause is in the parsing component; attackers could trigger DoS by crafting input. The connected documents confirm the af...
CVE-2018-20821
The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service uncontrolled recursion in Sass::Parser::parsecssvariablevalue in parser.cpp...
CVE-2018-20821
The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service uncontrolled recursion in Sass::Parser::parsecssvariablevalue in parser.cpp...
PT-2019-10261 · Sass +2 · Libsass +2
Name of the Vulnerable Software and Affected Versions: LibSass version 3.5.4 Description: The issue allows attackers to cause a denial-of-service due to uncontrolled recursion. This occurs in the Sass::Complex Selector::perform function in ast.hpp and the Sass::Inspect::operator in inspect.cpp...
PT-2019-10260 · Sass +2 · Libsass +2
Name of the Vulnerable Software and Affected Versions: LibSass versions 3.5.5 and earlier Description: The parsing component in LibSass allows attackers to cause a denial-of-service due to uncontrolled recursion in Sass::Parser::parse css variable value in parser.cpp. Recommendations: For LibSass...
Security Bulletin: IBM API Connect is impacted by multiple open source software vulnerabilities.
Summary IBM API Connect has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2017-0268 DESCRIPTION: Microsoft Server Message Block 1.0 SMBv1 could allow a remote attacker to obtain sensitive information, caused by improper handling of incoming requests. By sending...
LibSass heap buffer overread vulnerability (CNVD-2019-40134)
LibSass is the C/C ++ implementation of the Sass compiler. A heap-based buffer over-read vulnerability exists in Sass::Prelexer::parenthesescope in prelexer.hpp in LibSass 3.5.5. An attacker can exploit this vulnerability to cause a denial of service...
LibSass Heap Buffer Over-Read Vulnerability
LibSass is the C/C ++ implementation of the Sass compiler. A heap-based buffer over-read vulnerability exists in Sass::Prelexer::alternatives in prelexer.hpp in LibSass 3.5.5. An attacker can exploit this vulnerability to cause a denial of service...
LibSass Buffer Overflow Vulnerability (CNVD-2019-01855)
LibSass is an open source written in C using Sass CSS extension language parser . A buffer overflow vulnerability exists in the Sass::Prelexer::skipoverscopes of the prelexer.hpp file in LibSass version 3.5.5. No details of the vulnerability are provided at this time...
CVE-2019-6283
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthesescope in prelexer.hpp...
CVE-2019-6286
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...
CVE-2019-6284
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...
CVE-2019-6283
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthesescope in prelexer.hpp...
Heap overflow
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthesescope in prelexer.hpp...
Heap overflow
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...
CVE-2019-6284
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp...
CVE-2019-6286
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...
Heap overflow
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skipoverscopes in prelexer.hpp when called from Sass::Parser::parseimport, a similar issue to CVE-2018-11693...
