3438 matches found
CVE-2021-27761
Weak web transport security Weak TLS: An attacker may be able to decrypt the data using attacks...
UBUNTU-CVE-2022-24884
ecdsautils is a tiny collection of programs used for ECDSA keygen, sign, verify. ecdsaverifypreparelegacy does not check whether the signature values r and s are non-zero. A signature consisting only of zeroes is always considered valid, making it trivial to forge signatures. Requiring multiple...
USN-5398-1 libsdl1.2, libsdl2 vulnerability
It was discovered that SDL Simple DirectMedia Layer incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code...
PJSIP 安全漏洞
PJSIP is a free and open source multimedia communication library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. A security vulnerability exists in PJSIP 2.12 and earlier versions, which originates from playing/reading invalid WAV files...
CVE-2021-36203
The affected product may allow an attacker to identify and forge requests to internal systems by way of a specially crafted request...
CVE-2022-28444
UCMS v1.6 was discovered to contain an arbitrary file read vulnerability...
UBUNTU-CVE-2022-29537
gprtpbuilderdohevc in ietf/rtppckmpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box...
Security Bulletin: App Connect Professional is affected by GNU C Library vulnerability
Summary App Connect Professional have addressed the following vulnerability reported in GNU C Library. Vulnerability Details CVEID: CVE-2022-23218 DESCRIPTION: GNU C Library aka glibc is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the svcunixcreate function ...
OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008)
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable...
UBUNTU-CVE-2020-28605
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
CVE-2021-42780
CVE-2021-42780 affects OpenSC before version 0.22.0. Description and multiple security bulletins across Debian, Mageia, Gentoo, and Amazon indicate a use-after-return issue in insert_pin() that could crash programs using the library. Public advisories consistently recommend upgrading to OpenSC 0....
CVE-2022-26916
Windows Fax Compose Form Remote Code Execution Vulnerability...
CVE-2022-26921
Visual Studio Code Elevation of Privilege Vulnerability...
CVE-2022-26898
Azure Site Recovery Remote Code Execution Vulnerability...
CVE-2022-26897
Azure Site Recovery Information Disclosure Vulnerability...
CVE-2022-26821
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2022-26824
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2022-26832
.NET Framework Denial of Service Vulnerability...