3353 matches found
UBUNTU-CVE-2023-29331
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability...
Cross-Site Scripting (XSS)
com.liferay:com.liferay.dynamic.data.mapping.form.web is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end, allowing a remote authenticated attacker to inject and execute malicious JavaScript on victim's...
CVE-2022-35748
HTTP.sys Denial of Service Vulnerability...
The vulnerability of the NPM package manager vm2 library allows a hacker to execute arbitrary code.
The vulnerability of the NPM packet manager’s vm2 library is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
keep-module-latest 命令注入漏洞
keep-module-latest is a library. A security vulnerability exists in keep-module-latest that stems from a lack of input cleanup or other checks, leaving it vulnerable to command injection attacks...
MP4v2 资源管理错误漏洞
MP4v2 is a library for creating, modifying, and reading MP4 files by enzo1982 Personal Developer. A security vulnerability exists in MP4v2 version v2.1.2, which originates from a memory leak that can be caused via class MP4BytesProperty...
Code injection
c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful...
c-ares 安全特征问题漏洞
c-ares is a C library for asynchronous DNS requests from the individual developers of c-ares. A security vulnerability exists in c-ares versions prior to 1.19.1, which stems from generating predictable output...
CVE-2023-23301
The news MonkeyC operation code in CIQ API version 1.0.0 through 4.1.7 fails to check that string resources are not extending past the end of the expected sections. A malicious CIQ application could craft a string that starts near the end of a section, and whose length extends past its end. Upon...
CVE-2022-46658
The affected product is vulnerable to a stack-based buffer overflow which could lead to a denial of service or remote code execution...
UBUNTU-CVE-2023-2839
Divide By Zero in GitHub repository gpac/gpac prior to 2.2.2...
UBUNTU-CVE-2023-2838
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...
CVE-2022-46680
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic...
CVE-2023-23759
There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely. This behavior requires the client supported cipher advertisement changing between the original ClientHello and the second ClientHello, crashing the process impact is limited to...
tpm2: TCG TPM2.0 implementations vulnerable to memory corruption
An out-of-bound read vulnerability was found in the TPM 2.0's Module Library, which allows the reading of 2-byte data after the end of the TPM command. This flaw allows an attacker to leak confidential data stored within the libtpms context...
The vulnerability of the jfif_decode() function in the library for encoding and decoding JPEG files, ffjpe, allows a perpetrator to cause a service failure.
The vulnerability of the jfifdecode function ffjpeg/src/jfif.c in the library for encoding and decoding JPEG files allows for the execution of operations outside of the buffer. Exploiting this vulnerability could enable a remote attacker to cause a service failure...
CVE-2023-29340
AV1 Video Extension Remote Code Execution Vulnerability...
CVE-2023-24902
Win32k Elevation of Privilege Vulnerability...