3346 matches found
The vulnerability of the bark_noise_hybridmp function in the psy.c component of the Vorbis multimedia library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the barknoisehybridmp function in the psy.c component of the Vorbis multimedia library relates to the issue of writing operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and...
CVE-2021-27774
User input included in error response, which could be used in a phishing attack...
CVE-2022-38341
Safe Software FME Server v2021.2.5 and below does not employ server-side validation...
PT-2022-37342 · Unknown +1 · Democritus-Strings +1
Name of the Vulnerable Software and Affected Versions: d8s-math version 0.1.0 Description: The d8s-math library for Python contains a potential code-execution backdoor. This backdoor is attributed to the democritus-strings package, which was inserted by a third party. Recommendations: For version...
The vulnerability of the gd_gd2.c component of the LibGD graphics library allows a hacker to cause a service failure.
The vulnerability of the gdgd2.c component of the LibGD graphics library is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...
The vulnerability of the tif_unix.c component in the LibTIFF library allows a hacker to cause a service failure.
The vulnerability of the tifunix.c component in the LibTIFF library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
CVE-2022-38020
Visual Studio Code Elevation of Privilege Vulnerability...
CVE-2022-37959
Network Device Enrollment Service NDES Security Feature Bypass Vulnerability...
CVE-2022-37963
Microsoft Office Visio Remote Code Execution Vulnerability...
CVE-2022-37958
SPNEGO Extended Negotiation NEGOEX Security Mechanism Remote Code Execution Vulnerability...
CVE-2022-35830
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2022-33679
Windows Kerberos Elevation of Privilege Vulnerability...
CVE-2022-39846
DLL hijacking vulnerability in Smart Switch PC prior to version 4.3.220833 allows attacker to execute arbitrary code...
The vulnerability of the libIEC61850 library, related to pointer assignment errors, allows a perpetrator to cause a service failure.
The vulnerability of the libIEC61850 library is related to errors in pointer assignment. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the libIEC61850 library, related to access to resources through incompatible types, allows a perpetrator to cause a service failure.
The vulnerability of the libIEC61850 library is related to access to resources through incompatible types. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the libIEC61850 library, related to reading data outside the buffer in memory, allows a perpetrator to execute arbitrary code or cause a service failure.
The vulnerability of the libIEC61850 library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...
The vulnerability of the libIEC61850 library, related to reading data outside the buffer in memory, allows a perpetrator to execute arbitrary code.
The vulnerability of the libIEC61850 library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
PT-2022-4741 · Mz Automation +1 · Libiec61850 +1
Name of the Vulnerable Software and Affected Versions: MZ Automation's libIEC61850 versions 1.4 and prior MZ Automation's libIEC61850 version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e Description: The issue is related to accessing a resource using an incompatible type, which...
DEBIAN-CVE-2022-27664
In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error...