The vulnerability of the LibVNC library, related to pointer dereferencing errors, allows a hacker to trigger a service failure.

The vulnerability of the LibVNC library is related to pointer dereferencing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

UBUNTU-CVE-2019-8907

docorenote in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service stack corruption and application crash or possibly have unspecified other impact...

DEBIAN-CVE-2019-7577

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDLLoadWAVRW in audio/SDLwave.c...

The vulnerability in the implementation of Net::FTP commands in the Ruby programming language allows attackers to execute arbitrary commands.

The vulnerability of Net::FTP commands in the Ruby programming language is related to an input filtering error. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands when opening local files using Net::FTPget, Net::FTPgetbinaryfile, Net::FTPgettextfile, Net::FTPput,...

UBUNTU-CVE-2018-20763

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because of missing szLineConv bounds checking...

CVE-2019-7400

Rukovoditel before 2.4.1 allows XSS...

The vulnerability of the ICE data exchange library X11 libICE, related to the use of a weak entropy source for key generation, allows a hacker to intercept sessions.

The vulnerability of the ICE data exchange library X11 libICE is related to the use of a weak entropy source for key generation. Exploiting this vulnerability allows an attacker to intercept sessions by using information from the process list...

UBUNTU-CVE-2019-7309

In the GNU C Library aka glibc or libc6 through 2.29, the memcmp function for the x32 architecture can incorrectly return zero indicating that the inputs are equal because the RDX most significant bit is mishandled...

UBUNTU-CVE-2018-6345

The function numberformat is vulnerable to a heap overflow issue when its second argument $decpoints is excessively large. The internal implementation of the function will cause a string to be created with an invalid length, which can then interact poorly with other functions. This affects all...

Denial Of Service (DoS)

openssl is vulnerable to denial of service DoS attacks. The library improperly calculates string lengths, allowing a malicious user to cause a denial of service by passing a large string to the system...

CVE-2018-1320

Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making t...

ai.agnos:reactive-sparql_2.12 (>=0.3.0 <=0.3.1), ai.databand:dbnd-agent (>=0.42.1 <=0.80.6) +5726 more potentially affected by CVE-2018-19362 via com.fasterxml.jackson.core:jackson-databind (>=2.7.0 <=2.7.9.4)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.7.0, =0.3.0, =0.42.1, =0.42.1, =0.40.2, =0.42.1, =0.2, =0.8.0, =3.3.3, =0.0.1, =0.0.2, =0.0.3 - at.ac.ait.lablink.clients:sync =0.0.1 - at.ac.ait.lablink:core =0.0.1 and more Source cves: CVE-2018-19362 Source advisory:...

UBUNTU-CVE-2018-20574

The SingleDocParser::HandleFlowMap function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

UBUNTU-CVE-2018-20573

The Scanner::EnsureTokensInQueue function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted YAML file...

The vulnerability of the ReadGifImageDesc() function (gifread.c) in the HDF5 library, which allows a hacker to cause a service failure

The vulnerability of the ReadGifImageDesc function in the HDF5 library arises from the occurrence of operations outside the buffer’s boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially crafted HDF5 file...

Code injection in ymlref

ymlref is a library that allows to load Yaml documents and resolve JSON-pointer references inside them. ymlref versions up to 0.1.1 allow code injection...

CVE-2018-20133

ymlref allows code injection...

Exiv2 infinite loop vulnerability (CNVD-2019-07087)

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. An infinite loop vulnerability in Exiv2::Jp2Image::encodeJp2Header in jp2image.cpp in Exiv2 0.27-RC3 can be exploited by an attacker to cause a denial of service via specially crafted input...

WavPack denial of service vulnerability

WavPack is an open source, free audio lossless compression software. A security vulnerability exists in the openutils.c file 'WavpackVerifySingleBlock' function of the libwavpack.a static link library in WavPack 5.1.0 and earlier versions. An attacker can exploit this vulnerability to cause a...

binutils: Crash in elf.c:bfd_section_from_shdr() with crafted executable

The bfdsectionfromshdr function in elf.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service segmentation fault via a large attribute section...