3432 matches found
The vulnerability of the `__zzip_parse_root_directory` function in the ZZIPlib compression library, related to the occurrence of operations outside the buffer’s boundaries, allows a hacker to trigger a service failure.
The vulnerability of the zzipparserootdirectory function in the ZZIPlib compression library is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially created zip file...
CVE-2020-4135
IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated user to send specially crafted packets to cause a denial of service from excessive memory usage...
UBUNTU-CVE-2012-6685
Nokogiri before 1.5.4 is vulnerable to XXE attacks...
CVE-2019-10791
promise-probe before 0.10.0 allows remote attackers to perform a command injection attack. The file, outputFile and options functions can be controlled by users without any sanitization...
UBUNTU-CVE-2020-3865
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to...
CVE-2020-0738
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'...
CVE-2020-8636
An issue was discovered in OpServices OpMon 9.3.2 that allows Remote Code Execution...
CVE-2019-10786
network-manager through 1.0.2 allows remote attackers to execute arbitrary commands via the "execSync" argument...
UBUNTU-CVE-2020-8116
Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects...
USN-4238-1 sdl-image1.2 vulnerabilities
It was discovered that SDLimage incorrectly handled certain image files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact...
UBUNTU-CVE-2014-5013
DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...
CVE-2020-6621
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT...
10er10 (0.23.0), 1405-authtokens (>=1.0.1, <=1.0.5) +3112 more potentially affected by CVE-2016-1000236 via cookie-signature (>=1.0.0, <=1.0.3)
cookie-signature NPM version =1.0.0, =1.0.1, =0.0.1, =0.0.1, =1.0.1, =0.25.0, =1.0.4, =1.0.6 - @axerunners/p2pool-scanner 0.0.2 - @azu/api-mock 1.0.0 - @bear-fe/dbl 1.0.8 and more Source cves: CVE-2016-1000236 Source advisory: OSV:GHSA-92VM-WFM5-MXVV...
CVE-2020-5313
libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow...
libIEC61850 Denial of Service Vulnerability
libIEC61850 is an open source library for the IEC 61850 protocol. A security vulnerability exists in StringUtilscreateStringFromBuffer in the common/stringutilities.c file in libIEC61850 version 1.4.0. An attacker can exploit this vulnerability to cause a large memory allocation and result in a...
CVE-2019-8787
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. A remote attacker may be able to leak memory...
UBUNTU-CVE-2019-7285
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...
UBUNTU-CVE-2019-8820
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead...
The vulnerability of the zzip_mem_entry_new() function in the ZZIPlib compression library, which allows a hacker to cause a service failure
The vulnerability of the zzipmementrynew function zzip/memdisk.c in the ZZIPlib compression library is related to the operation exceeding the permissible buffer data size. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...