Denial Of Service (DoS)

vim is vulnerable to denial of service. An attacker can crash the application through the null pointer deference in the library by providing a maliciously crafted input...

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to a memory corruption in FedCM which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service. The vulnerability exists in rotateImage function in tiffcrop.c due to a double-free vulnerability which allows an attacker to cause an application crash via a malicious input...

Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service. The vulnerability exists due to the null pointer dereference when calling ZPrint, allowing an attacker to cause an application crash by providing a maliciously crafted input...

Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service. The vulnerability exists due to the use after free condition in a pointer which pushed into previously free memory by the loop, allowing an attacker to cause an application crash by providing a malicious input...

Regular Expression Denial Of Service (ReDoS)

uri-template-lite is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the expandRe attribute in index.js, allowing an attacker to crash the application by providing a malicious input through the URI.expand method...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to the use after free in the library, allowing an attacker to crash the application by providing a malicious input...

Denial Of Service (DoS)

vim is vulnerable to denial of service. It is possible to cause heap-based buffer overflow in GitHub repository which allows an attacker to crash the application by providing malicious input...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists in vimregsubboth function of regexp.c due to substitute overwrites allocated buffer which allows an attacker to crash the application via malicious input...

Regular Expression Denial Of Service (ReDoS)

v8n is vulnerable to regular expression denial of service. The vulnerability exists in the availableRules.lowercase function in v8n.js due to the lack of complexity in the regex which allows an attacker to crash the application by providing malicious input...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists due to an insufficient TLB flush for x86 PV guests in shadow mode which allows an attacker to crash the application by providing a malicious input...

Prototype Pollution

react-navigation is vulnerable to prototype pollution. A malicious input can be parsed and decoded as it does not prevent the properties such as "proto" to pollute the global object prototype...

ion-parser 安全漏洞

ion-parser is 418sec open source one of the fastest and lightest Javascript parser for TOML and ION files . A security vulnerability exists in ion-parser that stems from the package's susceptibility to prototype contamination, which can be exploited by an attacker to submit malicious INI files to...

PT-2022-8904 · Unknown · Ion-Parser

Name of the Vulnerable Software and Affected Versions: ion-parser versions all Description: The issue affects the ion-parser package, where an attacker can submit a malicious INI file to an application that uses the parse function, leading to prototype pollution on the application. This can be...

Denial Of Service (DoS)

libtirpc.so is vulnerable to denial of service DoS. The vulnerability exists in svcrun because does not properly handle idle TCP connections which allows an attacker to crash the application by providing malicious input...

Denial Of Service (DoS)

mujs is vulnerable to denial of service. The vulnerability exists in regexp.c because of unlimited recursion which allows an attacker to crash the application via malicious input...

springframework: malicious input leads to insertion of additional log entries

In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries...

Regular Expression Denial Of Service (ReDoS)

scss-tokenizer is vulnerable to regular expression denial of service. The vulnerability exists in the loadAnnotation function of previous-map.js due to the insecure regex pattern used in the match attribute, allowing an attacker to crash the application by providing malicious input...

Dell BIOS Input Validation Error Vulnerability (CNVD-2022-85078)

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. An input validation error vulnerability exists in Dell BIOS, which can be exploited by a locally authenticated attacker to bypass security controls in SMM by sending malicious input to SMI...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. The vulnerability exists due to the use after free in cast UI/TOOLBAR which allows an attacker to crash the application via malicious input...