12899 matches found
CVE-2020-36568
CVE-2020-36568 affects github.com/revel/revel, where the query parser accepts unsanitized input. The issue can trigger resource exhaustion via memory allocation, potentially impacting availability. Public details indicate exploitation would require network access and no user interaction. The vuln...
CVE-2020-36568 Resource exhaustion in github.com/revel/revel
Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...
CVE-2020-36568 Resource exhaustion in github.com/revel/revel
Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...
CVE-2020-36568
Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation...
Revel Framework 安全漏洞
Revel Framework is Revel Framework open source a high-productivity, full-stack web framework for the Go language. A security vulnerability exists in versions prior to Revel Framework v1.0.0. An attacker exploited the vulnerability to cause resource exhaustion via memory allocation...
GHSA-QVX2-59G8-8HPH docconv vulnerable to Memory Allocation with Excessive Size Value
A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 can...
docconv vulnerable to Memory Allocation with Excessive Size Value
A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 can...
CVE-2022-4741
A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 is...
Design/Logic Flaw
A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 is...
CVE-2022-4741
Docconv (up to 1.2.0) contains a vulnerability in ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText that leads to uncontrolled memory allocation. Root cause: improper handling in memory allocation during document-to-text conversion. Impact is availability degradation; potential remote init...
CVE-2022-4741 docconv XMLToText memory allocation
A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 is...
CVE-2022-4741 docconv XMLToText memory allocation
A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 is...
PT-2022-28060 · Docconv · Docconv
Name of the Vulnerable Software and Affected Versions: docconv versions up to 1.2.0 Description: A vulnerability was found in docconv, classified as problematic, affecting the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory...
Memory Allocation with Excessive Size Value
A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 is...
docconv 安全漏洞
docconv is Search.io open source a library . PDF, DOC, DOCX, XML, HTML, RTF , etc. will be converted to plain text . docconv 1.2.0 and previous versions of a security vulnerability , the vulnerability stems from its ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText function of the operatio...
Fedora 36 : golang (2022-0e313cc582)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-0e313cc582 advisory. This release includes security fixes to the archive/tar, net/http/httputil, and regexp packages, as well as bug fixes to the compiler, the linker, a...
CVE-2022-34480
Within the lginit function, if several allocations succeed but then one fails, an uninitialized pointer would have been freed despite never being allocated. This vulnerability affects Firefox 102...
CVE-2022-34480
Summary: CVE-2022-34480 affects Mozilla Firefox earlier than 102.0. The issue is in the lg_init() routine: when several allocations succeed but one fails, an uninitialized pointer could be freed, even though it was never allocated. This could enable arbitrary code execution or other impacts as de...
Fedora 35 : xen (2022-99af00f60e)
The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-99af00f60e advisory. Xenstore: Guests can crash xenstored XSA-414, CVE-2022-42309 Xenstore: Guests can create orphaned Xenstore nodes XSA-415, CVE-2022-42310 Xenstore:...
