20306 matches found
[SECURITY] Fedora 39 Update: libmodsecurity-3.0.12-1.fc39
Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. In general, it provides the capability to load/interpret rules written in the ModSecurity...
Biosig Project libbiosig Security Vulnerabilities
BioSig Project Biosig Project libbiosig is an open source software library for biomedical signal processing from BioSig Project. It has features for biosignal analysis. A security vulnerability exists in Biosig Project libbiosig version 2.5.0 due to a heap-based buffer overflow vulnerability in t...
Biosig Project libbiosig Security Vulnerabilities
BioSig Project Biosig Project libbiosig is an open source software library for biomedical signal processing from BioSig Project. It has features for biosignal analysis. A security vulnerability exists in Biosig Project libbiosig version 2.5.0 due to an out-of-bounds write vulnerability in the...
ALSA-2024:0893 Important: python-pillow security update
The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fixes: pillow: Arbitrary Code Execution via the environment parameter CVE-2023-50447 For mor...
Biosig Project libbiosig Input Validation Error Vulnerability
BioSig Project Biosig Project libbiosig is an open source software library for biomedical signal processing from BioSig Project. It has features for biosignal analysis. An input validation error vulnerability exists in Biosig Project libbiosig version 2.5.0, which stems from an integer overflow...
Important: python-pillow security update
The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fixes: pillow: Arbitrary Code Execution via the environment parameter CVE-2023-50447 For mor...
Stack-based Buffer Overflow
libzephyr.so is vulnerable to a Buffer Overflow. The vulnerability is due to an unchecked length coming from user input in settings shell, specifically during the handling of SETTINGSVALUESTRING type values, which can result in copying data of a length greater than the buffer size allocated for...
The vulnerability of Zoom’s video conferencing software, related to errors in processing input data, allows attackers to exploit their privileges.
The vulnerability of Zoom video conferencing software is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
Quarkus Security Vulnerabilities
Quarkus is a cloud-native Linux container-first framework for writing Java applications. A security vulnerability exists in Quarkus that stems from consuming more processing resources when inspecting HTTP requests...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Reader 2020 lies in their ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Reader 2020 is related to reading data outside of the buffer in memory during the processing of the CharStringsOffset array for OpenType...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Reader 2020 lies in their ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Reader 2020 is related to the reading of data outside the buffer in memory during the processing of the CHARSTRINGS INDEX format for...
PT-2024-14577 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service...
Hazelcast Platform permission checking in CSV File Source connector
Impact In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises from inadequate permission checking, which could enable unauthorized clients to access data from files stored on a member's filesystem. Patches Fix...
Security Bulletin: IBM Event Processing is vulnerable to a denial of service (CVE-2023-4043).
Summary IBM Event Processing is vulnerable to a denial of service due to parsson-1.1.2.jar component. Parsson provides an implementation of Jakarta JSON Processing Specification. Vulnerability Details CVEID:CVE-2023-4043 DESCRIPTION: Eclipse Parsson is vulnerable to a denial of service, caused by...
Number withdrawn
Ncurses is a character terminal processing library that provides a set of functions for the user to call and generate text-based user interfaces. This CVE number has been withdrawn...
CVE-2022-23093 Stack overflow in ping(8)
ping reads raw IP packets from the network to process responses in the prpack function. As part of processing a response ping has to reconstruct the IP header, the ICMP header and if present a "quoted packet," which represents the packet that generated an ICMP error. The quoted packet again has a...
Adobe Acrobat Reader Font CPAL numColorRecords out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2023-1905 Adobe Acrobat Reader Font CPAL numColorRecords out-of-bounds read vulnerability February 15, 2024 CVE Number CVE-2024-20735 SUMMARY An out-of-bounds read vulnerability exists in the font file processing functionality of Adobe Acrobat Reader 2023.006.2038...
The vulnerability of the Microsoft Outlook email client, related to errors in processing input data, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Outlook email client is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by having the user open a specially crafted URL address remotely...
The vulnerability of the Undertow web server, related to deficiencies in the processing of incoming HTTP requests, allows attackers to compromise the confidentiality and integrity of protected information.
The vulnerability of the Undertow web server is related to deficiencies in the processing of incoming HTTP requests during the analysis of cookies containing certain delimiter symbols. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the...
