OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows...

The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as DC112A, R6400, RAX200, WNDR3400v3, XR300, R8500, RAX75, R8300, and RAX80 lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to execute arbitrary code or cause a service failure.

The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as DC112A, R6400, RAX200, WNDR3400v3, XR300, R8500, RAX75, R8300, and RAX80 lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as D8500, R6250, R7000, R7100LG, R7900, R8300, R8500, XR300, R7000P, and R6900 lies in the copying of buffers without checking the size of the input data. This allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of NETGEAR Wi-Fi router software models such as D8500, R6250, R7000, R7100LG, R7900, R8300, R8500, XR300, R7000P, and R6900P lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary co...

The vulnerability of the SProcRenderCompositeGlyphs function in the X Window System X.Org Server implementation allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SProcRenderCompositeGlyphs function in the X Window System X.Org Server implementation is related to the execution of operations that exceed the permissible buffer data limits. Exploiting this vulnerability can allow attackers to access confidential data, compromise its...

The vulnerability of NETGEAR R8000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of NETGEAR R8000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary codes remotely...

The vulnerability of microprogrammed Wi-Fi router software from NETGEAR models D6220, D6400, D7000v2, D8500, DC112A, EX7000, EX7500, R6250, R6300v2, R6400, R6400v2, R6700v3, R7000, R7100LG, R7850, R7900, R7960P, R8000, RAX200, RBS40V, RS400, XR300, R7000P, R8000P, R8500, RAX80, R6900P, R7900P, R8300, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, RBK852 lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to cause malfunctions or execute arbitrary code.

The vulnerability of Wi-Fi router microprogramming systems from NETGEAR, including models D6220, D6400, D7000v2, D8500, DC112A, EX7000, EX7500, R6250, R6300v2, R6400, R6400v2, R6700v3, R7000, R7100LG, R7850, R7900, R7960P, R8000, RAX200, RBS40V, RS400, XR300, R7000P, R8000P, R8500, RAX80, R6900P,...

Input validation

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt SMI to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service...

CVE-2022-21933

CVE-2022-21933 affects ASUS VivoMini/Mini PC and describes an improper input validation vulnerability. A local attacker with system privileges can trigger a System Management Interrupt (SMI) to modify memory, resulting in arbitrary code execution and potential control or disruption of the system....

The vulnerability of the url.cpp component in the Libproxy configuration management library, due to a lack of mechanism for checking the size of copied data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the url.cpp component in the Libproxy configuration management library is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability could allow an attacker operating remotely to gain access to confidential data, compromise its...

The vulnerability of the OpenJPEG library for image encoding and decoding, related to reading data beyond the buffer’s acceptable limits, allows attackers to cause service failures.

The vulnerability of the OpenJPEG library for image encoding and decoding is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Node.js software platform, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Node.js software platform is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the WebKit rendering module, related to memory usage after deallocation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebKit page rendering module relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Autofill component in the Google Chrome web browser, related to the use of memory after it is freed, allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Autofill component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially creat...

The vulnerability of the Payments component in the Google Chrome web browser, related to memory usage after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Payments component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially...

The vulnerability in the implementation of the rmmod command for the Grub2 operating system allows a hacker to gain access to confidential data, affect the integrity of the data, and cause service failures.

The vulnerability of the rmmod command, which is used by the Grub2 operating system loader, lies in the lack of checks to ensure that loaded modules are indeed present. Exploiting this vulnerability can allow an attacker to access confidential data, compromise data integrity, and cause service...

The vulnerability of the md_analyze_line function (md4c.c) in the MD4C parser, which relates to the use of an uninitialized resource, allows a hacker to cause a service failure.

The vulnerability of the mdanalyzeline function in the MD4C parser is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of Xen hypervisors on x86 Intel systems, related to the lack of a mechanism for managing privileges, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Xen hypervisors on x86 Intel systems is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the t2 encoder in the OpenJPEG library, related to reading data beyond the buffer’s acceptable limits, allows a malicious actor to cause service failures.

The vulnerability of the t2 encoder in the OpenJPEG library for image encoding and decoding involves reading data beyond the acceptable buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2022-21401

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications component: Mediation Engine. Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2022-21353

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogi...