Node Object-path Module Type Conversion

The vulnerability of the Node Object-path module is related to errors in data type conversion. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

GPAC MPEG-4 Decoder Data Compromise

The vulnerability of the CSGP decoder for MPEG-4 multimedia platform GPAC is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

MySQL InnoDB DoS

The vulnerability of the InnoDB component in the MySQL database management system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures...

GPAC MPEG-4 Decoder Heap Buffer Overflow DoS

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s functionality-related decoding process is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its...

libheif/box.cc Heap Buffer Overflow DoS

The vulnerability of the Fraction function in the libheif/box.cc component of the HEIF and AVIF encoding/decoding library allows attackers to exploit it remotely. This enables them to access confidential data, compromise its integrity, and cause service failures...

CGAL Nef_S2/SNC_io parser.h Heap Buffer Overflow DoS

The vulnerability of the NefS2/SNCio parser.h component in the CGAL algorithm library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...

OTRS Ticket Request System Confidential Data Access Data Compromise

The vulnerabilities in the components Kernel/Output/HTML/PreferencesCustomQueue.pm, Kernel/System/CustomerCompany.pm, Kernel/System/Ticket/IndexAccelerator/RuntimeDB.pm, Kernel/System/Ticket/IndexAccelerator/StaticDB.pm, and Kernel/System/TicketSearch.pm of the OTRS ticket request system are...

HDLR decoder in the Data Compromise

The vulnerability of the HDLR decoder in the MPEG-4 multimedia platform GPAC decoding function is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability allows an attacker operating remotely to gain access to confidential data, compromise its integrity, and cau...

GPAC multimedia platform Heap Buffer Overflow DoS

The vulnerability of the ilstitemRead function in the boxcodeapple.c component of the GPAC multimedia platform is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause service failures...

Tinyobjloader LoadObj Buffer Overflow DoS

The vulnerability of the LoadObj function of the .obj Tinyobjloader loader is related to unvalidated array indexing. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures through the use of a malicious file...

Libde265 ff_hevc_put_unweighted_pred_8_sse Heap Buffer Overflow DoS

The vulnerability of the ffhevcputunweightedpred8sse function in the H.265 Libde265 video codec implementation is related to writing outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause servi...

Configuration Management Remote Execution Information Disclosure

The vulnerability of configuration management systems and remote execution of operations like Salt is related to the exposure of information in error-prone data areas. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause...

MP4Box Component Heap Buffer Overflow DoS

The vulnerability of the hevcparsevpsextension function in the MP4Box component of the GPAC multimedia platform is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failure...

Tcl nmakehlp.c Heap Buffer Overflow DoS

The vulnerability of the Tcl programming language component nmakehlp.c is related to insufficient handling of format lines. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file...

Golang net.Lookup Functions Data Compromise

The vulnerability of the net.LookupAddr,CNAME,Host functions in the Golang programming language is related to the lack of hostname filtering in the DNS server responses. Exploiting this vulnerability allows an attacker who operates remotely to access confidential data, compromise its integrity, a...

GPAC multimedia platform gf_fprintf Heap Buffer Overflow DoS

The vulnerability of the gffprintf function in the osfile.c component of the GPAC multimedia platform is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Singularity Container Insufficient Entropy

The vulnerability of the Singularity container platform is related to insufficient entropy. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

mat5.c library Heap Buffer Overflow DoS

The vulnerability of the MatVarReadNextInfo5 function in the mat5.c library for reading and writing MATLAB MATIO files is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Gradle Plugin Confidential Data Access

The vulnerability of the Gradle plugin and script in the automatic build system Gradle is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

SIXEL Libsixel Encoder/Decoder Heap Buffer Overflow DoS

The vulnerability of the sixelencodehighcolor function in the tosixel.c component of the SIXEL Libsixel encoder/decoder implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...