4318 matches found
WS-2019-0384
In php-src, php-4.0RC1 to php-7.3.11RC1 it’s possible to exceed the heap boundaries due to lack of pointer's position validation, thus allowing a potential attacker to read sensitive data...
openSUSE Security Update : rust (openSUSE-2019-2203)
This update for rust fixes the following issues : Rust was updated to version 1.36.0. Security issues fixed : - CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety bsc1134978 - CVE-2018-1000622: rustdoc loads plugins from world-writab...
PT-2019-14809
Name of the Vulnerable Software and Affected Versions wolfSSL versions prior to 4.1.0 Description The issue is related to a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking, resulting in a one-byte heap-based buffer over-read. This occurs in the...
CVE-2019-16214
Libra Core before 2019-09-03 has an erroneous regular expression for inline comments, which makes it easier for attackers to interfere with code auditing by using a nonstandard line-break character for a comment. For example, a Move module author can enter the // sequence which introduces a...
WS-2019-0551
Matio in versions 1.5.9 and 1.5.17 is vulnerable to Stack-buffer-overflow, related to src/mat5.c...
CVE-2019-15939
An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp...
CVE-2019-15939
An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp...
CVE-2019-15939
An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp...
CVE-2019-15939: Divide By Zero
An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp...
PT-2019-14323
Name of the Vulnerable Software and Affected Versions wolfSSL version 4.1.0 Description The issue is related to a one-byte heap-based buffer over-read in the DecodeCertExtensions function located in wolfcrypt/src/asn.c. This occurs because the reading of the ASN BOOLEAN byte is mishandled for a...
WS-2019-0543
openSC in versions 0.12.2-rc1 to 0.19.0 is vulnerable toHeap-buffer-overflow in decodebitstring, related to src/libopensc/asn1.c...
CVE-2019-14493
An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...
CVE-2019-14492
An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...
CVE-2019-14492: Out-of-bounds Read
An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...
CVE-2019-14491: Out-of-bounds Read
An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...
Cross site scripting
ZmartZone IAM modauthopenidc 2.3.10.1 and earlier is affected by: Cross Site Scripting XSS. The impact is: Redirecting the user to a phishing page or interacting with the application on behalf of the user. The component is: File: src/modauthopenidc.c, Line: 3109. The fixed version is: 2.3.10.2...
CVE-2019-1010247
ZmartZone IAM modauthopenidc 2.3.10.1 and earlier is affected by: Cross Site Scripting XSS. The impact is: Redirecting the user to a phishing page or interacting with the application on behalf of the user. The component is: File: src/modauthopenidc.c, Line: 3109. The fixed version is: 2.3.10.2...
CVE-2019-1010247
ZmartZone IAM modauthopenidc 2.3.10.1 and earlier is affected by: Cross Site Scripting XSS. The impact is: Redirecting the user to a phishing page or interacting with the application on behalf of the user. The component is: File: src/modauthopenidc.c, Line: 3109. The fixed version is: 2.3.10.2...
CVE-2019-1010247
ZmartZone IAM modauthopenidc 2.3.10.1 and earlier is affected by: Cross Site Scripting XSS. The impact is: Redirecting the user to a phishing page or interacting with the application on behalf of the user. The component is: File: src/modauthopenidc.c, Line: 3109. The fixed version is: 2.3.10.2...