Yifan YF325 缓冲区错误漏洞

Yifan YF325 is a wireless router from Yifan. The Yifan YF325 suffers from a buffer overflow vulnerability that stems from a boundary error in the gwcfgcgisetmanagepostdata function malloc function when handling untrusted input. An attacker can exploit this vulnerability to cause a buffer overflow...

Adobe Photoshop 缓冲区错误漏洞

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. A...

Xiaomi Router 安全漏洞

Xiaomi Router is a series of wireless routers from the Chinese company Xiaomi. Xiaomi Router suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. An attacker could exploit the vulnerability to execute arbitrary code or...

python-reportlab: code injection in paraparser.py allows code execution

A code injection vulnerability was found in python-reportlab that may allow an attacker to execute code while parsing a unichar element attribute. An application that uses python-reportlab to parse untrusted input files may be vulnerable and could allow remote code execution...

DEBIAN-CVE-2023-44821

Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect GifRealloc calls, might allow a denial of service memory consumption. NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arriv...

Input validation

Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect GifRealloc calls, might allow a denial of service memory consumption. NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arriv...

CVE-2023-44821

Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect GifRealloc calls, might allow a denial of service memory consumption. NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arriv...

UBUNTU-CVE-2023-44821

DISPUTED Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect GifRealloc calls, might allow a denial of service memory consumption. NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new...

PT-2023-29303 · Gifsicle +2 · Gifsicle +2

Name of the Vulnerable Software and Affected Versions: Gifsicle versions 1.92 through 1.94 Description: The issue might allow a denial of service due to memory consumption if Gifsicle is deployed in a way that allows untrusted input to affect Gif Realloc calls. However, this has been disputed by...

CVE-2023-44821

Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect GifRealloc calls, might allow a denial of service memory consumption. NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arriv...

CVE-2023-44821

Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect GifRealloc calls, might allow a denial of service memory consumption. NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arriv...

nodejs-semver: Regular expression denial of service

A Regular Expression Denial of Service ReDoS vulnerability was discovered in node-semver package via the 'new Range' function. This issue could allow an attacker to pass untrusted malicious regex user data as a range, causing the service to excessively consume CPU depending upon the input size,...

nodejs-semver: Regular expression denial of service

A Regular Expression Denial of Service ReDoS vulnerability was discovered in node-semver package via the 'new Range' function. This issue could allow an attacker to pass untrusted malicious regex user data as a range, causing the service to excessively consume CPU depending upon the input size,...

nodejs-semver: Regular expression denial of service

A Regular Expression Denial of Service ReDoS vulnerability was discovered in node-semver package via the 'new Range' function. This issue could allow an attacker to pass untrusted malicious regex user data as a range, causing the service to excessively consume CPU depending upon the input size,...

Medium: openssl-snapsafe

Issue Overview: Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck, DHcheckex or EVPPKEYparamcheck to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in Vim versions prior to 9.0.1969, which stems from a boundary error in the function truncstring in src/message.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code...

CVE-2023-26148

All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. An attacker can add the \r\n carriage return line feeds characters and inject additional headers in the request sent...

CVE-2023-26147

All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to build headers values. An attacker can add the \r\n carriage return line feeds characters to end the HTTP response headers and inject malicious content, like for example...

CVE-2023-26148

All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. An attacker can add the \r\n carriage return line feeds characters and inject additional headers in the request sent...

libhv Injection Vulnerability

libhv is ithewei open source an easier to use than libevent/libuv/asio network library . libhv injection vulnerability , the vulnerability stems from when the use of untrusted user input to set the request header , vulnerable to CRLF injection attacks...