dev-java/snakeyaml: DoS via stack overflow

Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack...

hsqldb: Untrusted input may lead to RCE attack

A flaw was found in the HSQLDB package. This flaw allows untrusted inputs to execute remote code due to any static method of any Java class in the classpath, resulting in code execution by default...

jettison: memory exhaustion via user-supplied XML or JSON data

A vulnerability was found in Jettison, where parsing an untrusted XML or JSON data may lead to a crash. If the parser is running on user-supplied input, an attacker may supply content that causes the parser to crash, causing memory exhaustion. This effect may support a denial of service attack...

Important: Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.20.1 security update

Red Hat Integration Camel for Spring Boot 3.20.1 release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

SUSE CVE-2023-24539

Angle brackets are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input...

chromium -- multiple vulnerabilities

Chrome Releases reports: This update includes 15 security fixes: 1423304 Medium CVE-2023-2459: Inappropriate implementation in Prompts. Reported by Rong Jian of VRI on 2023-03-10 1419732 Medium CVE-2023-2460: Insufficient validation of untrusted input in Extensions. Reported by Martin Bajanik,...

CVE-2023-30792

Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link clicks in cases where input was being parsed from untrusted sources...

CVE-2023-30792

Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link clicks in cases where input was being parsed from untrusted sources...

PT-2023-22985 · Lexical · Lexical

Name of the Vulnerable Software and Affected Versions: Lexical versions prior to 0.10.0 Description: The issue allows cross-site scripting on link clicks when input is being parsed from untrusted sources, due to href attributes in anchor tags rendering javascript: URLs. Recommendations: For...

Meta Platforms Lexical 跨站脚本漏洞

Meta Platforms Lexical is an extensible JavaScript web text editor framework from Meta Platforms, Inc. A security vulnerability exists in Meta Platforms Lexical versions prior to v0.10.0 that originates from allowing cross-site scripting attacks on link clicks while parsing input from an untruste...

Siemens Teamcenter Visualization Buffer Overflow Vulnerability

Siemens Teamcenter Visualization is the German Siemens Siemens company's a can be designed for 2D, 3D scenes to provide teamwork function of the software. Siemens Teamcenter Visualization suffers from a buffer overflow vulnerability that originates from a boundary error when handling untrusted...

Google Android inflate.c component buffer overflow vulnerability

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a buffer overflow vulnerability that stems from a boundary error in the inflate.c component when handling untrusted input, which can be exploited by an attacker to cause an out-of-bounds write,...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a buffer overflow vulnerability that stems from a boundary error in the inflate.c component when handling untrusted input, which can be exploited by an attacker to cause an out-of-bounds write,...

Siemens Teamcenter Visualization 安全漏洞

Siemens Teamcenter Visualization is the German Siemens Siemens company's a can be designed for 2D, 3D scenes to provide teamwork function of the software. Siemens Teamcenter Visualization suffers from a buffer overflow vulnerability that originates from a boundary error when handling untrusted...

golang: out-of-bounds read in golang.org/x/text/language leads to DoS

A flaw was found in golang. The language package for go language can panic due to an out-of-bounds read when an incorrectly formatted language tag is being parsed. This flaw allows an attacker to cause applications using this package to parse untrusted input data to crash, leading to a denial of...

Adobe Digital Editions 缓冲区错误漏洞

Adobe Digital Editions DE is a set of eBook reading management software from the American company Odobi Adobe. The software supports opening, reading and managing files in PDF, XML, Flash and other formats. Adobe Digital Editions 4.5.11.187303 and earlier versions contain a buffer overflow...

PT-2023-7430

Name of the Vulnerable Software and Affected Versions HP LaserJet Pro affected versions not specified Description The issue is related to a buffer overflow vulnerability in the firmware of HP LaserJet Pro printers, which can be exploited to allow remote code execution. This occurs due to unchecke...

KLA48814 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. Security UI vulnerability in Navigation can be...

GNU Binutils Buffer Overflow Vulnerability (CNVD-2025-21056)

GNU Binutils is a set of binary tools developed by the GNU Project, mainly used to deal with target files e.g., executables, libraries, etc., covering compilation, linking, debugging, and other phases of the function. GNU Binutils suffers from a buffer overflow vulnerability that originates from ...

UBUNTU-CVE-2023-1814

Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass download checking via a crafted HTML page. Chromium security severity: Medium...