18834 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-13803
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTun...
Linux Distros Unpatched Vulnerability : CVE-2021-45481
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation violation an...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the processing of crafted TIFF files. An attacker can cause the application to crash by supplying a specially crafted file. Remediation A fix was pushed into the master branch but not yet published...
GHSA-FFF3-4RP7-PX97 ImageMagick has a heap-buffer-overflow
Summary While Processing a crafted TIFF file, imagemagick crashes. Details Following is the imagemagick version: imagemagickgit/build26jun23/bin/magick --version Version: ImageMagick 7.1.1-13 Beta Q16-HDRI x8664 56f478940:20230625 https://imagemagick.org Copyright: C 1999 ImageMagick Studio LLC...
Linux Distros Unpatched Vulnerability : CVE-2017-7049
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected...
Linux Distros Unpatched Vulnerability : CVE-2017-2539
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the WebKit component. It...
TOTOLINK A3002R 安全漏洞
The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that originates in the hostname...
Linux Distros Unpatched Vulnerability : CVE-2023-43114
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When using the GDI font engine, if a corrupted...
Google Chrome Heap Buffer Overflow Vulnerability
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a heap buffer overflow vulnerability due to improper boundary checking by libaom. An attacker can exploit the vulnerability to overflow a buffer, which can be used to execute arbitrary code on the system o...
Adobe InCopy 资源管理错误漏洞
Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. A memory misreference vulnerability exists in Adobe InCopy, which can be exploited by an attacker to execute code on the system or cause the application to crash...
Adobe InCopy 缓冲区错误漏洞
Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute code on the system or cause the application to crash...
Adobe InCopy 缓冲区错误漏洞
Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute code on the system or cause the application to crash...
Adobe InCopy 缓冲区错误漏洞
Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute code on the system or cause the application to crash...
Adobe InCopy 缓冲区错误漏洞
Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute code on the system or cause the application to crash...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a heap buffer overflow vulnerability due to improper boundary checking by libaom. An attacker can exploit the vulnerability to overflow a buffer, which can be used to execute arbitrary code on the system o...
CVE-2025-54801
Fiber is an Express inspired web framework written in Go. In versions 2.52.8 and below, when using Fiber's Ctx.BodyParser to parse form data containing a large numeric key that represents a slice index e.g., test.18446744073704, the application crashes due to an out-of-bounds slice allocation in...
Linux Distros Unpatched Vulnerability : CVE-2024-25580
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer...
Fiber Crashes in BodyParser Due to Unvalidated Large Slice Index in Decoder
Description When using Fiber's Ctx.BodyParser to parse form data containing a large numeric key that represents a slice index e.g., test.18446744073704, the application crashes due to an out-of-bounds slice allocation in the underlying schema decoder. The root cause is that the decoder attempts t...
Expired Pointer Dereference
Overview Affected versions of this package are vulnerable to Expired Pointer Dereference in the parsing process of xsl nodes. An attacker can cause the application to crash by triggering the dereference of expired pointers after memory has been freed. Remediation A fix was pushed into the master...
