CVE-2024-43167 Unbound: null pointer dereference in unbound

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to possible denial of service due to decode-uri-component (CVE-2022-38900 )

Summary decode-uri-component is used by IBM Cloud Pak for Data. CVE-2022-38900. Vulnerability Details CVEID:CVE-2022-38900 DESCRIPTION: decode-uri-component is vulnerable to a denial of service, caused by improper input validation by the decodeComponents function. By sending a specially-crafted...

libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash...

Adobe InDesign Buffer Overflow Vulnerability (CNVD-2024-38536)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe InDesign, which can be exploited by an attacker to overflow a buffer and execute arbitrary code on the system or cause the application to crash...

ROS-20240805-06

An Envoy proxy vulnerability is related to incorrect validation of an erroneous pointer value. Exploitation of the vulnerability could allow an attacker acting remotely to cause the application to crash. application crash...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS before version 16.7.9 and iPadOS before version 16.7.9, which stems from the fact...

Adobe InDesign Null Pointer Dereference Vulnerability (CNVD-2024-38537)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause the application to crash...

Google Chrome Buffer Overflow Vulnerability (CNVD-2024-33610)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a buffer overflow vulnerability that stems from incorrect boundary checking in Layout. An attacker can exploit this vulnerability to execute arbitrary code on the system or cause the application to crash...

Heap-based Buffer Overflow

fiona is vulnerable to Heap-based Buffer Overflow. The vulnerability is due to improper handling of long filenames, comments, or extra fields in within zlib components that contain integer overflow vulnerabilities, which can result in an application crash or potential code execution...

Huawei EulerOS: Security Advisory for tigervnc (EulerOS-SA-2024-2062)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

fiona is vulnerable Denial of Service DoS. The vulnerability is due to the bundled libjpeg-turbo and gdal components which contain Denial of Service vulnerabilities, which could potentially result in an application crash...

EulerOS 2.0 SP9 : libxml2 (EulerOS-SA-2024-1940)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with...

EulerOS 2.0 SP9 : glade (EulerOS-SA-2024-1931)

According to the versions of the glade package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial...

EulerOS 2.0 SP10 : libxml2 (EulerOS-SA-2024-1913)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with...

Adobe InDesign Heap Buffer Overflow Vulnerability (CNVD-2024-34093)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on the system or cause the application to crash...

Adobe InDesign Heap Buffer Overflow Vulnerability (CNVD-2024-34088)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on the system or cause the application to crash...

Siemens JT Open and PLM Null Pointer Dereference Vulnerability

The Siemens JT Open Toolkit Siemens JTTK is a C++ application programming interface API from Siemens, Germany.The PLM XML SDK is a lightweight, flexible mechanism for product data transfer. It supports an adapter-based approach to transform data from any source into an XML representation. A null...

CVE-2023-39328

A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file...

AZL-44982 CVE-2023-39328 affecting package openjpeg2 2.3.1-12

A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file...

CVE-2023-39328

A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file...