Denial Of Service (DoS)

libpoppler.so is vulnerable to Denial Of Service DoS. The vulnerability exists in convertToType0 function at FoFiType1C.cc due to a NULL pointer dereference which allows an attacker to cause an application crash...

Buffer Overflow

libzephyr.so is vulnerable to Buffer Overflow. The vulnerability exists due to the lack of size check for buffer copy inputs in isotp.h, which allows an attacker to cause an application crash...

Denial Of Service (DoS)

libmspack is vulnerable to Denial Of Service DoS. The vulnerability exists due to the chmdreadheaders function of chmd.c which does not properly validate name lengths, which allows an attacker to cause an application crash through the maliciously crafted CHM file...

Buffer Overflow

libfile.so is vulnerable to Buffer Overflow. The vulnerability exists due to the stack-based buffer over-read in the filecopystr function of funcs.c, which allows an attacker to cause an application crash through a maliciously crafted input...

Smart School 6.4.1 SQL Injection

Exploit Title: Smart School 6.4.1 - SQL Injection Exploit Author: CraCkEr Date: 28/09/2023 Vendor: QDocs - qdocs.net Vendor Homepage: https://smart-school.in/ Software Link: https://demo.smart-school.in/ Tested on: Windows 10 Pro Impact: Database Access CVE: CVE-2023-5495 CWE: CWE-89 - CWE-74 -...

Denial Of Service (DoS)

libtiff.so is vulnerable to Denial of Service. The vulnerability exists in the TIFFmemcpy function in tifluv.c because it does not properly handle exceptional conditions, which allows an attacker to send a crafted file into the system, causing an application crash...

Denial Of Service (DoS)

libtiff.so is vulnerable to Denial of Service DoS. The vulnerability exists in TIFFReadDirectory function because it does not safely handle stack exceptions, which allows an attacker to cause an application crash...

Denial Of Service (DoS)

libsndfile.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to a signed integer overflow in the mat4readheader function of mat4.c, which allows an attacker to cause an application crash...

Oracle Linux 9 : glibc (ELSA-2023-5453)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-5453 advisory. - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode 2234716. Tenable has extracted the preceding description block directly from the...

CVE-2023-5441

A NULL pointer dereference vulnerability was found in Vim. This flaw allows an attacker who can trick a user into processing a specially crafted file to trigger the NULL pointer dereference, causing the application to crash. Mitigation Do not run untrusted vim scripts as it's not recommended...

Denial Of Service (DoS)

binutils is vulnerable to Denial of Service DoS. The field thebfd of asymbolstruct is uninitialized in the bfdmachogetsyntheticsymtab function, which may allow a local attacker to cause an application crash...

Denial Of Service (DoS)

binutils is vulnerable to Denial of Service DoS. The use of an uninitialized field in the struct module module, which may allow a local attacker to cause an application crash...

Denial Of Service (DoS)

binutils is vulnerable to Denial of Service DoS. An use of an uninitialized variable causes a logic fail in the bfdinitsectiondecompressstatus function, which may allow a local attacker to cause an application crash...

Denial Of Service (DoS)

libpoppler.so is vulnerable to Denial of Service DoS. The vulnerability exists in the readXRefTable function in XRef.cc because it does not properly validate the user-inputs, which allows an attacker to cause an application crash...

Denial Of Service (DoS)

libpoppler.so is vulnerable to Denial of Service DoS. The vulnerability exists in PDFDoc.cc because it does not properly handle the xref data structure, which allows an attacker to cause an application crash...

CVE-2023-5333

Mattermost fails to deduplicate input IDs allowing a simple user to cause the application to consume excessive resources and possibly crash by sending a specially crafted request to /api/v4/users/ids with multiple identical IDs...

Input validation

Mattermost fails to deduplicate input IDs allowing a simple user to cause the application to consume excessive resources and possibly crash by sending a specially crafted request to /api/v4/users/ids with multiple identical IDs...

Denial Of Service (DoS)

libhdf5.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the stack-based buffer overflow in H5Eint.c, which allows an attacker to cause an application crash by providing a maliciously crafted input...

Denial Of Service (DoS)

libvips.so is vulnerable to Denial of Service DoS. The vulnerability is due improper UTF-8 character handling in svgload.c because it does not properly validate malformed characters, which allows an attacker to cause an application crash or potentially execute arbitrary code...

Buffer Overflow

libzephyr.so is vulnerable to Buffer Overflow. The vulnerability exists due to the lack of user input validation in the eswificore.c and eswifishell.c, which allows an attacker to cause an application crash...