Denial Of Services (DoS)

jjson is vulnerable to Denial Of Services DoS. The vulnerability exists due to a stack overflow in the jsonAnnotationEncoder.encode function which allows an attacker to cause an application crash through a maliciously crafted map object with a reference to itself...

Denial Of Service (DoS)

snappy-java is vulnerable to Denial Of Service DoS. The vulnerability exists because the hasNextChunk function of SnappyInputStream.java does not properly check for negative chunk sizes and huge positive values such as 0x7FFFFFFF, which leads to java.lang.NegativeArraySizeException and...

Integer Overflow

snappy-java is vulnerable to Integer Overflow. The vulnerability exists because the compress function receives an array of characters and multiplies the value by two, and passes it to the rawCompress function of Snappy.java which does not properly check the length and causes an integer overflow, ...

Integer Overflow

snappy-java is vulnerable to Integer Overflow. The vulnerability exists because the shuffle functions of BitShuffle.java does not properly check multiplication results if its zero, too small or a negative value or not which cause java.lang.NegativeArraySizeException and...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : VLC media player vulnerabilities (USN-6180-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6180-1 advisory. It was discovered that VLC could be made to read out of bounds when decoding image files. If a user were tricked into...

Denial Of Service (DoS)

libmp4v2.so is vulnerable to Denial of Service DoS. The vulnerability exists in via MP4File::ReadString at mp4fileio.cpp because the memory allocation is not properly implemented which allows an attacker to cause memory leaks resulting in an application crash...

Google Chrome WebRTC code execution vulnerability (CNVD-2023-60941)

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome WebRTC, which is caused by the use of the WebRTC component after release. An attacker can exploit this vulnerability to execute arbitrary code on a system or cause an applicatio...

Google Chrome WebXR Code Execution Vulnerability

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome WebXR, which is caused by use after release in the WebXR component. An attacker can exploit this vulnerability to execute arbitrary code on a system or cause an application to...

Memory Leak

libyajl.so is vulnerable to Memory Leak. The vulnerability exists because memory is not released properly in the yajlval yajltreeparse function of yajltree.c, which allows an attacker to cause an out-of-memory error resulting in an application crash...

CVE-2023-34475

A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service...

Denial Of Service (DoS)

libiniparser.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to improperly checking in iniparsergetstring of iniparser.c, allowing an attacker to cause an application crash...

Integer Overflow

ImageMagick is vulnerable to Integer Overflow. The vulnerability exists due to improper casting of double to sizet which allows an attacker to cause an application crash...

Denial Of Service (DoS)

.NET is vulnerable to Denial of Service DoS attacks. The vulnerability is due to processing X.509 certificates, which allows a malicious user is to trigger an application crash by passing a crafted certificate...

Denial Of Service (DoS)

github.com/grafana/grafana is vulnerable to Denial Of Service DoS. The vulnerability exists due to executing concurrent mixed queries through the executeConcurrentQueries function of query.go, which allows an attacker to cause an application crash by calling the query API directly...

ROS-20230616-03

Vim text editor vulnerability is related to using pointer offset outside the allowed range in mbcharlen function in mbyte.c. range in the mbcharlen function in mbyte.c. Exploitation of the vulnerability could allow an attacker, remotely, trick the victim into opening a specially crafted file and...

Remote Code Execution

.NET core is vulnerable to Remote Code Execution. The vulnerability is due to the .NET source generator for P/Invokes, which allows an attacker to free uninitialized memory that leads to an application crash...

Denial Of Service (DoS)

Struts 2 Core is vulnerable to Denial Of Service DoS. The vulnerability exists when a multipart request has non-file form fields which allows an attacker to cause an application crash...

snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject

A flaw was found in the snakeyaml package due to a stack-overflow in parsing YAML files. By persuading a victim to open a specially-crafted file, a remote attacker could cause the application to crash...

Remote Code Execution (RCE)

.NET is vulnerable to Remote Code Execution RCE. The vulnerability exists due to the MSDIA SDK because corrupted PDBs can result in a heap overflow allowing an attacker to cause an application crash or remote code execution...

ROS-20230615-01

LibRaw image processing library vulnerability is related to heap buffer overflow in raw2imageex. Exploitation of the vulnerability could allow an attacker acting remotely to cause an application to application crash due to a maliciously crafted input file...