Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, an American company. An out-of-bounds write vulnerability exists in the Google Chrome Swiftshader component, which can be exploited by an attacker to execute arbitrary code on the system or cause an application to crash...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome PDF component, which can be exploited by an attacker to execute arbitrary code on the system or cause an application to crash...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in the Google Chrome V8 component due to type confusion in the V8 component. An attacker can exploit this vulnerability to execute arbitrary code on a system or cause an application to crash...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Extensions component, which can be exploited by an attacker to execute arbitrary code on a system or cause an application to crash...

Debian dla-3433 : libraw-bin - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3433 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3433-1 [email protected]...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the xmlsaxparse function which is recursively called with the gfxmlsaxparseintern function, exhausting stack space, resulting in Stack-based Buffer Overflow, causing an application crash...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial of Service DoS attacks. Insufficient checks for division by zero exists in the naludmxcreateavcdecoderconfig function of reframenalu.c, allowing an attacker to crash the application via a crafted input...

Wireshark 缓冲区错误漏洞

Wireshark is an open source network protocol analysis tool that is widely used in real-time network communications, network troubleshooting, network security analysis and other fields. It can capture and analyze packets transmitted from the network , provides a powerful system of filters and...

Wireshark 1.6.x < 1.6.16 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.6.16. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.16 advisory. - The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark...

Heap overflow

A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2mergedupsampleinternal function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an attacker could cra...

CVE-2023-2804

A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2mergedupsampleinternal function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit data precision for which the range of the sample data type exceeds the valid sample range, hence, an attacker could cra...

Wireshark 1.4.x < 1.4.15 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.15 advisory. - Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before...

Denial Of Services (DoS)

libpodofo.so is vulnerable to Denial Of Services DoS. The vulnerability exists due to the segmentation fault in the findKeyParent function of PdfDictionary.cpp, which allows an attacker to cause an application crash...

SUSE CVE-2023-2157

A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing...

WBiz Desk 1.2 SQL Injection

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

Security Bulletin: There are multiple vulnerabilites that affect IBM Engineering Requirements Quality Assistant On-Premises

Summary IBM Engineering Requirements Quality Assistant On-Premises affected by multiple vulnerabilities due to which an attacker could exploit this vulnerability to execute arbitrary code on the system and cause the application to crash cause a denial of service condition on the system. This...

Denial Of Services (DoS)

libssh.so is vulnerable to Denial Of Services DoS. The vulnerability exists due to a null pointer dereference during rekeying with algorithm guessing, which allows an attacker to cause an application crash when the client initiates rekeying with the firstkexpacketfollows flag in the KEXINIT messa...

Denial Of Services (DoS)

libpodofo.so is vulnerable to Denial of Service DoS. This vulnerability exists because it does not properly manage heap buffer overflow s in :PdfEncryptRC4 which allows an attacker to cause an application crash...

Denial Of Services (DoS)

libpodofo.so is vulnerable to Denial Of Services DoS. The vulnerability exists due to the heap buffer overflow in the PdfEncryptAESV3 function of PdfEncrypt.h, which allows an attacker to cause an application crash...

Use After Free

libgpac.so is vulnerable to Use After Free. The vulnerability exists due to the heap-use-after-free in the gfisomfullboxread function of PdfEncrypt.h, which allows an attacker to cause an application crash...