CVE-2022-3116

The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash...

CVE-2022-3116

The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash...

CVE-2022-3116

The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash...

CVE-2022-3116

The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash...

Denial Of Service (DoS)

org.codehaus.jettison:jettison is vulnerable to Denial of Service DoS. The vulnerability is due to an infinite loop when constructing a JSONArray from a Collection that contains a self-reference in one of its elements which leads to a StackOverflowError exception, resulting in an application cras...

Denial Of Service (DoS)

firefox is vulnerable to Denial Of Service DoS. The vulnerability exists due to the memory safety bug in the library, which allows an attacker cause an application crash through the arbitrary code injection...

Denial Of Service (DoS)

gif2apng is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap-based buffer overflow in the DecodeLZW function, which allows an attacker to write large amount of arbitrary data outside the boundaries of a buffer, leading to an application crash...

Denial Of Service (DoS)

gif2apng is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap-based buffer overflow in the main function , which allows an attacker to write 2 bytes outside the boundaries of the buffer, leading to an application crash...

Denial Of Service (DoS)

gif2apng is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap-based buffer overflow in the main function , which allows an attacker to write data outside of the allocated buffer., leading to an application crash...

Denial Of Service (DoS)

Linux kernel is vulnerable to Denial Of Service DoS. The vulnerability exists due to the use after free in the cmdhdlfilter in rtl8712cmd.c, which allows an attacker to cause an application crash and gain escalation of privileges...

Regular Expression Denial Of Service (ReDoS)

textacy is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists because constants.py and resources.py include a REGEX pattern that has insufficient regular expression complexity which allows an attacker to cause an application crash...

Denial Of Service (DoS)

net.minidev, json-smart is vulnerable to Denial Of Service DoS. The vulnerability exists because there is no nested depth checks for deeply nested JSON arrays or objects, which allows an attacker to crash the application via a malicious array with deeply nested elements...

Denial Of Service (DoS)

liblouis.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the lousetDataPath function in compileTranslationTable.c because it does not check the length of a path before copying into the dataPath which allows an attacker to cause a buffer overflow which leads to an...

Denial Of Service (DoS)

liblouis.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the loulogFile function in logging.c because it does not check the length of the filename before coping to initialLogFileName which allows an attacker to cause a buffer overflow which leads to an application crash...

Out Of Bounds Read

Sofia-SIP is vulnerable to an Out-of-bounds Read. This vulnerability is present in the sipmethodd function of sipparser.c, and it enables an attacker to potentially trigger an application crash by sending a maliciously crafted message containing a malicious SDP Session Description Protocol to...

Denial Of Service (DoS)

sofia-sip is vulnerable to Denial of Service DoS attacks. An attacker is able to send a message with evil sdp to FreeSWITCH, which may cause an application crash with the use of a URL ending with %...

Server-side Request Forgery (SSRF)

cairosvg is vulnerable to Server-side Request Forgery SSRF and Denial of Service DOS. The vulnerability is due to allowing the loading of external host resources by default during parsing, allowing an attacker to parse a maliciously crafted file from an external resource, resulting in Server-side...

Medium: libsndfile

Issue Overview: An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file via tricking a user to open or otherwise to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read...

Medium: ghostscript

Issue Overview: A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the numbe...

Medium: libarchive

Issue Overview: An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extra...