Denial Of Service (DoS)

Linux kernel is vulnerable to Denial Of Service DoS. The vulnerability exists through the null pointer dereference in nftablesupdtable, allowing an attacker to cause an application crash...

CVE-2023-26253

A flaw was found in Gluster, where GlusterFS is vulnerable to a denial of service caused by a stack-based buffer over-read flaw in xlators/mount/fuse/src/fuse-bridge.c. A remote attacker can cause the application to crash by sending a specially-crafted request...

Denial Of Service (DoS)

apacheairflowprovidersgoogle is vulnerable to Denial of Service DoS attacks. The vulnerability is due to improper input validations in cloudsql.py, resulting in an application crash...

Denial Of Service (DoS)

markdown-it-py is vulnerable to Denial Of Service DoS. The vulnerability exists in the convertfile function of parse.py, which allows an attacker to cause an application crash by submitting invalid UTF-8 characters when using the CLI version of markdown-it-py...

Denial Of Service (DoS)

tar is vulnerable to Denial Of Service DoS. The vulnerability exists due to the one-byte out-of-bounds read that results in the use of uninitialized memory for a conditional jump, allowing an attacker to cause an application crash through the fromheader in list.c via a V7 archive in which mtime h...

Denial Of Service (DoS)

github.com/golang/net is vulnerable to Denial of Service DoS attacks. An attacker is able to cause excessive CPU consumption through the HPACK decoder via a small number of maliciously crafted HTTP/2 stream requests, resulting in an application crash...

Denial Of Service (DoS)

github.com/golang/image is vulnerable to Denial of Service DoS attacks. An attacker is able to consume a significant amount of memory through the DecodeConfig component when passed a malformed TIFF image, resulting in an application crash...

Denial Of Service (DoS)

github.com/notaryproject/notation-go is vulnerable to Denial of Service DoS attacks. A malicious user is able to exhaust memory through the signature verification component, either resulting in high memory load or an application crash...

Denial Of Service (DoS)

firefox is vulnerable to Denial of Service DoS attacks. A malicious user is able to cause a heap-based buffer over resulting in memory corruption, causing the application to crash...

NULL Pointer Dereference

firefox is vulnerable to NULL Pointer Dereference. The vulnerability exists because the lack of validation in returning value of gfx::SourceSurfaceSkia::Map, which cause a null pointer dereference, leading to an application crash...

Denial Of Service (DoS)

firefox is vulnerable to Denial Of Service DoS. The vulnerability exists when encoding data from an inputStream in xpcom. The input size being encoded was not correctly calculated, potentially leading to an out-of-bounds memory write, allowing an attacker to cause an application crash...

Denial Of Service (DoS)

firefox is vulnerable to Denial Of Service DoS. The vulnerability exists because the cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy, allowing an...

Denial Of Service (DoS)

firefox is vulnerable to Denial Of Service DoS. The failed module load requests were not being checked whether or not they were cancelled, causing a use-after-free in ScriptLoadContext and an application crash...

Buffer Overflow

libraw.so is vulnerable to Buffer Overflows. The vulnerability exists in librawdatastream.cpp because the input buffer size on datastream::gets is not properly checked, resulting in an application crash...

Denial Of Service (DoS)

kiwitcms is vulnerable to Denial Of Service DoS. The vulnerability exists because the library does not impose rate limits in forms.py, allowing an attacker to cause an application crash through the password reset page by sending a large number of emails if they know the user email addresses in Ki...

K95432245: PHP vulnerability CVE-2016-5768

Security Advisory Description Double free vulnerability in the phpmbregexeregreplaceexec function in phpmbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service application...

K43700555: GNU C Library (glibc) vulnerability CVE-2021-33574

Security Advisory Description The mqnotify function in the GNU C Library aka glibc versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object passed through its struct sigevent parameter after it has been freed by the caller, leading to a denial of service...

K95698826: LZO vulnerability CVE-2014-4607

Security Advisory Description An integer overflow flaw was found in the way the lzo library decompressed certain archives compressed with the LZO algorithm. An attacker could create a specially crafted LZO-compressed input that, when decompressed by an application using the lzo library, would cau...

K04972684: PHP vulnerability CVE-2016-3185

Security Advisory Description The makehttpsoaprequest function in ext/soap/phphttp.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote attackers to obtain sensitive information from process memory or cause a denial of service type confusion and...

K04127310: PHP vulnerabilities CVE-2016-3141 and CVE-2016-3142

Security Advisory Description CVE-2016-3141 Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact by triggerin...