Denial Of Service (DoS)

github.com/ipld/go-ipld-prime is vulnerable to denial of service. The vulnerability exists because the Marshal function of marshal.go does not properly encode plain JSON codec into bytes or links, allowing an attacker to cause an application crash. This only affects the "json" codec; the "dag-jso...

CVE-2022-3341

A null pointer dereference issue was discovered in 'FFmpeg' in decodemainheader function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformatnewstream and triggers the null pointer dereference error, causing an application to crash...

Regular Expression Denial Of Service (ReDoS)

string-kit is vulnerable to regular expression denial of service attacks. The vulnerability exists via the module.exports function in naturalSort.js, which does not properly handle user-input data due to to inefficient regular expression complexity, allowing an attacker to cause an application...

Denial Of Service (DoS)

microsoft.netcore.app.runtime. packages are vulnerable to Denial of Service DoS attacks. The vulnerability is due to the DataContractSerializer handling recursive collections, which allows a malicious user to cause a stack overflow which may result in a denial of service, resulting in an...

CVE-2022-3341

FFmpeg (libavformat/nutdec.c) contains a null pointer dereference in decode_main_header() caused by not checking the return value of avformat_new_stream(). This can lead to application crashes (availability impact). The issue is confirmed across multiple sources (Debian/DLA advisory, Mageia advis...

CVE-2022-3341

A null pointer dereference issue was discovered in 'FFmpeg' in decodemainheader function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformatnewstream and triggers the null pointer dereference error, causing an application to crash...

CVE-2022-3341

A null pointer dereference issue was discovered in 'FFmpeg' in decodemainheader function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformatnewstream and triggers the null pointer dereference error, causing an application to crash...

Denial Of Service (DoS)

github.com/ipld/go-codec-dagpb is vulnerable to denial of service. The vulnerability exists when dag-pb codec decodes an invalid block which allows an attacker to cause an application crash...

Debian dla-3265 : exiv2 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3265 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3265-1 [email protected]...

GLSA-202301-07 : Alpine: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202301-07 Alpine: Multiple Vulnerabilities - In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS. CVE-2021-38370 - Alpine before 2.25 allows remote attackers to cause a denial of service...

Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2023-1071)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.6 : gdk-pixbuf2 (EulerOS-SA-2023-1084)

According to the versions of the gdk-pixbuf2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service NULL pointer dereferen...

EulerOS Virtualization 3.0.2.6 : mariadb (EulerOS-SA-2023-1071)

According to the versions of the mariadb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - MariaDB through 10.5.9 allows an application crash in findfieldintables and findorderinlist via an unused common table expressio...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists due to the memory corruption in the library which allows an attacker to cause an application crash by injecting an executing malicious code...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists due to the memory corruption in the library which allows an attacker to cause an application crash by injecting an executing malicious code...

Regular Expression Denial Of Service (ReDoS)

markdown-it is vulnerable to regular expression denial of service DoS attacks. A malicious user is able to pass a crafted regex statement through the replace function in lib/common/htmlre.js, causing an application crash due to inefficient regular expression complexity...

Denial Of Service (DoS)

github.com/sajari/docconv is vulnerable to denial of service. The vulnerability exists in multiple functions due to unbounded memory consumption which allows an attacker to cause an application crash...

Denial Of Service (DoS)

rdiffweb is vulnerable to denial of service. The vulnerability exists because the rate limit on email triggering is not properly validated, allowing an attacker to send an email flood, resulting in an application crash...

Denial Of Service (DoS)

github.com/go-yaml/yaml is vulnerable to Denial Of Service DoS. A malicious user is able to pass a large YAML document which consumes excessive amounts of CPU or memory, causing the application to crash...

Denial Of Service (DoS)

openblas is vulnerable to denial of service. The vulnerability exists due to the out-of-bounds read in the library, allowing an attacker to cause an application crash or disclosure of its memory by passing a maliciously crafted input...