CVE-2021-33897

CVE-2021-33897 affects Synthesia. A buffer overflow in Synthesia before 10.7.5567 (when a non-Latin locale is used) can be triggered by a crafted MIDI file with malformed bytes, leading to a denial of service (application crash) during deletion. A separate issue in Synthesia before 10.9 involves ...

Null Pointer Dereference

bluez is vulnerable to null pointer dereference. The vulnerability exists due to the manipulation of the argument caplen in read50controllercapcomplete of the file tools/mgmt-tester.c which causes a null pointer dereference resulting in an application crash...

Incorrect Type Conversion

nagvis is vulnerable to Incorrect type conversion. The vulnerability exists due to manipulation of the argument hash in the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php which allows an attacker to cause an application crash...

Denial Of Service (DoS)

Pillow is vulnerable to denial of service DoS. A remote attacker is able to cause an application crash by passing a maliciously crafted GIF file containing malformed data through the seek function...

NewStart CGSL MAIN 6.02 : graphviz Vulnerability (NS-SA-2022-0094)

The remote NewStart CGSL host, running version MAIN 6.02, has graphviz packages installed that are affected by a vulnerability: - Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of servic...

NewStart CGSL MAIN 6.02 : gnutls Multiple Vulnerabilities (NS-SA-2022-0097)

The remote NewStart CGSL host, running version MAIN 6.02, has gnutls packages installed that are affected by multiple vulnerabilities: - A flaw was found in gnutls. A use after free issue in client sending keyshare extension may lead to memory corruption and other consequences. CVE-2021-20231 - A...

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service.The vulnerability exists in multiple functions due to a memory leak in the sgv parser which allows an attacker to crash the application via malicious input...

Integer Overflow

libtiff.so is vulnerable to integer overflow. The vulnerability is due to memory corruption in tifgetimage.c, which allows the remote attacker to crash the application...

EulerOS 2.0 SP9 : deltarpm (EulerOS-SA-2022-2758)

According to the versions of the deltarpm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service application crash via an invalid file that causes a large dynamic...

CVE-2022-37290

CVE-2022-37290 affects GNOME Nautilus (GNOME Nautilus 42.2) and is triggered by pasting a crafted ZIP archive, causing a NULL pointer dereference and an application crash. The vulnerability is exploitable locally with low privileges and no user interaction required, per the CVSS data. Several con...

Denial Of Service (DoS)

github.com/shamaton/msgpack is vulnerable to denial of serviceDoS attacks. A remote attacker is able to cause an application crash in Unmarshal functionality, via a maliciously crafted input...

Denial Of Service (DoS)

389-ds-base is vulnerable to Denial Of Service DoS. The vulnerability exists when the content synchronization plugin is enabled, allowing an attacker crash the application through the null pointer dereference by providing a maliciously crafted query...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. An attacker can crash the application by providing a maliciously crafted input through the multiple protocols...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Optimizer component in the library, allowing attacker to cause an application crash through the multiple protocols...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Stored Procedure component in the library, allowing attacker to cause an application crash through the multiple protocols...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Options component in the library, allowing attacker to cause an application crash through the multiple protocols...