mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE)

MariaDB through 10.5.9 allows an application crash in findfieldintables and findorderinlist via an unused common table expression CTE...

Denial Of Service (DoS)

openzeppelin is vulnerable to denial of service DoS attacks. A malicious user is able to use a target contract of an EIP-165 supportsInterface query to cause unbounded resource consumption by returning a lot of data, causing the application to crash...

CVE-2022-2522

A heap buffer overflow vulnerability was found in vim's inscomplinfercasegettext function of the src/insexpand.c file. This flaw occurs when vim tries to access uninitialized memory when completing a long line. This flaw allows an attacker to trick a user into opening a specially crafted file,...

mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements

MariaDB through 10.5.13 allows a hamaria::extra application crash via certain SELECT statements...

mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr

MariaDB through 10.5.9 allows an application crash in subselectpostjoinaggr for a NULL value of aggr...

RHEL 7 : rh-mariadb105-galera and rh-mariadb105-mariadb (RHSA-2022:5759)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5759 advisory. MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. The...

Denial Of Service (DoS)

go is vulnerable to Denial Of Service DoS. The vulnerability exists in Glob function in match.go due to stack exhaustion because having a large number of path separators in Glob which allows an attacker to cause an application crash...

Denial Of Service (DoS)

go is vulnerable to denial of service. The vulnerability exists in unmarshalAttr function in read.go due to improper encoding which allows an attacker to cause a stack exhaustion in Unmarshal which leads to an application crash...

Denial Of Service (DoS)

go is vulnerable to Denial Of Service DoS. The vulnerable exists in globWithLimit and Glob functions in glob.go because the the number of path separators allowed by an input to Glob is not separated which allows an attacker to cause an application crash...

Denial Of Service (DoS)

libqpdf.so is vulnerable to denial of service. The vulnerability exists in the processXRefStream function in qpdf.cc due to improper configuration of buffer size which allows an attacker to cause an application crash via a crafted pdf file...

Heap-Buffer Overflow

lua5.4 is vulnerable to heap-buffer overflow. The vulnerability exists in the component luaGrunerror when a recursive error occurs which allows an attacker to cause an application crash...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. The vulnerability exists in dscompress.cc because of the deadlock via the component which allows an attacker to cause an application crash...

Denial Of Service (DoS)

sqlite3 is vulnerable to Denial Of Service DoS. The vulnerability exists because the whereKeyStats routine is unable to cope with row-value comparisons against the primary key index of a WITHOUT ROWID table which allows an attacker to cause an application crash...

Denial Of Service (DoS)

go is vulnerable to denial of service. The vulnerability exists in Skip function in read.go due to a stack exhaustion in decoder.Skip which allows an attacker to cause an application crash...

Denial Of Service (DoS)

go is vulnerable to Denial Of Service DoS. The vulnerability exists in functions in parser.go because of a stack exhaustion which allows an attacker to cause an application crash...

Denial Of Service (DoS)

file-type is vulnerable to denial of service. The vulnerability exists in the FileTypeParser function in core.js due to a lack of input sanitization in the file type detector which allows an attacker to cause an application crash by sending mkv file...

CVE-2022-34266

LibTIFF (libtiff) is affected by CVE-2022-34266 and related CVEs in the same family. CVE-2022-34266 arises when processing a crafted TIFF file: an invalid range passed to memset() in TIFFFetchStripThing() (tif_dirread.c) can cause a segfault after using an uninitialized resource, leading to a cra...

Denial Of Service (DoS)

github.com/cilium/cilium is vulnerable to denial of service attacks. The vulnerability exists due to improper configurations of ipv6 rules in the iptables.go which allows a malicious user to bypass the host policies and cause an application crash...

Denial Of Service (DoS)

openzeppelincairocontracts is vulnerable to denial of service. The vulnerability exists because the account signature implementation is not properly handled which renders unusable account contracts in live networks causing an application crash...

CVE-2022-23745

A potential memory corruption issue was found in Capsule Workspace Android app running on GrapheneOS. This could result in application crashing but could not be used to gather any sensitive information...