Denial Of Service (DoS)

github.com/containrrr/shoutrrr is vulnerable to denial of service. The vulnerability exists in PartitionMessage function in partitionmessage.go because the length of the message is not properly handled which allows an attacker to send large number of characters in a message that causes an...

Regular Expression Denial Of Service (ReDoS)

terser is vulnerable to regular expression denial of service. The vulnerability exists in index.js and evaluate.js because regular expressions used are not properly handled which allows an attacker to send crafted requests which causes an application crash...

Denial Of Service (DoS)

openzeppelincairocontracts is vulnerable to denial of service. The vulnerability exists in execute in library.cairo due to an incorrect reference in the ecdsaptr pointer, which allows an attacker to cause an application crash...

Denial Of Service (DoS)

crypto/rand in github.com/golang/go is vulnerable to denial of service. The vulnerability exists when passing a buffer larger than 1 32 - 1 bytes which allows an attacker to cause an application crash...

Denial Of Service (DoS)

wolfssl is vulnerable to denial of service. The vulnerability exists due to an implementation error in DTLS, allowing an attacker to crash the application...

Adobe InCopy Font Parsing Heap Overflow Vulnerability

Adobe Incopy 2021 is a powerful document article editing software. A heap overflow vulnerability exists in Adobe InCopy Font parsing, which can be exploited by a remote attacker to submit a special file request and trick the user into parsing it, which can crash the application or execute arbitra...

CVE-2022-32323

A buffer overflow flaw was found in the autotrace package. This flaw allows an attacker to trick the user into opening a maliciously crafted BMP image, triggering arbitrary code execution or causing the application to crash...

Regular Expression Denial Of Service (ReDoS)

tapestry-http is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the PATTERN attribute in the ContentType function of ContentType.java, allowing an attacker to cause an application crash through the maliciously crafted conten...

CVE-2022-2343

A heap-based buffer overflow was found in Vim in the inscompladd function in the insexpand.c file. This issue occurs due to a read past the end of a buffer when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into...

CVE-2022-35171

When a user opens manipulated JPEG 2000 .jp2, jp2k.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant...

Format string

When a user opens manipulated JPEG 2000 .jp2, jp2k.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant...

CVE-2022-35171

When a user opens manipulated JPEG 2000 .jp2, jp2k.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant...

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as stand-alone executable programs and ActiveX spaces. An input validation error...

Denial Of Service (DoS)

github.com/kubeedge/kubeedge is vulnerable to denial of service. The vulnerability exists in ws.go because the length of the response that is being read into memory is not properly handled which allows an attacker to send requests that return large responses causing a memory exhaustion which then...

Denial Of Service (DoS)

Jetty-IO is vulnerable to denial of service. The vulnerability exists because the buffer utilization of SslConnection is not properly handled which allows an attacker to cause a memory leak leading to an application crash...

Denial Of Service (DoS)

HTTP2 Server is vulnerable to Denial Of Service DoS. The vulnerability exists in onRequest function in HttpChannelOverHTTP2.java due to improper error handling which allows an attacker to cause an application crash...

Denial Of Service (DoS)

mujs is vulnerable to denial of service. The vulnerability exists in regexp.c because of unlimited recursion which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

github.com/ipld/go-car is vulnerable to denial of service. The vulnerability exists in LdRead function in util.go because the decoding of CAR data is not properly handled which leads to an excessive memory usage causing an application crash...

CVE-2022-2304

A stack-based buffer overflow vulnerability was found in Vim's spelldumpcompl function of the src/spell.c file. This issue occurs because the spell dump goes beyond the end of an array when crafted input is processed. This flaw allows an attacker to trick a user into opening a specially crafted...

Denial Of Service (DoS)

lxml is vulnerable to denial of service attacks. The vulnerability exists through a null pointer dereference in appendStartNsEvents function of iterparse.pxi when incorrect parser input occurs together with usages of iterwalk on trees generated by the same parser which allows an attacker to cause...