Use-After-Free

chromium is vulnerable to use-after-free. The vulnerability exists in in Interest groups which allows an attacker to cause a memory corruption and there by an application crash...

Use-After-Free

vim is vulnerable to use after free. The vulnerability exists in utfptr2char function in mbyte.c because the freed memory is used when searching for pattern in path which allows an attacker to cause a memory corruption causing an application crash...

Heap-Based Buffer Over-read

libdwarf.so is vulnerable to heap-based buffer over-read. The vulnerability exists in dwarfglobalformrefb function in dwarfform.c because the checks are not properly handled before reading the 8 bytes of a DWFORMrefsig8 which leads to an application crash...

Use-After-Free

busybox is vulnerable to use-after-free. The vulnerability exists in copyvar which allows an attacker to send crafted awk pattern crashing the application...

Denial Of Service (DoS)

squid is vulnerable to denial of service attacks. The vulnerability exists via Gopher Processing component which allows an attacker to cause an application crash...

Deserialization Of Untrusted Data

nvflare is vulnerable to deserialization of untrusted data. The vulnerability exists because the CA credentials are transported via pickle and not properly deserialized which allows an attacker to execute codes and cause an application crash...

Deserialization Of Untrusted Data

nvflare is vulnerable to deserialization of untrusted data. The vulnerability exists because the yaml files are not loaded safely which allows an attacker to execute codes and cause an application crash...

CVE-2022-31009 DoS vulnerability: Invalid Accent Colors

wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partners may render the iOS Wire Client partially unusable by causing it to crash multiple times on launch. These invalid accent colors can be used by and sent between Wire users. The...

Denial Of Service (DoS)

opcfoundation.netstandard.opc.ua is vulnerable to denial of service. The vulnerability exists due to the lack of maximum chunk count check-in requests which allows malicious clients to cause an application crash...

Denial Of Service (DoS)

eap7 is vulnerable to denial of service. The vulnerability exists due to a flaw that was found in Undertow which allows an attacker to cause an application crash...

Security Bulletin: Rational Team Concert (RTC) and IBM Engineering Workflow Management (EWM) OpenSSL vulnerability CVE-2021-4044

Summary There is a vulnerability CVE-2021-4044 which affects Rational Team Concert RTC and IBM Engineering Workflow Management EWM. Vulnerability Details CVEID:CVE-2021-4044 DESCRIPTION: OpenSSL could allow a remote attacker to bypass security restrictions, caused by invalid handling of...

Denial Of Service (DoS)

@discordjs/opus is vulnerable to denial of service. An attacker is able cause an application crash via sending crafted requests through an encoder with zero channels, or a non-initialized buffer...

Denial Of Service (DoS)

fast-string-search is vulnerable to denial of service. The vulnerability exists due to incorrect computations for non-string inputs which allows an attacker to gain read access from non-permitted locations and cause an application crash...

Regular Expression Denial Of Service (ReDoS)

pythonldap is vulnerable to regular expression denial of service. The vulnerability exists in tokenizer.py due to insufficient regular expression in the schema tokenizer which allows an attacker to send a crafted regex input causing an application crash...

Adobe Illustrator input validation error vulnerability

Adobe Illustrator, a vector-based image creation software from Adobe, is vulnerable to an input validation error. The vulnerability stems from improper input validation and could be exploited by an attacker to execute arbitrary code on the system or cause the application to crash...

Adobe Illustrator out-of-bounds write vulnerability (CNVD-2022-76632)

An out-of-bounds write vulnerability exists in Adobe Illustrator, a vector-based image creation software from Adobe. The vulnerability stems from a boundary error when handling untrusted input. An attacker could exploit the vulnerability to execute arbitrary code on the system or cause the...

NULL Pointer Dereference in function _appendStartNsEvents

Description NULL Pointer Dereference in function vimappendStartNsEvents at src/lxml/iterparse.pxi:435 allows attackers to cause a denial of service or application crash. Proof of Concept python from io import StringIO from lxml import etree firstinput = """ """ secondinput = """ """ def...

Denial Of Service (DoS)

github.com/apple/swift-corelibs-foundation is vulnerable to denial of service. The vulnerability exists in unwrapFixedWidthInteger function in JSONDecoder.swift because the decoder uses mismatches accessors on NSNumber for numeric conversion which causes an application crash...

Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2022-1902)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : mariadb (EulerOS-SA-2022-1902)

According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY. CVE-2021-46657 Note that Tenable...