35913 matches found
com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream
A flaw was found in the XStream library. A remote attacker may trigger a denial of service by manipulating the processed input stream when XStream is configured to use the BinaryStreamDriver. This issue may lead to the termination of the application...
Finding vulnerabilities in ClipSp, the driver at the core of Windows’ Client License Platform
By Philippe Laulheret ClipSP clipsp.sys is a Windows driver used to implement client licensing and system policies on Windows 10 and 11 systems. Cisco Talos researchers have discovered eight vulnerabilities related to clipsp.sys ranging from signature bypass to elevation of privileges and sandbox...
Rclone Installed (Mac OS X)
Binary data rclonemacosinstalled.nbin...
JetBrains WebStorm Installed (Linux)
Binary data jetbrainswebstormnixinstalled.nbin...
Binary Vulnerability in Damon New Cloud Cache Database of Wuhan Damon Database Co.
Damon New Cloud Cache Database DMCDM is a Key-Value database that is deeply compatible with the native Redis protocol. A binary vulnerability exists in the Damon New Cloud Cache Database DMCDM of Wuhan Damon Database Co. which can be exploited by attackers to cause a denial of service...
Rockwell Automation FactoryTalk Updater Installed (Windows)
Binary data rockwellfactorytalkupdaterwininstalled.nbin...
needrestart Race Condition Privilege Escalation
The vulnerability of the needrestart tool is related to concurrent access to resources race condition. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the root user by replacing the file usr/bin/python with a malicious executable file...
DEBIAN-CVE-2024-53429
Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...
UBUNTU-CVE-2024-53429
Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...
Open62541 security vulnerabilities
Open62541 is an open source implementation of OPC UA OPC Unified Architecture by Open62541 Open Source. A security vulnerability exists in Open62541 version 1.4.6, which stems from an assertion failure in fuzzbinarydecode that causes a crash...
PT-2024-35737
Name of the Vulnerable Software and Affected Versions Open62541 version 1.4.6 Description The issue is related to an assertion failure in the fuzz binary decode function, which can cause a crash. Recommendations For Open62541 version 1.4.6, consider disabling the fuzz binary decode function as a...
Apple iOS < 18.1.1 Multiple Vulnerabilities (121752)
Binary data appleios1811check.nbin...
JetBrains WebStorm Installed (Mac OS X)
Binary data jetbrainswebstormmacosinstalled.nbin...
CVE-2024-53429
Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...
Arbitrary File Upload
Overview django-filer is an A file management application for django that makes handling of files and images a breeze. Affected versions of this package are vulnerable to Arbitrary File Upload via the file upload mechanism allowing, by default, the upload of binary or unknown file types...
Grafana Labs SQL expressions allowing for RCE (CVE-2024-9264)
The version of Grafana Labs installed on the remote host is affected by a vulnerability as referenced in the CVE-2024-9264 advisory. - The SQL Expressions experimental feature of Grafana allows for the evaluation of 'duckdb' queries containing user input. These queries are insufficiently sanitize...
Apache Tomcat < 11.0.1 Vulnerability
Binary data 701490.pasl...
MongoDB Zero Byte Handling
The vulnerability of the MongoDB database management system server is related to improper elimination of zero bytes. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures by sending specially crafted queries...