3241 matches found
CVE-2016-10518
A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by sending a ping frame. The ping functionality by default responds with a pong frame and the previously given payload of the ping frame. This is exactly what you expect, but...
CVE-2016-10518
A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by sending a ping frame. The ping functionality by default responds with a pong frame and the previously given payload of the ping frame. This is exactly what you expect, but...
CVE-2016-10518
A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by sending a ping frame. The ping functionality by default responds with a pong frame and the previously given payload of the ping frame. This is exactly what you expect, but...
Joyent Node.js atob Denial of Service Vulnerability
Joyent Node.js is the United States Joyent a set of web applications built on top of Google V8 JavaScript engine platform. atob is one of the use of Buffer to simulate the browser ATOB functionality of the module . A security vulnerability exists in atob 2.0.3 and earlier on Joyent Node.js 4.x an...
CVE-2018-3745
atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below...
CVE-2018-3745
atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below...
Input validation
atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below...
CVE-2018-3745
atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below...
PT-2018-16167 · Node.Js · Atob
Name of the Vulnerable Software and Affected Versions: atob versions 2.0.3 and earlier Description: The issue arises when the atob function allocates uninitialized Buffers upon receiving a number as input on Node.js versions 4.x and below. Recommendations: Update to version 2.1.0 or later...
DEBIAN-CVE-2018-11506
The srdoioctl function in drivers/scsi/srioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact because sense buffers have different sizes at the CDROM layer and the SCSI layer, as...
CVE-2018-11506
The srdoioctl function in drivers/scsi/srioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact because sense buffers have different sizes at the CDROM layer and the SCSI layer, as...
Information Disclosure
libtiff.so is vulnerable to information disclosure attacks. The vulnerability exists due to the possibility of accessing uninitialized buffers in TIFFReadBufferSetup of libtiff/tifread.c...
Out-of-bounds Read
Overview Versions of base64-url before 2.0.0 are vulnerable to out-of-bounds read as it allocates uninitialized Buffers when number is passed in input. Recommendation Update to version 2.0.0 or later. References - HackerOne Report - GitHub Advisory...
Out-of-bounds Read
Overview Versions of base64url before 3.0.0 are vulnerable to to out-of-bounds reads as it allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below. Recommendation Update to version 3.0.0 or later. References - HackerOne Report - PR 25 - GitHub Advisory...
Out-of-bounds Read
Overview Versions of byte before 1.4.1 allocate uninitialized buffers and read data from them past the initialized length Recommendation Update to version 1.4.1 or later. References - HackerOne Report - PR 3 - GitHub Advisory...
Out-of-bounds Read
Overview Versions of atob before 2.1.0 uninitialized Buffers when number is passed in input on Node.js 4.x and below. Recommendation Update to version 2.1.0 or later. References - HackerOne Report - GitHub Advisory...
Out-of-bounds Read
Overview Versions of concat-with-sourcemaps before 1.0.6 allocates uninitialized Buffers when a number is passed as a separator. Recommendation Update to version 1.0.6 or later. References - HackerOne Report - Source Reference - GitHub Advisory...
Information Disclosure
byte is vulnerable to information disclosure through uninitialized buffers. The vulnerability exists due to the usage of Buffer which does not validate the memory is initialized, allowing information disclosure attacks to occur...
The vulnerability of the Qualcomm Security Feature component in the Android operating system allows a hacker to trigger buffer overflows.
The vulnerability of the Qualcomm Security Feature component of the Android operating system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to trigger a buffer overflow...
The vulnerability of the Android wireless network driver from the CAF repository, which allows a hacker to execute arbitrary code.
The vulnerability of the Android wireless network driver from the CAF repository allows for arbitrary code to be executed outside of the buffer in memory. Exploiting this vulnerability could enable a malicious actor to execute arbitrary code remotely...