246 matches found
CVE-2014-125012 FFmpeg dxtroy.c integer coercion
A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is an unknown function of the file libavcodec/dxtroy.c. The manipulation leads to integer coercion error. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue...
CVE-2014-125012
CVE-2014-125012 affects FFmpeg 2.0, specifically an issue in libavcodec/dxtroy.c. The vulnerability stems from an integer coercion error in an unknown function, which can be triggered remotely. The description consistently states that the issue allows remote launch of an attack and recommends app...
CVE-2014-125012
A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is an unknown function of the file libavcodec/dxtroy.c. The manipulation leads to integer coercion error. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue...
CVE-2014-125011 FFmpeg ansi.c decode_frame integer coercion
A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function decodeframe of the file libavcodec/ansi.c. The manipulation leads to integer coercion error. The attack can be launched remotely. It is recommended to apply a patch to fix...
CVE-2014-125011
CVE-2014-125011 affects FFmpeg 2.0, specifically the decode_frame function in libavcodec/ansi.c, where an integer coercion error can be exploited remotely. Verified sources (NVD entry, Red Hat, Debian, Ubuntu OSV, CVE.org, etc.) consistently describe the vulnerability as a memory corruption/integ...
CVE-2014-125011
A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function decodeframe of the file libavcodec/ansi.c. The manipulation leads to integer coercion error. The attack can be launched remotely. It is recommended to apply a patch to fix...
Amazon Linux AMI : kernel (ALAS-2022-1591)
The version of kernel installed on the remote host is prior to 4.14.281-144.502. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1591 advisory. A memory leak flaw was found in the Linux kernel's DMA subsystem, in the way a user calls DMAFROMDEVICE. This flaw...
Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-026 (ALASKERNEL-5.4-2022-026)
The version of kernel installed on the remote host is prior to 5.4.196-108.356. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-026 advisory. In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO CVE-2021-47435 A memory leak flaw was found in the Linux kernel's DMA subsystem, in the way a user calls DMAFROMDEVICE. This flaw allows a local user to read...
GHSA-R9JF-HF9X-7HRV Exposure of Sensitive Information to an Unauthorized Actor Jenkins Script Security Plugin
In Jenkins Script Security Plugin version 1.36 and earlier, users with the ability to configure sandboxed Groovy scripts are able to use a type coercion feature in Groovy to create new File objects from strings. This allowed reading arbitrary files on the Jenkins master file system. Such a type...
Exposure of Sensitive Information to an Unauthorized Actor Jenkins Script Security Plugin
In Jenkins Script Security Plugin version 1.36 and earlier, users with the ability to configure sandboxed Groovy scripts are able to use a type coercion feature in Groovy to create new File objects from strings. This allowed reading arbitrary files on the Jenkins master file system. Such a type...
GHSA-CR3Q-658V-QV3X OpenCart-Overclocked Cross-site Scripting Vulnerability
Reflected Cross-Site Scripting XSS may allow an attacker to execute JavaScript code in the context of the victim’s browser. This may lead to unauthorised actions being performed, unauthorised access to data, stealing of session information, denial of service, etc. An attacker needs to coerce a us...
GHSA-H7RX-R733-7X7R Sandbox bypass in Jenkins Script Security Plugin sandbox bypass
Script Security Plugin did not apply sandboxing restrictions to constructor invocations via positional arguments list, super constructor invocations, method references, and type coercion expressions. This could be used to invoke arbitrary constructors and methods, bypassing sandbox protection...
Sandbox bypass in Jenkins Script Security Plugin sandbox bypass
Script Security Plugin did not apply sandboxing restrictions to constructor invocations via positional arguments list, super constructor invocations, method references, and type coercion expressions. This could be used to invoke arbitrary constructors and methods, bypassing sandbox protection...
CVE-2021-32996
The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is required...
CVE-2021-32996
The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is required...
Design/Logic Flaw
The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is required...
CVE-2021-32996
The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is required...
CVE-2021-32996
CVE-2021-32996 affects FANUC R-30iA/R-30iB family controllers (and related mate/Plus variants) as documented by ICS-TIP and CISA: vulnerable component is integer coercion (CWE-192) that can crash the device, with a related out-of-bounds write (CWE-787) potentially enabling remote code execution. ...
