6763 matches found
ROS-20251216-7313
A vulnerability in the V8 component of Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code...
Broadcom bnxt rx_agg_cmp Structure DoS
The vulnerability of the rxaggcmp structure definition in the drivers/net/ethernet/broadcom/bnxt/bnxt.h file – the driver for supporting Ethernet network adapters in Linux’s kernel – is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to cause a system...
Eclipse OMR 缓冲区错误漏洞
Eclipse OMR is an open source toolkit from the Eclipse Foundation for building language runtime environments. A buffer error vulnerability exists in Eclipse OMR versions prior to 0.8.0, which stems from the incorrect handling of NUL characters during the character conversion process, and may resu...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : libpng vulnerabilities (USN-7924-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7924-1 advisory. It was discovered that libpng incorrectly handled memory when processing certain PNG file...
CVE-2025-67506
PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation. Versions prior to 0.1.0-beta expose POST /api/v1/record/buffer/convert through missing authentication. The endpoint accepts a file upload and converts it to PDF via LibreOffice by uploading payload...
Microsoft Office Data Type Conversion Code Execution
The vulnerability of the Microsoft Office package is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2023-53796
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix information leak in f2fsmoveinlinedirents When converting an inline directory to a regular one, f2fs is leaking uninitialized memory to disk because i...
EUVD-2025-202360
PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation. Versions prior to 0.1.0-beta expose POST /api/v1/record/buffer/convert through missing authentication. The endpoint accepts a file upload and converts it to PDF via LibreOffice by uploading payload...
CVE-2025-67506 PipesHub Vulnerable to Path Traversal through Unauthenticated Arbitrary File Upload
PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation. Versions prior to 0.1.0-beta expose POST /api/v1/record/buffer/convert through missing authentication. The endpoint accepts a file upload and converts it to PDF via LibreOffice by uploading payload...
CVE-2025-67506 PipesHub Vulnerable to Path Traversal through Unauthenticated Arbitrary File Upload
PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation. Versions prior to 0.1.0-beta expose POST /api/v1/record/buffer/convert through missing authentication. The endpoint accepts a file upload and converts it to PDF via LibreOffice by uploading payload...
CVE-2023-53796 f2fs: fix information leak in f2fs_move_inline_dirents()
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix information leak in f2fsmoveinlinedirents When converting an inline directory to a regular one, f2fs is leaking uninitialized memory to disk because it doesn't initialize the entire directory block. Fix this by...
CVE-2023-53796
The CVE-2023-53796 issue concerns the Linux kernel f2fs: when converting an inline directory to a regular one, f2fs leaks uninitialized memory to disk because the entire directory block isn’t zero-initialized. This security flaw was introduced by commit 4ec17d688d74 and was uncovered by xfstest g...
CVE-2025-67564: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in alekv Pixel Manager for WooCommerce woocommerce-google-adwords-conversion-tracking-tag allows Retrieve Embedded Sensitive Data.This issue affects Pixel Manager for WooCommerce: from n/a through = 1.51.1...
Google Chrome Error Type Conversion Vulnerability
Google Chrome is a web browser developed by Google Inc. to provide users with a fast, secure and customizable web browsing experience. Google Chrome suffers from a mis-typed conversion vulnerability that originates from the presence of a mis-typed conversion in the loader, which can be exploited ...
kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in void convertARGBToARGB32PM_avx2<true>
Detailed Report: https://oss-fuzz.com/testcase?key=6072309334212608 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void convertARGBToARGB32PMav...
Astral-Tokio-Tar Code Execution
The vulnerability of the astral-tokio-tar library for reading/writing tar archives is related to errors in data type conversion. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Google Chrome Loader DoS
The vulnerability of the Loader component in Google Chrome browser is related to incorrect data type conversion. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
kernel: HID: core: Harden s32ton() against conversion to 0 bits
In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity to a 0-bit quantity. Ideally this should...
[SECURITY] Fedora 43 Update: sigil-2.6.2-3.fc43
Sigil is a multi-platform WYSIWYG ebook editor. It is designed to edit books in ePub format. Now what does it have to offer... Full Unicode support: everything you see in Sigil is in UTF-16 Full EPUB spec support WYSIWYG editing Multiple Views: Book View, Code View and Split View Metadata editor...