CVE-2023-5184

Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers...

CVE-2023-5184 Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver

Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers...

CVE-2023-5184

Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers...

CVE-2023-5184 Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver

Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers...

matrix-hookshot injection vulnerability

Matrix is an ambitious new ecosystem for open federated instant messaging and VoIP. An injection vulnerability exists in matrix-hookshot 4.5.0 and prior versions, which can be exploited to break out of the vm2 sandbox in instances where conversion functions are enabled...

CVE-2023-5184: Buffer Copy without Checking Size of Input

Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers...

Medium: ruby

Issue Overview: A double-free vulnerability was found in Ruby. The issue occurs during Regexp compilation. This flaw allows an attacker to create a Regexp object with a crafted source string that could cause the same memory to be freed twice. CVE-2022-28738 A buffer overrun vulnerability was foun...

Important: GraphicsMagick

Issue Overview: Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format. CVE-2020-21679 In GraphicsMagick, a heap buffer overflow was found when parsing MIFF...

Accusoft ImageGear CreateDIBfromPict out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2023-1729 Accusoft ImageGear CreateDIBfromPict out-of-bounds write vulnerability September 25, 2023 CVE Number CVE-2023-23567 SUMMARY A heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality of Accusoft ImageGear 20.1. A specially...

[SECURITY] Fedora 38 Update: golang-github-xhit-str2duration-2.1.0-3.fc38

Convert string to duration in golang...

[SECURITY] Fedora 37 Update: golang-github-xhit-str2duration-2.1.0-3.fc37

Convert string to duration in golang...

[SECURITY] Fedora 39 Update: golang-github-xhit-str2duration-2.1.0-3.fc39

Convert string to duration in golang...

free_stream Memory Reclamation DoS

The vulnerability of the freestream function in the file conversion utility for files with the .fig and .fig2dev extensions is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Conversion Manager 8.3.0 - For Citrix Hypervisor 8.2 Cumulative Update 1

Conversion Manager 8.3.0 - For Citrix Hypervisor 8.2 Cumulative Update 1 Who Should Install This Update? This Conversion Manager virtual appliance update is for customers who use the Conversion Manager feature of Citrix Hypervisor 8.2 CU1. It constitutes the following deliverable: File Name|...

XStream Stack Overflow DoS

The vulnerability of the XStream library for converting objects to XML or JSON format is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

GzipSource Component Okio HTTP Library DoS

The vulnerability of the GzipSource component in the Okio client HTTP library is related to the lack of a data type conversion mechanism. Exploiting this vulnerability allows an attacker to cause service failures remotely...

CVE-2023-36307

ZPLGFA 1.1.1 allows attackers to cause a panic because of an integer index out of range during a ConvertToGraphicField call via an image of zero width. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence...

WordPress WooCommerce Conversion Tracking Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software WooCommerce Conversion Tracking Type Plugin Vulnerable versions = 2.0.10 Fixed in 2.0.11 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4ebb849878be Credits...

Mac OS Type Conversion Code Execution

The vulnerability of the Mac OS is related to a type conversion error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2023-25522 · Zplgfa · Zplgfa

Name of the Vulnerable Software and Affected Versions: ZPLGFA version 1.1.1 Description: The issue allows attackers to cause a panic due to an integer index out of range during a ConvertToGraphicField call via an image of zero width. It is unclear whether there are common use cases in which this...