5315 matches found
CVE-2023-5184 Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver
Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers...
CVE-2023-5184 Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver
Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers...
matrix-hookshot injection vulnerability
Matrix is an ambitious new ecosystem for open federated instant messaging and VoIP. An injection vulnerability exists in matrix-hookshot 4.5.0 and prior versions, which can be exploited to break out of the vm2 sandbox in instances where conversion functions are enabled...
Important: GraphicsMagick
Issue Overview: Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format. CVE-2020-21679 In GraphicsMagick, a heap buffer overflow was found when parsing MIFF...
Medium: ruby
Issue Overview: A double-free vulnerability was found in Ruby. The issue occurs during Regexp compilation. This flaw allows an attacker to create a Regexp object with a crafted source string that could cause the same memory to be freed twice. CVE-2022-28738 A buffer overrun vulnerability was foun...
Accusoft ImageGear CreateDIBfromPict out-of-bounds write vulnerability
Talos Vulnerability Report TALOS-2023-1729 Accusoft ImageGear CreateDIBfromPict out-of-bounds write vulnerability September 25, 2023 CVE Number CVE-2023-23567 SUMMARY A heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality of Accusoft ImageGear 20.1. A specially...
[SECURITY] Fedora 38 Update: golang-github-xhit-str2duration-2.1.0-3.fc38
Convert string to duration in golang...
[SECURITY] Fedora 37 Update: golang-github-xhit-str2duration-2.1.0-3.fc37
Convert string to duration in golang...
[SECURITY] Fedora 39 Update: golang-github-xhit-str2duration-2.1.0-3.fc39
Convert string to duration in golang...
The vulnerability of the free_stream utility for converting files with the .fig and .fig2dev extensions involves a memory reclamation error, which allows an attacker to cause a service failure.
The vulnerability of the freestream function in the file conversion utility for files with the .fig and .fig2dev extensions is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the XStream Java library for converting objects to XML or JSON format is related to stack overflow conditions. This allows an attacker to cause a service failure.
The vulnerability of the XStream library for converting objects to XML or JSON format is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...
Conversion Manager 8.3.0 - For Citrix Hypervisor 8.2 Cumulative Update 1
Conversion Manager 8.3.0 - For Citrix Hypervisor 8.2 Cumulative Update 1 Who Should Install This Update? This Conversion Manager virtual appliance update is for customers who use the Conversion Manager feature of Citrix Hypervisor 8.2 CU1. It constitutes the following deliverable: File Name|...
The vulnerability of the GzipSource component in the Okio client HTTP library allows a attacker to cause a service failure.
The vulnerability of the GzipSource component in the Okio client HTTP library is related to the lack of a data type conversion mechanism. Exploiting this vulnerability allows an attacker to cause service failures remotely...
CVE-2023-36307
ZPLGFA 1.1.1 allows attackers to cause a panic because of an integer index out of range during a ConvertToGraphicField call via an image of zero width. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence...
PT-2023-25522 · Zplgfa · Zplgfa
Name of the Vulnerable Software and Affected Versions: ZPLGFA version 1.1.1 Description: The issue allows attackers to cause a panic due to an integer index out of range during a ConvertToGraphicField call via an image of zero width. It is unclear whether there are common use cases in which this...
WordPress WooCommerce Conversion Tracking Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)
Software WooCommerce Conversion Tracking Type Plugin Vulnerable versions = 2.0.10 Fixed in 2.0.11 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4ebb849878be Credits...
The vulnerability of the Mac OS operating system, related to type conversion errors, allows attackers to execute arbitrary code.
The vulnerability of the Mac OS is related to a type conversion error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
FreeRDP 缓冲区错误漏洞
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from insufficient data in the pSrc variable in the generalYUV444ToRGB8uP3AC4RBGRX function, which can be exploited by an attacker to...
Moderate: Red Hat Security Advisory: java-1.8.0-ibm security update
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
