3965 matches found
openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes()
A flaw was found in OpenJPEG’s encoder in the opjdwtcalcexplicitstepsizes function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability...
python-pygments: ReDoS in multiple lexers
A denial of service attack was discovered against pygments. Some of the regular expressions used to tokenise source code for highlighting have exponential complexity. A specially crafted input file could cause pygments to take effectively infinite time to parse, consuming CPU resources and denyin...
PT-2021-5079 · Microsoft · Windows Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Hyper-V component of the Windows operating system. Exploitation of this issue may allow a remote attacker to cau...
PT-2021-23606 · Busybox +3 · Busybox +3
Name of the Vulnerable Software and Affected Versions: Busybox affected versions not specified Description: The issue arises from an attacker-controlled pointer free in Busybox's hush applet, leading to a denial of service and possible code execution when a crafted shell command is processed. Thi...
PT-2021-23605 · Busybox +3 · Busybox +3
Name of the Vulnerable Software and Affected Versions: Busybox affected versions not specified Description: A NULL pointer dereference in Busybox's hush applet can lead to denial of service when processing a crafted shell command. This issue arises due to missing validation after a x03 delimiter...
USN-5133-1 A security issue was fixed in ICU
It was discovered that ICU contains a use after free issue. An attacker could use this issue to cause a denial of service with crafted input...
USN-5133-1: ICU vulnerability
It was discovered that ICU contains a use after free issue. An attacker could use this issue to cause a denial of service with crafted input...
Cisco Firepower Threat Defense 操作系统命令注入漏洞
Cisco Firepower Threat Defense FTD is a suite of unified software from Cisco that provides next-generation firewall services. Cisco Firepower Threat Defense Software suffers from operating system command injection vulnerabilities that stem from insufficient validation of user-supplied command...
CVE-2021-3802
A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability...
EulerOS 2.0 SP3 : openjpeg (EulerOS-SA-2021-2601)
According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in OpenJPEG's encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during...
CLSA-2021-1634925719 Fixed CVEs in vim: CVE-2021-3778, CVE-2021-3796
CVE-2021-3778: crafted input leads to heap-based buffer overflow - CVE-2021-3796: crafted input leads to use-after-free...
Pulse Secure Pulse Connect Secure 资源管理错误漏洞
Pulse Secure Pulse Connect Secure aka PCS, formerly known as Juniper Junos Pulse is an SSL VPN solution from Pulse Secure, Inc. in the United States. Pulse Connect Secure suffers from a resource management error vulnerability that stems from insufficient validation of user-supplied input. An...
CVE-2021-1529
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation by the system CLI. An attacker could exploit this vulnerability by authenticating t...
Cisco IOS XE SD-WAN Software Command Injection Vulnerability
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation by the system CLI. An attacker could exploit this vulnerability by authenticating t...
Fix of CVE: CVE-2021-3778, CVE-2021-3796
CVE-2021-3778: crafted input leads to heap-based buffer overflow - CVE-2021-3796: crafted input leads to use-after-free...
CLSA-2021-1634745118 Fix of CVE: CVE-2021-3778, CVE-2021-3796
CVE-2021-3778: crafted input leads to heap-based buffer overflow - CVE-2021-3796: crafted input leads to use-after-free...
GPAC buffer overflow vulnerability (CNVD-2021-84264)
GPAC is an open source multimedia framework. GPAC suffers from a buffer overflow vulnerability that stems from an issue discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow that can be exploited by an attacker to cause a denial of service DOS via crafte...
Gpac MP4Box memory leak vulnerability
Gpac MP4Box is a multimedia packager. It is mainly used to process ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from AVI, MPG, MKV, MPEG-2 TS and other container files.Gpac MP4Box suffers from a memory leak vulnerability that can be exploited by attackers to cause a...
