5071 matches found
USN-5723-1 vim vulnerabilities
It was discovered that Vim could be made to crash when searching specially crafted patterns. An attacker could possibly use this to crash Vim and cause denial of service. CVE-2022-1674 It was discovered that there existed a NULL pointer dereference in Vim. An attacker could possibly use this to...
EulerOS 2.0 SP9 : bind (EulerOS-SA-2022-2718)
According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible ...
TP Link Wr940N Routers Buffer Overflow (CVE-2017-13772)
A buffer overflow vulnerability exists in TP Link Wr940N Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
ffmpeg -- multiple vulnerabilities
NVD reports: An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointer dereference, impacting availability. A null pointer dereference issue was discovered in 'FFmpeg' in decodemainheader...
Denial Of Service (DoS)
rh-mysql80-mysql is vulnerable to denial of service. A low privileged attacker with network access is able to compromise MySQL server via multiple protocols resulting in unauthorized ability to cause hangs or frequently repeatable crashes...
Denial Of Service (DoS)
rh-mysql80-mysql is vulnerable to denial of service DoS attacks. A low privileged attacker with network access is able to compromise MySQL server via multiple protocols resulting in unauthorized ability to cause hangs or frequently repeatable crashes...
CVE-2022-39386 fastify-websocket vulnerable to uncaught exception via crash on malformed packet
@fastify/websocket provides WebSocket support for Fastify. Any application using @fastify/websocket could crash if a specific, malformed packet is sent. All versions of fastify-websocket are also impacted. That module is deprecated, so it will not be patched. This has been patched in version 7.1....
USN-5716-1 sqlite3 vulnerability
It was discovered that SQLite incorrectly handled certain long string arguments. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code...
OpenSSL Buffer Overflow (CVE-2022-3786)
A buffer overflow vulnerability exists in OpenSSL. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
OPENSUSE-SU-2022:10182-1 Security update for opera
This update for opera fixes the following issues: Update to 92.0.4561.21 - CHR-9037 Update chromium on desktop-stable-106-4561 to 106.0.5249.119 - DNA-102295 Missing GX.games section in settings - DNA-102308 Presubmit errors - DNA-102329 Consent flow clicking on 'Customize settings' doesn't resiz...
OPENSUSE-SU-2022:10181-1 Security update for opera
This update for opera fixes the following issues: Update to 92.0.4561.21 - CHR-9037 Update chromium on desktop-stable-106-4561 to 106.0.5249.119 - DNA-102295 Missing GX.games section in settings - DNA-102308 Presubmit errors - DNA-102329 Consent flow clicking on 'Customize settings' doesn't resiz...
GHSA-HFF2-X2J9-GXGV Keylime: unhandled exceptions could lead to invalid attestation states
Impact This vulnerability creates a false sense of security for keylime users -- i.e. a user could query keylime and conclude that a parcitular node/agent is correctly attested, while attestations are not in fact taking place. Short explanation: the keylime verifier creates periodic reports on th...
Cloudflare OctoRPKI 安全漏洞
Cloudflare OctoRPKI is an RPKI toolkit for the Cloudflare platform from Cloudflare, Inc. in the United States. A security vulnerability exists in Cloudflare OctoRPKI. An attacker exploiting this vulnerability could create an overly long CA chain, causing OctoRPKI to exceed its maximum iteration...
Oracle Linux 7 : firefox (ELSA-2022-6711)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-6711 advisory. - Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315 - Added fix for mozbz1348168/CVE-2017-5428 Tenable has extracted the...
mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2021)
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
Ubuntu: Security Advisory (USN-5694-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the kernel-level driver nvlddmkm.sys from NVIDIA’s graphics processing unit software products such as GeForce, Quadro, NVS, and Tesla for Windows operating systems allows a malicious actor to cause system failures, gain unauthorized access to protected information, or enhance their privileges.
The vulnerability of the kernel-level driver nvlddmkm.sys from NVIDIA’s graphics processing units, including GeForce, Quadro, NVS, and Tesla, for Windows operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause syst...
The vulnerability of the kernel-level driver nvlddmkm.sys from NVIDIA’s graphics processing units, including GeForce, Quadro, NVS, and Tesla, for Windows operating systems, allows attackers to cause system failures or gain unauthorized access to protected information.
The vulnerability of the kernel mode driver nvlddmkm.sys of NVIDIA’s graphics processing unit software products such as GeForce, Quadro, NVS, and Tesla for Windows operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to caus...
parse-server crashes when receiving file download request with invalid byte range
Impact Parse Server crashes when a file download request is received with an invalid byte range. Patches Improved parsing of the range parameter to properly handle invalid range requests. Workarounds None References - GHSA-h423-w6qv-2wj3...
GHSA-H423-W6QV-2WJ3 parse-server crashes when receiving file download request with invalid byte range
Impact Parse Server crashes when a file download request is received with an invalid byte range. Patches Improved parsing of the range parameter to properly handle invalid range requests. Workarounds None References - GHSA-h423-w6qv-2wj3...