PT-2023-26678 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: Jeecg-boot versions 3.5.0 and earlier Description: The issue allows a local attacker to cause a denial of service via the functions Benchmark, PG Sleep, DBMS Lock.Sleep, Waitfor, DECODE, and DBMS PIPE.RECEIVE MESSAGE. This is a result of a SQ...

CVE-2023-38905

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

CVE-2023-38905

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

CVE-2023-38905

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

CVE-2023-38905

CVE-2023-38905 affects Jeecg-boot v3.5.0 and earlier. The issue is an SQL injection vulnerability that a local attacker can exploit to cause a denial of service, by injecting through functions such as Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE, and DBMS_PIPE.RECEIVE_MESSAGE. The availa...

DEBIAN-CVE-2023-38852

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the unicodedecodewcstombs function in xlstool.c:266...

SUSE CVE-2020-36138

An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

PT-2023-26633

Name of the Vulnerable Software and Affected Versions libxlsv version 1.6.2 Description The issue allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the unicode decode wcstombs function in xlstool.c:266. This can lead to the execution of...

fluent-bit:flb-it-fuzz-cmetrics_decode_fuzz_OSSFUZZ: Invalid-free in reset_context

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4737967611314176 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-cmetricsdecodefuzzOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Invalid-free Cras...

Heap-based Buffer Overflow

Description heap-buffer-overflow p/bf/plugin.c:176 in decode Environment radare2 5.8.9 31000 @ linux-x86-64 commit: 95b648f0907e91e10d55fc48147a7dae99029c5b Build export CC=gcc CXX=g++ CFLAGS="-fsanitize=address -static-libasan" CXXFLAGS="-fsanitize=address -static-libasan"...

Design/Logic Flaw

An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

UBUNTU-CVE-2020-36138

An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

PT-2023-35948 · Git +1 · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Invalid-free. The crash state involves several functions, including reset context and cmt decode...

PT-2023-11665 · Rockcarry · Ffjpeg

Name of the Vulnerable Software and Affected Versions: rockcarry ffjpeg versions 1.0.0 and earlier Description: The issue is related to a Buffer Overflow vulnerability in the jfif decode function, which allows local attackers to execute arbitrary code due to an issue with ALIGN. This vulnerabilit...

FFmpeg 代码问题漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version 4.3, which stems from a flaw in the decodeframe function in the libavcodec/tiff.c file. No details of the vulnerability are available at th...

PT-2023-11808

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.3 Description An issue was discovered in decode frame in libavcodec/tiff.c, allowing remote attackers to cause a denial of service DoS. Recommendations For FFmpeg version 4.3, consider updating to a newer version to mitigate t...

ffjpeg Security Vulnerabilities

ffjpeg is a JPEG encoder/decoder from the Chinese individual developer Kai Chen. A security vulnerability exists in rockcarry ffjpeg version 1.0.0, which originates from a buffer overflow vulnerability in the function jfifdecode. An attacker can exploit this vulnerability to execute arbitrary cod...

CVE-2023-32567

Ivanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.236...

Improper Neutralization

getkirby/cms is vulnerable to Improper Neutralization. The vulnerability exists in the decode function at Txt.php due to a field injection bug in the content storage implementation which allows an attacker to inject malicious data or code...

The vulnerability of the HTTP CORS filter of the Envoy proxy server allows a perpetrator to execute a DoS attack.

The vulnerability of the HTTP CORS proxy server Envoy’s filter relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to perform a DoS attack by removing the origin header between the decodeHeaders and encodeHeaders operations...