The vulnerability of the PDF component in the Google Chrome web browser allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the PDF component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially created PD...

The vulnerability in the get_token function of the pnm2png.c component from the PNG bitmap library allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the gettoken function in the pnm2png.c component of the PNG bitmap handling library involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the H5O_dtypeDecodeHelper() function in the H5Odtype.c component of the HDF5 processing library allows a attacker to cause a service failure.

The vulnerability of the H5OdtypeDecodeHelper in the H5Odtype.c component of the HDF file processing library HDF5 is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause service interruptions by using a...

The vulnerability of the LZ4 data compression algorithm, which allows unauthorized access to confidential data by writing beyond the buffer boundaries, thereby enabling attackers to compromise the integrity of sensitive information and cause service interruptions.

The vulnerability of the lossless LZ4 data compression algorithm is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions...

The vulnerability of the Gstreamer multimedia framework, related to reading data beyond the buffer’s acceptable limits, allows a hacker to cause a service failure.

The vulnerability of the Gstreamer multimedia framework is related to reading data from buffer areas beyond their acceptable limits. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the OpenImageIO image processing library, related to uncontrolled recursion, allows a hacker to cause a service failure.

The vulnerability of the OpenImageIO image processing library is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through the use of a specially created image file...

The vulnerability of the compiler for processing Markdown Marked, related to incorrect handling of regular expressions, allows a hacker to trigger a service failure.

The vulnerability of the compiler for processing Markdown marked text is related to incorrect handling of regular expressions. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Buffer Overflows

vlc is vulnerable to Buffer Overflows. An integer underflow vulnerability allows an attacker to exploit a flaw in the way that VLC handles packet lengths to cause a buffer overflow. The attacker could then use the vulnerability to execute arbitrary code on a vulnerable system, steal data, or...

The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway virtual environment access control systems (formerly known as Citrix NetScaler Gateway) relates to an operation that goes beyond the buffer in memory, allowing a malicious actor to cause service failures.

The vulnerability of the Citrix ADC application delivery controller formerly Citrix NetScaler Application Delivery Controller and the Citrix Gateway access control system formerly Citrix NetScaler Gateway relates to an operation that goes beyond the buffer in memory. Exploiting this vulnerability...

The vulnerability of the aper.GetBitString function in the NGAP Message Handler component of the software for fifth-generation mobile communication networks (5G), free5GC, allows a attacker to cause a service failure.

The vulnerability of the aper.GetBitString function in the NGAP Message Handler component of the 5G mobile communication network management software free5GC is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Marked compiler/analyzer, related to incorrect processing of regular expressions, allows a hacker to trigger a service failure.

The vulnerability of the Marked compiler and analyzer is related to the incorrect processing of the regular expression inline.reflinkSearch. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

PT-2023-30203 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns uncaught exceptions in the NFC module. Successful exploitation can affect NFC availability. Recommendations: At the moment, there is ...

samba: "rpcecho" development server allows denial of service via sleep() call on AD DC

A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements. This vulnerability stems from an RPC function that can be blocked indefinitely. The issue arises because the "rpcecho" service operates with only one worker in...

wireshark: Candump log file parser crash

A flaw was found in the Candump log file parser of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service...

Rocky Linux 8 : subversion:1.10 (RLSA-2021:0507)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:0507 advisory. - Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends ...

Puppet Enterprise Authorization Issues Vulnerability

Puppet is a set of configuration management tools based on a client/server C/S architecture from Puppet Labs in the U.S. It can be used to manage profiles, users, cron tasks, packages, system services, etc. Puppet Enterprise is the enterprise version of Puppet. An authorization issue vulnerabilit...

BIT-2021-2011

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client...

PT-2023-9667 · Cisco · Cisco Unified Contact Center Enterprise +1

Name of the Vulnerable Software and Affected Versions: Cisco Enterprise Chat and Email ECE affected versions not specified Description: A vulnerability in the External Agent Assignment Service EAAS feature could allow an unauthenticated, remote attacker to cause a denial of service DoS condition ...

Rocky Linux 8 : subversion:1.10 (RLSA-2020:4712)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:4712 advisory. - In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request...

DEBIAN-CVE-2023-3961

A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB clients to remote procedure call RPC services like SAMR LSA or SPOOLSS, which Samba initiates o...