Vulnerability of the Server component of the MySQL database management system, which allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Server: GIS component of the MySQL database management system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the function DL_Dxf::handleLWPolylineData in the DXF file parsing library Dxflib allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the function DLDxf::handleLWPolylineData in the DXF file parsing library Dxflib is related to writing outside the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures usin...

The vulnerability of the decoder for MPEG-4 multimedia platform GPAC allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the MPEG-4 multimedia platform GPAC decoder’s decoding function is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service...

CVE-2022-23974

In 0.9.3 or older versions of Apache Pinot segment upload path allowed segment directories to be imported into pinot tables. In pinot installations that allow open access to the controller a specially crafted request can potentially be exploited to cause disruption in pinot service. Pinot release...

CVE-2022-23974

In 0.9.3 or older versions of Apache Pinot segment upload path allowed segment directories to be imported into pinot tables. In pinot installations that allow open access to the controller a specially crafted request can potentially be exploited to cause disruption in pinot service. Pinot release...

Design/Logic Flaw

In 0.9.3 or older versions of Apache Pinot segment upload path allowed segment directories to be imported into pinot tables. In pinot installations that allow open access to the controller a specially crafted request can potentially be exploited to cause disruption in pinot service. Pinot release...

CVE-2022-23974 Pinot segment push endpoint has a vulnerability in unprotected environments

In 0.9.3 or older versions of Apache Pinot segment upload path allowed segment directories to be imported into pinot tables. In pinot installations that allow open access to the controller a specially crafted request can potentially be exploited to cause disruption in pinot service. Pinot release...

CVE-2022-23974 Pinot segment push endpoint has a vulnerability in unprotected environments

In 0.9.3 or older versions of Apache Pinot segment upload path allowed segment directories to be imported into pinot tables. In pinot installations that allow open access to the controller a specially crafted request can potentially be exploited to cause disruption in pinot service. Pinot release...

Shutdown of Russia's Hydra Market Disrupts a Crypto-Crime ATM

More than just a market for illegal drugs, the dark-web site allowed criminals to launder or cash out hundreds of millions in stolen cryptocurrencies...

The vulnerability of the `pkg_createWithAssemblyCode` function in the `tools/pkgdata/pkgdata.cpp` component of the ICU Unicode library allows a attacker to cause a service failure.

The vulnerability of the pkgcreateWithAssemblyCode function in the tools/pkgdata/pkgdata.cpp component of the ICU Unicode library is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the stbl_AppendSize function in the MP4Box multimedia platform of GPAC allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the stblAppendSize function in the MP4Box multimedia platform of GPAC involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the redis-server component of the Redis database management system allows a attacker to cause a service failure.

The vulnerability of the redis-server component of the Redis database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

The vulnerability of the dwarf::line_table::line_table function in the ELF and DWARFv4 reading library of Libelfin allows a attacker to cause a service failure.

The vulnerability of the dwarf::linetable::linetable function in the ELF and DWARFv4 file reading library Libelfin is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the Mosquitto messaging broker lies in the improper release of memory before deleting last-level links, allowing attackers to trigger a service failure.

The vulnerability of the Mosquitto messaging broker is related to incorrect processing of the CONNECT packet when there are no will topics, no will messages, and no will flags, nor any will properties. Exploiting this vulnerability allows a remote attacker to cause service failures...

The vulnerability of the gf_isom_vp_config_get function in the MP4Box multimedia platform of GPAC allows a hacker to cause a service failure.

The vulnerability of the gfisomvpconfigget function in the MP4Box multimedia platform of GPAC is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

The vulnerability of the `libpff_item_tree_create_node` function in the library allows access to PFF and OFF files. This enables a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the libpffitemtreecreatenode function in the library for accessing PFF and OFF files is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause a service failure using a...

The vulnerability in the do_checksum function of the checksum.c component of the Pcap Tcpreplay editing and reproduction utility allows a hacker to cause a service failure.

The vulnerability of the dochecksum function in the checksum.c component of the Pcap Tcpreplay editing and reproduction utility involves copying buffers without checking the input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created...

The vulnerability of the decoder for the MPEG-4 multimedia platform GPAC’s decoding function allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the CSGP decoder for MPEG-4 multimedia platform GPAC is related to the lack of verification for the result of arithmetic operations. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failure...

The vulnerability of the stszin function in the mp4read.c component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the stszin function in the mp4read.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the tinyexr::SaveEXR component in the OpenEXR Tinyexr image processing library allows a attacker to cause a service failure.

The vulnerability of the tinyexr::SaveEXR component in the OpenEXR Tinyexr processing library is related to an error in the array indexing mechanism. Exploiting this vulnerability allows a remote attacker to cause service interruptions...