1414 matches found
Cross site scripting
Swift File Transfer Mobile v1.1.2 and below was discovered to contain a cross-site scripting XSS vulnerability via the 'path' parameter of the 'list' and 'download' exception-handling...
CVE-2020-36486
Swift File Transfer Mobile v1.1.2 and below was discovered to contain a cross-site scripting XSS vulnerability via the 'path' parameter of the 'list' and 'download' exception-handling...
[SECURITY] Fedora 33 Update: xstream-1.4.18-2.fc33
XStream is a simple library to serialize objects to XML and back again. A high level facade is supplied that simplifies common use cases. Custom objects can be serialized without need for specifying mappings. Speed and low memory footprint are a crucial part of the design, making it suitable for...
CVE-2021-25474
Assuming a shell privilege is gained, an improper exception handling for multisimbarshowonqspanel value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset...
Samsung SMR 安全漏洞
Samsung SystemUI is a system application for Samsung Samsung mobile devices. A denial of service vulnerability exists in Samsung SystemUI that stems from an exception handling error in SystemUI for multisimbarhidebymeadiafull, which can be exploited by an attacker to cause a denial of service...
CVE-2021-37786
Certain Federal Office of Information Technology Systems and Telecommunication FOITT products are affected by improper handling of exceptional conditions. This affects COVID Certificate App IOS 2.2.0 and below affected, patch in progress and COVID Certificate Check App IOS 2.2.0 and below affecte...
CVE-2021-37786
The CVE-2021-37786 entry concerns FOITT-related COVID Certificate apps on iOS, specifically COVID Certificate App iOS and COVID Certificate Check App (version 2.2.0 and below). The underlying issue is improper handling of exceptional conditions, leading to a denial of service when presented with ...
OSV-2021-1367 Uncaught exception in org.jsoup.parser.HtmlTreeBuilderState$18.process
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39164 Crash type: Uncaught exception Crash state: org.jsoup.parser.HtmlTreeBuilderState$18.process org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$7.process...
PT-2025-39959
Name of the Vulnerable Software and Affected Versions node-static affected versions not specified @nubosoftware/node-static affected versions not specified Description The software does not properly handle user input containing null bytes. This can allow attackers to access http://host/%00 and...
OSV-2021-1338 Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38982 Crash type: Uncaught exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$18.process org.jsoup.parser.HtmlTreeBuilder.process...
The vulnerability of the TCP protocol implementation in NicheLite and InterNiche TCP/IP implementations allows a attacker to cause service failures.
The vulnerability of the TCP protocol implementation in NicheLite and InterNiche protocols is related to an error in exception handling. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Design/Logic Flaw
An improper handling of exceptional conditions vulnerability exists in the Palo Alto Networks PAN-OS dataplane that enables an unauthenticated network-based attacker to send specifically crafted traffic through the firewall that causes the service to crash. Repeated attempts to send this request...
Palo Alto Networks PAN-OS 8.1.x < 8.1.20 / 9.0.x < 9.0.14 / 9.1.x < 9.1.9 / 10.0.x < 10.0.5 Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.20 or 9.0.x prior to 9.0.14 or 9.1.x prior to 9.1.9 or 10.0.x prior to 10.0.5. It is, therefore, affected by a vulnerability. - An improper handling of exceptional conditions vulnerability exists in the Palo...
GHSA-7XRJ-F5RP-J55H Uncontrolled Resource Consumption in transpile
All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...
Uncontrolled Resource Consumption in transpile
All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...
Denial Of Service (DoS)
transpile is vulnerable to denial of service. The vulnerability exists due to failure to sanitize and insecure exception handling in the .to function, causing an application crash...
CVE-2021-23429
All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...
CVE-2021-23429
All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...
Input validation
All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...
CVE-2021-23429 Denial of Service (DoS)
All versions of package transpile are vulnerable to Denial of Service DoS due to a lack of input sanitization or whitelisting, coupled with improper exception handling in the .to function...