7519 matches found
CVE-2021-44917
A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...
Design/Logic Flaw
A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...
CVE-2021-44917
A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...
CVE-2021-44917
A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...
gnuplot 数字错误漏洞
Gnuplot is a command-line interactive tool that allows users to enter commands to convert data data and data functions into easy-to-see flat or three-dimensional graphs A code problem vulnerability exists in Gnuplot, which stems from the boundary3d function in the product's graph3d.c file that...
Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code allows remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.
...
CVE-2021-0969
In getTitle of AccessPoint.java, there is a possible unhandled exception due to a missing null check. This could lead to remote denial of service if a proximal Wi-Fi AP provides invalid information with no additional execution privileges needed. User interaction is needed for exploitation.Product...
resteasy: Error message exposes endpoint class information
A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The...
jetty: SessionListener can prevent a session from being invalidated breaking logout
A flaw was discovered in the jetty-server, where if an exception is thrown from the SessionListenersessionDestroyed method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts, this could result in a session not being...
Denial Of Service (DoS)
wireshark is vulnerable to denial of service. The vulnerability exists due to a NULL pointer exception in the IPPUSB dissector...
SUSE-SU-2021:4057-1 Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94138 fixes one issue. The following security issue was fixed: - CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. bsc1191790...
SUSE-SU-2021:4021-1 Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-12298 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In bpfskbchangehead of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution...
Backdoor.Win32.Nucleroot.mf Buffer Overflow
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/8de56eef118187a89eeab972288ce94d.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Nucleroot.mf Vulnerability: Stack Buffer Overflow Description: Description: MaskPE by...
Security Bulletin: Potential denial of service vulnerability in WebSphere Application Server Liberty Core affect CICS Transaction Gateway
Summary Out of Memory Exception can cause denial of service in WebSphere Application Server Liberty Core used by CICS Transaction Gateway affects Web Service requests. CICS Transaction Gateway addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-4046 DESCRIPTION: IBM WebSphere...
The vulnerability of the web interface of Cisco Expressway software and the micro-programming software of Cisco TelePresence Video Communication Server allows a perpetrator to execute arbitrary code.
The vulnerability of the web interface of Cisco Expressway microprogramming software and the Cisco TelePresence Video Communication Server microprogramming software for device management allows for arbitrary code execution by a remote attacker. This vulnerability is related to improper cleaning o...
CVE-2021-37052
There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause address information leakage...
CVE-2021-37052
There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause address information leakage...
CVE-2021-37052
There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause address information leakage...