8711 matches found
Denial of service due to FPE in Exiv2::Internal::resolveLens0xffff
...
resteasy: Error message exposes endpoint class information
A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The...
CVE-2021-39659
In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled exception. In rare instances, this could lead to local denial of service with User execution privileges needed. User interaction is not needed f...
CVE-2021-39659
In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled exception. In rare instances, this could lead to local denial of service with User execution privileges needed. User interaction is not needed f...
CVE-2021-39659: Improper Handling of Exceptional Conditions
In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled exception. In rare instances, this could lead to local denial of service with User execution privileges needed. User interaction is not needed f...
Uncaught Exception
Overview std/archive/zip is a Go standard library package std/archive/zip Affected versions of this package are vulnerable to Uncaught Exception. Go Vulnerability Report: via the Open function in the archive/zip package when processing zip files containing entries with names composed solely of...
Denial Of Service (DoS)
libgpac.so is vulnerable to denial of service attacks. The vulnerability exists in naludmxenqueueordispatch function of reframenalu.c due to a floating point exception which allows an attacker to cause an application crash...
GHSA-273R-MGR4-V34F Uncaught Exception in engine.io
Impact A specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process. RangeError: Invalid WebSocket frame: RSV2 and RSV3 must be clear at Receiver.getInfo /.../nodemodules/ws/lib/receiver.js:176:14 at Receiver.startLoop...
Denial Of Service (DoS)
engine.io is vulnerable to denial of service DoS attacks. A remote attacker is able to cause denial of service conditions by ending the node.js process using a specially crafted HTTP request to trigger an uncaught exception in onWebSocket function...
CVE-2021-40562
A Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using mp4box via the naludmxenqueueordispatch function in reframenalu.c, which causes a denial of service...
CVE-2022-21676 Uncaught Exception in engine.io
Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. A specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process. This impacts all the users of the engine.io...
CVE-2022-21676: Improper Check for Unusual or Exceptional Conditions
Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. A specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process. This impacts all the users of the engine.io...
Engine.Io 代码问题漏洞
Engine.Io is a transport-based implementation of the cross-browser/cross-device bi-directional communication layer of Socket. A code issue vulnerability exists in Engine.IO that stems from the product's failure to effectively handle exceptions raised by special HTTP requests. An attacker could us...
CVE-2021-40562
CVE-2021-40562 affects the GPAC multimedia framework up to 1.0.1. The issue is a segmentation fault caused by a floating point exception in the naludmx_enqueue_or_dispatch function in reframe_nalu.c, triggered when using mp4box, leading to a denial of service. Connected sources confirm GPAC as th...
CVE-2021-40562: Incorrect Comparison
A Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using mp4box via the naludmxenqueueordispatch function in reframenalu.c, which causes a denial of service...
GPAC 安全漏洞
GPAC is an open source multimedia framework. a security vulnerability exists prior to GPAC 1.0.1, which stems from a segmentation error in the naludmxenqueueordispatch function in reframenalu.c caused by a floating-point exception. No detailed vulnerability details are available at this time...
GHSA-C6FG-99PR-25M9 Uncapped length of skin data fields submitted by players
Impact Some skin data fields e.g. skinID, geometryName are not capped in length. These fields are typically saved in the NBT data of a player when the player quits the server, or during an autosave. This is problematic due to the 32767 byte limit on TAGStrings. If any of these fields exceeds 3276...
Huawei HarmonyOS 缓冲区错误漏洞
HarmonyOS Wearables is an electronic watch operating system from Huawei, a Chinese company. HarmonyOS Wearables suffers from an out-of-bounds write vulnerability that originates from an out-of-bounds write in the aod module of HarmonyOS, which can be exploited by an attacker to cause a system...
nltk 安全漏洞
Nltk is a natural language toolkit. It is used to support research and development in natural language processing. A security vulnerability exists in nltk that stems from an exception being triggered during the processing of regular expressions...