OpenSC Buffer Overflow DoS

The vulnerability of the software tools and libraries used for working with OpenSC smart cards is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service...

systemd Privilege Binding

The vulnerability of the systemd service initialization and management subsystem is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

hosted-git-info fromUrl Regular Expression DoS

The vulnerability of the fromUrl function in the hosted-git-info software is related to incorrect interpretation of the regular expression. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Xen Cross-platform Hypervisor Privilege Issue

The vulnerability of the cross-platform Xen hypervisor is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to access confidential data and also cause service failures...

Grub2 Buffer Overflow DoS

The vulnerability of Grub2 operating system loaders is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow attackers to access confidential data, compromise data integrity, and cause service failures...

Secure Boot Protocol Data Compromise

The vulnerability of the Secure Boot implementation in the Grub2 operating system is related to improper restrictions on the use of ACPI commands. Exploiting this vulnerability can allow an attacker to access confidential data, compromise data integrity, and cause service failures...

Exif Metadata Processing Data Compromise

The vulnerability of the ExifTool library for processing metadata in multimedia files is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause servi...

Graphviz Visualization Buffer Overflow DoS

The vulnerability of Graphviz’s visualization tools relates to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through the use of a...

WebKit Memory Leak Confidential Data Access

The vulnerability of the WebKit page rendering module relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Grub2 cutmem Confidential Data Compromise

The vulnerability of the cutmem command in the Grub2b operating system loader is related to a violation of authentication mechanisms. Exploiting this vulnerability can allow an attacker to access confidential data, compromise data integrity, and cause service failures...

Grub2 Confidential Data Compromise

The vulnerability of the Grub2 operating system loader implementation is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise data integrity, and cause service failures...

Use safeTransferFrom consistently instead of transferFrom

Handle Jujic Vulnerability details Impact It is good to add a require statement that checks the return value of token transfers, or to use something like OpenZeppelin’s safeTransferFrom unless one is sure the given token reverts in case of a failure. Failure to do so will cause silent failures of...

FFmpeg adts_decode_extradata Heap Buffer Overflow DoS

The vulnerability of the adtsdecodeextradata function in the libavformat/adtsenc.c component of the FFmpeg multimedia library is related to an unvalidated return value of initgetbits. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data, compromise its...

htmldoc Integer Overflow DoS

The vulnerability of the htmldoc web page conversion software is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

WebKitGTK WPE Buffer Overflow DoS

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures due to malicious web content...

NTFS Buffer Overflow DoS

The vulnerability of the ntfsattrfindinattrdef function in the NTFS file system driver for the FUSE NTFS-3G module relates to reading data from within allowable buffer limits. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause servic...

Node-tar Path Traversal

The vulnerability of the Node.js module for processing tar archives with the Node-tar module is related to the possibility of bypassing the symbolic link checks for directories. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

OpenSC Buffer Overflow DoS

The vulnerability of the software tools and libraries used for working with OpenSC smart cards is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service...

Ansible Configuration Management Insecure Temporary Files

The vulnerability of the Ansible configuration management module is related to insecure temporary files. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

fig Fig2dev Buffer Overflow

The vulnerability of the readobjects function in the .fig Fig2dev file conversion utility is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to compromise data integrity and cause service failures...