Ffmpeg filter_intra Heap Buffer Overflow DoS

The vulnerability of the filterintra component in the Ffmpeg library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

DjVuLibre Buffer Overflow DoS

The vulnerability of the library for viewing, creating, and editing DjVu files in DjVuLibre is related to the lack of checks for zero bytes. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Google Chrome Tab Strip Buffer Overflow DoS

The vulnerability of the Tab Strip component in the Google Chrome web browser is related to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service interruptions through the use of a...

Puma HTTP Server Resource Consumption

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

OWASP's 2021 List Shuffle: A New Battle Plan and Primary Foe

Code injection attacks, the infamous king of vulnerabilities, have lost the top spot to broken access control as the worst of the worst, and developers need to take notice. In this increasingly chaotic world, there have always been a few constants that people could reliably count on: The sun will...

[SECURITY] Fedora 34 Update: fail2ban-0.11.2-9.fc34

Fail2Ban scans log files and bans IP addresses that makes too many password failures. It updates firewall rules to reject the IP address. These rules can be defined by the user. Fail2Ban can read multiple log files such as sshd or Apache web server ones. Fail2Ban is able to reduce the rate of...

Zephyr security vulnerabilities

Zephyr is an open source, small, scalable, real-time operating system. a security vulnerability exists in Zephyr, which stems from truncated L2CAP K-frames causing assertion failures. No detailed vulnerability details are available at this time...

VMware vCenter Server XML Parsing DoS

The vulnerability of the VMware vCenter Server virtual infrastructure management tool is related to incorrect syntactic analysis of XML objects. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Adobe AIR SDK Out-of-Buffer

The vulnerabilities of Adobe Flash Player, Adobe Integrated Runtime AIR, Adobe AIR SDK, and Adobe AIR SDK & Compiler are related to the execution of operations beyond the buffer boundaries. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause service failur...

PT-2024-11430

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to command ring pointer corruption while aborting a command in the Linux kernel. The command ring pointer is located at 6:63 bits of the command ring control registe...

Bluetooth Classic Input Verification DoS

The vulnerability of the Bluetooth Classic environment for developing IoT applications exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Zhuhai Jieli AC690X Bluetooth Classic Input Verification

The vulnerability of the Bluetooth Classic microprogramming system implementation in Zhuhai Jieli AC690X devices exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause service failures through the created LMP packet...

Apache HTTP Server Path Traversal

The vulnerability of the Apache HTTP Server is related to deficiencies in path checking for directories. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted HTTP request...

Linux kernel Privilege Escalation

The vulnerability of the Linux operating system’s kernel is related to insufficient checking of permission assignments for critical resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux kernel Nitro Enclaves Pointer Arithmetic DoS

The vulnerability of the Linux kernel driver in Nitro Enclaves is related to errors in pointer assignment when closing file descriptors for enclaves. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

overlayfs Privilege Escalation

The vulnerability of the overlayfs component in the Linux operating system’s kernel involves ignoring user name spaces when configuring file permissions in the underlying file system. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, a...

Postfix PostSRSd Resource Leak DoS

The vulnerability of the Postfix PostSRSd daemon’s resend mechanism is related to the improper sending of certain fields of a specific length. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

Virtualization Containerization Privilege Escalation

The vulnerability of software for performing virtualization at the operating system level, also known as containerization, is related to improper checking of the return value of functions. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise it...

Eterm Mrxyt Rxyt-unicode SSL-Proxy Data Compromise

The vulnerability of the Eterm, Mrxyt, Rxyt, and Rxyt-unicode software lies in the improper handling of certain control sequences. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Flask Extension Privilege Management

The vulnerability of the Flask extension relates to an error in the use of Pickle for serialization. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service failures...