PT-2022-7384

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.11-14 Description The issue is related to a heap-based buffer overflow vulnerability in the ReadTIFFImage function of ImageMagick. This vulnerability is caused by an incorrect setting of the pixel array size,...

Discord ProBot Code Issue Vulnerability

Discord is a free chat service from Discord Inc. A code issue vulnerability exists in versions prior to Discord ProBot 2021-02-08, which stems from the server's requirement that uploaded images be in text/html format, and can be exploited by an attacker to interfere with a user's image uploading...

CVE-2019-14023

String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are properly NULL terminated before string copy in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar,...

CVE-2019-14023

CVE-2019-14023 describes a string format issue in HLOS data processing that could allow local exploitation on Qualcomm Snapdragon targets. The vulnerability arises from inputs not being NULL-terminated before string copy in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snap...

CVE-2019-14023

String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are properly NULL terminated before string copy in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar,...

Description of the update for Windows 7 SP1 and Windows Server 2008 R2: February 19, 2019

Description of the update for Windows 7 SP1 and Windows Server 2008 R2: February 19, 2019 Summary This update includes the following improvements and fixes: Addresses a known issue where you may experience virtual machines failing to successfully restore if the VM has been saved and restored once...

PT-2018-12308 · Aurorasparc Llc · Mp4V2

Name of the Vulnerable Software and Affected Versions: MP4v2 version 2.0.0 Description: A double free issue exists in the MP4StringProperty class, located in mp4property.cpp. This occurs when a dangling pointer is freed again in the destructor after an exception is triggered. Recommendations: For...

UBUNTU-CVE-2017-11505

The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service large loop and CPU consumption via a malformed JNG file...

OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714)

It was discovered that the Libraries component of OpenJDK accepted ECDSA signatures using non-canonical DER encoding. This could cause a Java application to accept signature in an incorrect format not accepted by other cryptographic tools...

GLSA-200412-15 : Ethereal: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200412-15 Ethereal: Multiple vulnerabilities There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.8, including: Bug in DICOM dissection discovered by Bing could make Ethereal crash CAN 2004-1139. An invalid...

ISDN4Linux 3.1 - IPPPD Device String SysLog Format String (1)

ISDN4Linux 3.1 - IPPPD Device String SysLog Format String 1 // source: https://www.securityfocus.com/bid/5437/info isdn4linux is a freely available, open source package of isdn compatibility tools. It is available for Linux operating systems. isdn4linux contains a format string vulnerability in t...

CVE-2025-58037

...

CVE-2025-58694

...