AZL-54425 CVE-2024-45338 affecting package kubernetes for versions less than 1.30.3-2

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-54404 CVE-2024-45338 affecting package docker-buildx for versions less than 0.14.0-3

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-54422 CVE-2024-45338 affecting package telegraf for versions less than 1.31.0-4

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-54428 CVE-2024-45338 affecting package cert-manager for versions less than 1.12.15-1

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-54491 CVE-2024-45338 affecting package cri-o 1.30.1-1

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-54524 CVE-2024-45338 affecting package influxdb for versions less than 2.6.1-19

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-54485 CVE-2024-45338 affecting package buildah for versions less than 1.41.4-2

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-54483 CVE-2024-45338 affecting package podman 4.1.1-26

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

UBUNTU-CVE-2024-45338

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

PT-2024-10470

Name of the Vulnerable Software and Affected Versions Golang versions prior to the fixed version Description The issue is related to uncontrolled resource consumption in the Golang programming language. An attacker can craft an input to the Parse functions that would be processed non-linearly wit...

PT-2025-6723

Name of the Vulnerable Software and Affected Versions libxml2 versions 2.12.10 and earlier, 2.13.x versions prior to 2.13.6 Description The issue is related to a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document...

spring-webmvc: Path Traversal Vulnerability in Spring Applications Using RouterFunctions and FileSystemResource

A flaw was found in Spring applications using the WebMvc.fn or WebFlux.fn frameworks. This issue can allow attackers to perform path traversal attacks via crafted HTTP requests when the application serves static resources using RouterFunctions and explicitly configures resource handling with a...

CVE-2024-31670

rizin before v0.6.3 is vulnerable to Buffer Overflow via createcachebins, readcacheaccel, and rzdyldcachenewbuf functions in librz/bin/format/mach0/dyldcache.c...

PT-2024-24184 · Rizin · Rizin

Name of the Vulnerable Software and Affected Versions: rizin versions prior to 0.6.3 Description: The issue is related to a buffer overflow that can occur via the create cache bins, read cache accel, and rz dyldcache new buf functions in librz/bin/format/mach0/dyldcache.c. This can potentially le...

CVE-2024-31670

rizin before v0.6.3 is vulnerable to Buffer Overflow via createcachebins, readcacheaccel, and rzdyldcachenewbuf functions in librz/bin/format/mach0/dyldcache.c...

The vulnerability of SAP BusinessObjects Business Intelligence platform, related to the use of a signal handler for an unreachable function, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the SAP BusinessObjects Business Intelligence platform is related to the use of a signal processor for non-reachable functions. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2024-31670

CVE-2024-31670 affects rizin before v0.6.3. The buffer overflow vulnerability is triggered via create_cache_bins, read_cache_accel, and rz_dyldcache_new_buf in librz/bin/format/mach0/dyldcache.c, with impact described as low for confidentiality, integrity, and availability per CVSS 3.1 vector. Pu...

CVE-2024-31670

rizin before v0.6.3 is vulnerable to Buffer Overflow via createcachebins, readcacheaccel, and rzdyldcachenewbuf functions in librz/bin/format/mach0/dyldcache.c...

Amazon Linux 2022 : blas, blas64, blas64_ (ALAS2022-2022-029)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-029 advisory. An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack and OpenBLAS. A specially crafted input passed to these functions could cause an application using lapa...

SQL Injection

Overview apache-superset is a modern, enterprise-ready business intelligence web application. Affected versions of this package are vulnerable to SQL Injection due to improper handling of certain PostgreSQL functions in the SQL parsing and authorization process. An attacker can execute unauthoriz...