3676 matches found
Input validation
Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction PI input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exists in CyberNeko HTML through 1.9.22 also...
UBUNTU-CVE-2022-28366
Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction PI input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exists in CyberNeko HTML through 1.9.22 also...
CVE-2022-28366
Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction PI input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exists in CyberNeko HTML through 1.9.22 also...
CVE-2022-28366
Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction PI input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exists in CyberNeko HTML through 1.9.22 also...
CVE-2022-28366
CVE-2022-28366 affects Neko HTML parsers used by HtmlUnit-Neko (up to 2.26; fixed in 2.27) and by CyberNeko HTML (up to 1.9.22; 1.9.22 is the last release). The issue is a denial of service via crafted Processing Instruction input that leads to excessive heap memory consumption. OWASP AntiSamy be...
CVE-2022-28366
Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction PI input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exists in CyberNeko HTML through 1.9.22 also...
HtmlUnit 安全漏洞
HtmlUnit is an open source java page analysis tool that reads a page and can be used effectively to analyze the content on the page using HtmlUnit. A security vulnerability exists in HtmlUnit Neko 2.26 that allows denial of service via crafted Processing Instruction PI input, which can lead to...
PT-2022-18975 · Owasp +2 · Owasp Antisamy +4
Name of the Vulnerable Software and Affected Versions: HtmlUnit-Neko versions 2.26 and earlier CyberNeko HTML versions 1.9.22 and earlier OWASP AntiSamy versions 1.6.6 and earlier Description: Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction PI input...
SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2022:1270-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1270-1 advisory. The SUSE Linux Enterprise 12 SP3 kernel was updated. The following security bugs were fixed: - CVE-2022-1016: Fixed a vulnerability...
CVE-2021-43933
The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receiving server, which could cause a denial-of-service condition due to lack of heap memory resources...
CVE-2021-43933 ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform
The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receiving server, which could cause a denial-of-service condition due to lack of heap memory resources...
CVE-2021-43933
The CVE-2021-43933 entry maps to FANUC ROBOGUIDE Simulation Platform. Affected is ROBOGUIDE versions v9.40083.00.05 (Rev T) and earlier. The issue is Uncontrolled Resource Consumption (CWE-400) leading to a DoS via network-based requests that exhaust heap memory resources. ICSA-22-109-03 notes re...
SUSE SLES12 Security Update : kernel (SUSE-SU-2022:1267-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1267-1 advisory. - Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel CVE-2021-39713 - In the Linux kernel...
Denial Of Service (DoS)
Irzip is vulnerable to denial of service. The vulnerability exists because it contains a heap memory corruption via the component lrzip.c:initialisecontrol which allows an attacker to cause an application crash...
Type Confusion
Google Chrome is vulnerable to type confusion. A remote attacker is able to exploit a heap memory corruption issue via a crafted HTML page, which leads to a use-after-free state in V8 Turbofan engine...
CVE-2022-28044
Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialisecontrol...
DEBIAN-CVE-2022-28044
Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialisecontrol...
Memory corruption
Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialisecontrol...
