Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an out-of-bounds write vulnerability that originates from a boundary error when WebRTC processes untrusted input. A remote attacker can exploit the vulnerability to execute arbitrary code on the system...

The vulnerability of the HtmlResponseMessage component in the microprogramming software of D-Link DIR-866L routers allows attackers to execute cross-site scripting attacks.

The vulnerability of the HtmlResponseMessage component in the microprogramming software of D-Link DIR-866L wireless routers is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to execute cross-site scripting attacks...

The vulnerability of the Application Server component in network-based printing control systems like PaperCut MF and PaperCut NG allows attackers to execute arbitrary code and increase their privileges.

The vulnerability of the Application Server component in network-based printing control systems like PaperCut MF and PaperCut NG is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and increase their privileges...

CVE-2021-39537

A heap overflow vulnerability has been found in the ncurses package, particularly in the "tic". This flaw results from a lack of proper bounds checking during input processing. By exploiting this boundary error, an attacker can create a malicious file, deceive the victim into opening it using the...

GHSA-WHGM-JR23-G3J9 Uncontrolled Resource Consumption in ansi-html

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...

CVE-2021-23424

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...

CVE-2021-23424

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...

CVE-2021-23424

CVE-2021-23424 affects the Node.js package ansi-html . The provided documents describe a denial-of-service condition caused by a regular-expression Denial-of-Service (ReDoS) flaw in processing input, potentially allowing an attacker to consume resources and degrade availability. Several IBM advis...

PT-2021-15512 · Ansi-Html · Ansi-Html

Name of the Vulnerable Software and Affected Versions: ansi-html affected versions not specified Description: The issue arises when an attacker provides a malicious string, causing the system to get stuck processing the input for an extremely long time. Recommendations: At the moment, there is no...

The vulnerability of the JAPI component of the Essbase Analytic Provider Services service allows a hacker to gain full access to critical data.

The vulnerability of the JAPI component of the Essbase Analytic Provider Services is related to errors in processing input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full access to critical data...

CVE-2021-29542

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow by passing crafted inputs to tf.rawops.StringNGrams. This is because the...

CVE-2021-32471

Insufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing Machine allows program users to execute arbitrary code via crafted data. For example, a tape head may have an unexpected location after the processing of input composed of As and Bs instead of 0s and 1s...

Forcepoint Web Security Content Gateway 代码问题漏洞

Forcepoint Web Security Content Gateway is an application gateway from Forcepoint, USA. A code issue vulnerability exists in Forcepoint Web Security Content Gateway versions prior to 8.5.4 that stems from incorrectly processing XML input, which can lead to information disclosure...

The vulnerability of the DNS server service in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the DNS server service in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MGASA-2021-0150 Updated glibc packages fixes security vulnerabilities

Updated glibc packages fix a security vulnerabilities: The iconv function in the GNU C Library aka glibc or libc6 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead t...

The vulnerability of the virtual learning environment Moodle, related to deficiencies in the processing of input characters, allows a violator to trigger a service failure.

The vulnerability in the virtual learning environment Moodle is related to deficiencies in the processing of input characters when sending messages. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PT-2021-2427 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to errors in processing input data in the Windows DNS server service, which can be exploited by a remote attacker to execute arbitrary code. This can affect...

PT-2021-2426 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to errors in processing input data in the Windows DNS server service, which can lead to a denial-of-service condition. This can be exploited by a remote...

CVE-2021-3342

EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted LaTeX input to a cgi/latex2png?latex= URI...

CVE-2020-27841

CVE-2020-27841 affects the OpenJPEG2 library (openjpeg2) prior to version 2.4.0. The flaw occurs when an attacker provides crafted input to be processed by the OpenJPEG encoder, potentially causing an out-of-bounds read and impacting availability. The issue is evidenced in multiple connected advi...