The vulnerability of the WebAudio component in the Google Chrome browser allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s WebAudio component is related to the execution of operations that exceed the allowable buffer data limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the TightDecoder::FilterGradient function in the VNC TigerVNC software allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the TightDecoder::FilterGradient function in the VNC TigerVNC software is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the DecodeManager::decodeRect function in the VNC TigerVNC software allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the DecodeManager::decodeRect function in the VNC TigerVNC software is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of Google Chrome’s browser storage, related to the operation of pushing operations beyond the data buffer’s allowable limits, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s browser storage relates to the operation of operations that exceed the permissible data buffer limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the elf_end function in the libelf library, a set of utilities for processing ELF objects, relates to the issue of allowing the output operation to be within acceptable data buffer limits. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the elfend function in the libelf library is related to improper closure of the ar file. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the WebRTC technology implemented in Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the execution of operations within the data buffer’s allowable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the `finish_stab` function in the `stabs.c` file of the Binutils development tools, related to the operation of pushing values out of the data buffer’s acceptable range, allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the finishstab function of the stabs.c file in the Binutils development tools set relates to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, an...

The vulnerability of VNC implementations with extensions for optimizing operations under slow data transmission channels, such as Tightvnc, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of VNC implementations with extensions for optimizing operations under slow data transmission channels, such as Tightvnc, is related to the execution of operations within the allowable buffer size limits. Exploiting this vulnerability can allow a remote attacker to gain access t...

The vulnerability of the isolated iframe in the Google Chrome web browser allows a perpetrator to circumvent existing security restrictions.

The vulnerability in the isolated environment of the iframe in the Google Chrome web browser is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

CVE-2021-23840

Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 indicating succes...

The vulnerability of the WavpackPackSamples function in the packUtils.c component of the WavPack audio codec allows for an operation that outputs data within acceptable buffer limits. This enables a malicious actor to compromise the integrity of the data and cause service failures.

The vulnerability of the WavpackPackSamples function in the packUtils.c component of the WavPack audio codec is related to the output of the operation within acceptable buffer data limits. Exploiting this vulnerability allows a remote attacker to compromise the integrity of the data and also caus...

The vulnerability of the ChannelSftp.OVERWRITE component in the Java implementation of SSH2, jsch, allows a attacker to compromise the integrity of information.

The vulnerability of the ChannelSftp.OVERWRITE component in the Java SSH2 implementation jsch exists due to an incorrect pathname limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the information...

GHSA-XHV5-W9C5-2R2W Unbounded connection acceptance in http4s-blaze-server

Impact blaze-core, a library underlying http4s-blaze-server, accepts connections unboundedly on its selector pool. This has the net effect of amplifying degradation in services that are unable to handle their current request load, since incoming connections are still accepted and added to an...

The vulnerability of the Mozilla Firefox browser, related to the execution of operations beyond the allowed data buffer limits, allows attackers to execute arbitrary code.

The vulnerability of the Mozilla Firefox browser is related to the execution of operations beyond the allowed data buffer limits. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ALPINE-CVE-2020-28493

This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the punctuationre regex operator and its use of multiple wildcards. The last wildcard is the most exploitable as it searches for trailing punctuation. This issue can be mitigated by Markdown to...

AZL-40857 CVE-2020-28493 affecting package nodejs for versions less than 20.14.0-1

This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the punctuationre regex operator and its use of multiple wildcards. The last wildcard is the most exploitable as it searches for trailing punctuation. This issue can be mitigated by Markdown to...

PYSEC-2021-66

This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the punctuationre regex operator and its use of multiple wildcards. The last wildcard is the most exploitable as it searches for trailing punctuation. This issue can be mitigated by Markdown to...

UBUNTU-CVE-2020-28493

This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the punctuationre regex operator and its use of multiple wildcards. The last wildcard is the most exploitable as it searches for trailing punctuation. This issue can be mitigated by Markdown to...

CVE-2020-28493

CVE-2020-28493 affects jinja2 up to version 2.11.3 (inclusive of 0.0.0 to before 2.11.3). The root cause is a Denial of Service likely caused by the regex in the _punctuation_re used by the urlize filter, leading to excessive CPU on crafted input. Public documents identify this ReDoS vulnerabilit...

The vulnerability of the Mozilla Firefox browser, related to the execution of operations beyond the allowed data buffer limits, allows attackers to execute arbitrary code.

The vulnerability of the Mozilla Firefox browser is related to the execution of operations beyond the allowed data buffer limits. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...