UBUNTU-CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

Unspecified Vulnerability in Broadcom CA Automic Sysload

Broadcom CA Automic Sysload is a device load monitoring system from Broadcom USA. The system supports performance management, performance diagnostics and system evaluation. A security vulnerability exists in Broadcom CA Automic Sysload that can be exploited by an attacker to execute arbitrary...

Microsoft Windows Windows Printer Service Privilege Vulnerability

Microsoft Windows is a family of operating systems from Microsoft.Microsoft Windows Windows Printer Service is a printing service in Microsoft Windows. A privilege vulnerability exists in Microsoft Windows Windows Printer Service, which originates when the program does not properly validate the...

libsixel buffer overflow vulnerability (CNVD-2020-12707)

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A buffer overflow vulnerability exists in the 'loadsixel' function of the loader.c file in libsixel version 1.8.2, which originates when a networked system or product perform...

stb_image.h Buffer Overflow Vulnerability

stbimage.h is an image library. A buffer overflow vulnerability exists in the 'stbiloadmain' function in stbimage.h version 2.23 used in libsixel and other products, which arises from a networked system or product that does not properly validate data boundaries when executing an operation in...

PT-2019-15952 · Stb +1 · Stb Image.H +1

Name of the Vulnerable Software and Affected Versions: stb image.h aka the stb image loader version 2.23 Description: The issue is a heap-based buffer over-read in the stbi load main function. This problem affects products that use the stb image loader, including libsixel. Recommendations: For...

PT-2019-15953 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: A heap-based buffer over-read issue was discovered in the load sixel function at loader.c. Recommendations: For libsixel version 1.8.2, at the moment, there is no information about a newer version that...

CVE-2019-4606

IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search path vulnerability. By using a executable file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM...

CVE-2019-4606

CVE-2019-4606 affects IBM DB2 High Performance Unload for LUW versions 6.1 and 6.5. The vulnerability is an untrusted search path issue that could allow a local attacker to execute arbitrary code by using an executable file. IBM and related advisories describe impact as local code execution with ...

DEBIAN-CVE-2017-18640

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...

CVE-2017-18640

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...

UBUNTU-CVE-2017-18640

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...

Design/Logic Flaw

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...

CVE-2017-18640

CVE-2017-18640 affects SnakeYAML; the vulnerability arises from entity expansion (Billion Laughs style) during load, allowing abuse of the alias feature. Affected versions are before 1.26 (e.g., SnakeYAML 1.25.x onward) with public mentions in multiple advisories showing a fix in 1.26. Fedora/Alm...

CVE-2017-18640

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...

CVE-2013-4245

Orca has arbitrary code execution due to insecure Python module load...

CVE-2013-4245

Orca has arbitrary code execution due to insecure Python module load...

CVE-2013-4245

CVE-2013-4245 : The vulnerability affects the Orca application and is caused by insecure Python module load, resulting in arbitrary code execution. The NVD entry lists a local attack vector with medium complexity in CVSS v2, and high impact on confidentiality, integrity, and availability in CVSS ...

CVE-2019-19543

A flaw was found in the Linux kernel’s infrared serial module. An attacker could use this flaw to corrupt memory and possibly escalate privileges. Mitigation As the module will be auto-loaded when the relevant hardware is required, its use can be disabled by preventing the module from loading wit...

NGINX -- HTTP request smuggling

NGINX Team reports: NGINX before 1.17.7, with certain errorpage configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer...