10119 matches found
CVE-2022-22161 Junos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of traffic
An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause 100% CPU load and the device to become unresponsive by sending a flood of traffic to the out-of-band management ethernet port. Continued receipte...
F5 BIG-IQ security vulnerability
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. F5 BIG-IP has a security vulnerability that can be exploited by attackers to cause a denial of service...
PT-2025-8164
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel due to a race condition between the btf try get module and load module functions. This occurs when the module BTF is published to...
PT-2022-36643
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as pdfi count cff index, pdfi read cff font, and pdfi load...
CVE-2022-22991
A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call. Addressed this vulnerability by disabling checks for internet connectivity using HTTP...
Improper Input Validation in chatwoot/chatwoot
Description This vulnerability impacts all fields sent to Chatwoot. Any field that has an excessive amount of characters in it will cause the agent's page to take an abnormal amount of time to load, often requiring the content to be removed before the page will load. In my example, I put 20000000...
PT-2022-11266 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: Gpac version 1.0.1 Description: The issue is related to a double-free vulnerability in the gf text get utf8 line function in load text.c, which can be exploited by attackers to cause a denial of service, potentially leading to code execution...
Juniper Junos OS Vulnerability (JSA11269)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11269 advisory. - An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause 100% CPU load and t...
CVE-2021-43579
A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...
CVE-2021-43579
A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...
DEBIAN-CVE-2020-29050
SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL SNIPPETS and loadfile operations on a full pathname e.g., a file in the /etc directory. NOTE: this is unrelated to CMUSphinx...
UBUNTU-CVE-2020-29050
SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL SNIPPETS and loadfile operations on a full pathname e.g., a file in the /etc directory. NOTE: this is unrelated to CMUSphinx...
HTMLDOC Buffer Error Vulnerability
HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. A security vulnerability exists in HTMLDOC that stems from a remote code execution due to a stack-based buffer overflow in image load bmp in HTMLDOC = 1.9.13...
Google Protobuf security vulnerabilities
Google protobuf is a data exchange format from Google, Inc. A security vulnerability exists in Google protobuf java that allows a small malicious load to occupy the parser for several minutes by creating a large number of short-lived objects that cause frequent, repetitive pauses...
Inadequate Encryption Strength in Apache NiFi
In Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as listening connections established by processors like ListenHTTP, HandleHttpRequest, etc. However intracluster communication such as cluster request replication, Site-to-Site, and load balanced...
DEBIAN-CVE-2021-45948
Open Asset Import Library aka assimp 5.1.0 and 5.1.1 has a heap-based buffer overflow in m3dsafestr called from m3dload and Assimp::M3DWrapper::M3DWrapper...
PYSEC-2022-43148
Open Asset Import Library aka assimp 5.1.0 and 5.1.1 has a heap-based buffer overflow in m3dsafestr called from m3dload and Assimp::M3DWrapper::M3DWrapper...
PT-2025-37638
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a vulnerability in the NTFS3 file system implementation. Specifically, a null pointer dereference can occur in the attr load runs vcn function when handling...
Open Asset Import Library buffer error vulnerability
The Open Asset Import Library is a library for importing and exporting various 3d model formats, including scene post-processing to generate missing render data. A security vulnerability exists in Open Asset Import Library aka assimp 5.1.0 and 5.1.1, which stems from a heap-based buffer overflow ...
PT-2022-37399
Name of the Vulnerable Software and Affected Versions Open Asset Import Library aka assimp versions 5.1.0 through 5.1.1 Description The issue is a heap-based buffer overflow in the m3d safestr function, which is called from m3d load and Assimp::M3DWrapper::M3DWrapper. Recommendations For Open Ass...