CVE-2020-16159

GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMFScaledData. Parsing malicious input can result in a crash or information disclosure...

CVE-2020-16158

GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMFExpandComplexTYPE. Parsing malicious input can result in a crash or potentially arbitrary code execution...

GHSA-X7GM-RFGV-W973 Potential DoS with NumberFilter conversion to integer values.

Impact Automatically generated NumberFilter instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential format with sufficiently large exponents. Patches Version 2.4.0+ applies a MaxValueValidator with a a default limitvalue of...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. The vulnerability exists because nbdgenlstatus in drivers/block/nbd.c does not check the nlaneststartnoflag return value which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

linux is vulnerable to denial of service DoS. The vulnerability exists through a memory leak in the adisupdatescanmodeburst function in drivers/iio/imu/adisbuffer.c which allows an attacker to crash the application via malicious input...

Siemens Polarion Subversion Webclient Cross-Site Scripting Vulnerability

Polarion WebClient for SVN is one of several free Subversion tools provided by Polarion Software, it is an SVN client that enables Subversion users to work with SVN repositories using a web browser. A cross-site scripting vulnerability exists in Siemens Polarion Subversion Webclient. An attacker...

LY Corporation: Password reset by malicious input on air.line.me

Due to the bug in the account verification process in the password reset function of air.line.me, it was possible to change other's passwords if a temporary password reset key was set to a space...

Denial Of Service (DoS)

github.com/russellhaering/goxmldsig is vulnerable to denial of service. A NULL pointer dereference allows an attacker to crash the application with a malicious input...

Denial Of Service (DoS)

github.com/golang/go is vulnerable to denial of service. An infinite read loop in ReadUvarint and ReadVarint allows an attacker to create a denial of service condition via malicious input...

Denial Of Service (DoS)

github.com/mattermost/mattermost-server is vulnerable to Denial Of Service DoS. The vulnerability exists in multiple functions because of sending large autoresponder messages which allows an attacker to crash the application via malicious input...

Ruby: DRb denial of service vulnerability

It is possible to crash the DRb server by providing malformed input. By following DRb example https://ruby-doc.org/stdlib-2.7.0/libdoc/drb/rdoc/DRb.htmlmodule-DRb-label-Server+code it was created the simple server and client code attached: drbserver.rb drbclient.rb client code was modified to...

Cisco Webex Teams Logging Feature Command Execution Vulnerability

According to its self-reported version, Cisco Webex Teams client for Windows is affected by a command execution vulnerability due to improper restrictions on software logging features. An unauthenticated, remote attacker could exploit this vulnerability by convincing a targeted user to visit a...

Denial Of Service (DoS)

dotnet is vulnerable to denial of service. An attacker is able to crash the application via malicious input...

Denial Of Service (DoS)

binutils is vulnerable to denial of service. The vulnerability exists in gold/fileread.cc and elfcpp/elfcppfile.h due to improper input validation in eshoff header field which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists in CiffComponent::dataLocation function of crwimageint.cpp due to an invalid data location which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists in PngImage::readMetadata function of pngimage.cpp due to negative integer overflow which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer overflow in Exiv2::ul2Data in types.cpp which allows an atccket to crash the application via malicious input...

Denial Of Service (DoS)

exiv2 is vulnerable to a denial of service. The vulnerability exists due to a heap-based buffer overflow in Exiv2::d2Data in types.cpp which allows an attacker to crash the application via malicious input...

CVE-2018-5968

A deserialization flaw was discovered in the jackson-databind that could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaws CVE-2017-7525 and CVE-2017-17485 by...

CVE-2017-17485

A deserialization flaw was discovered in the jackson-databind which could allow an unauthenticated user to perform code execution by sending maliciously crafted input to the readValue method of ObjectMapper. This issue extends upon the previous flaws CVE-2017-7525 and CVE-2017-15095 by blacklisti...