1055 matches found
SUSE CVE-2022-43596
An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide malicious input to trigger this vulnerability...
Orangescrum cross-site scripting vulnerability (CNVD-2026-02682)
Orangescrum is a project and task management software tool that also provides productivity tools for work organization and team collaboration. Orangescrum suffers from a cross-site scripting vulnerability that originates when the application returns malicious user input in a response with the...
Denial Of Service (DoS)
apr is vulnerable to Denial Of Service DoS. The vulnerability exists due to the stack based buffer in the aprsocketsendv function, allowing an attacker to cause an application crash through the maliciously crafted input...
The vulnerability of the 3D Builder software in designing and preparing objects for 3D printing arises from insufficient validation of input data. This allows a malicious actor to execute arbitrary code within the target system.
The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing exists due to insufficient verification of input data. Exploiting this vulnerability allows a perpetrator to execute arbitrary code in the target system by having the user open a specially created...
Denial Of Service (DoS)
openmage/magento-lts is vulnerable to Denial Of Service DoS. The vulnerability exists in the filter function of MaliciousCode.php, allowing an attacker to cause an application crash through an infinite loop by providing malicious input...
woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks
A flaw was found in the FasterXML/woodstox package. This flaw allows an attacker to cause a denial of service DoS in its target via XML serialization. An attacker may benefit from the parser sending a malicious input that may cause a crash. This vulnerability is only relevant for users using the...
woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks
A flaw was found in the FasterXML/woodstox package. This flaw allows an attacker to cause a denial of service DoS in its target via XML serialization. An attacker may benefit from the parser sending a malicious input that may cause a crash. This vulnerability is only relevant for users using the...
GHSA-Q764-G6FM-555V Path traversal in spotipy
Summary If a malicious URI is passed to the library, the library can be tricked into performing an operation on a different API endpoint than intended. Details The code Spotipy uses to parse URIs and URLs accepts user data too liberally which allows a malicious user to insert arbitrary characters...
ELF header parsing library doesn't check for valid offset
The crate has several unsafe sections that don't perform proper pointer validation. An example can be found in the following function: fn sectionheaderraw&self - &ET::SectionHeader let shoff = self.elfheader.sectionheaderoffset as usize; let shnum = self.elfheader.sectionheaderentrynum as usize;...
GHSA-G6PW-999W-J75M ELF header parsing library doesn't check for valid offset
The crate has several unsafe sections that don't perform proper pointer validation. An example can be found in the following function: fn sectionheaderraw&self - &ET::SectionHeader let shoff = self.elfheader.sectionheaderoffset as usize; let shnum = self.elfheader.sectionheaderentrynum as usize;...
Design/Logic Flaw
A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in lereadbuffersizecomplete...
Regular Expression Denial Of Service (ReDoS)
robots-txt-guard is vulnerable to Regular Expression Denial of Service Attacks ReDoS. The vulnerability exists via the pattern parameter in the makePathPattern function of patterns.js due to insufficient regular expression complexity which allows an attacker to cause an application crash via a...
Denial Of Service (DoS)
openblas is vulnerable to denial of service. The vulnerability exists due to the out-of-bounds read in the library, allowing an attacker to cause an application crash or disclosure of its memory by passing a maliciously crafted input...
Denial Of Service (DoS)
github.com/go-yaml/yaml is vulnerable to denial of service.The vulnerability exists in multiple functions of decode.go due to unbounded alias chasing which allows an attacker to cause an application crash via malicious input...
Denial Of Service (DoS)
radare2 is vulnerable to denial of service. The vulnerability exists due to the out-of-bounds read in the library, allowing an attacker to cause an application crash by providing a maliciously crafted input...
Denial Of Service (DoS)
radare2 is vulnerable to denial of service. The vulnerability exists due to the use after free in the library, allowing an attacker cause an application crash through the maliciously crafted input...
Denial Of Service (DoS)
radare2 is vulnerable to denial of service. An attacker can crash the application by providing a maliciously crafted input to the library...
CVE-2022-43600
Multiple code execution vulnerabilities exist in the IFFOutput::close functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability...
CVE-2022-43599
Multiple code execution vulnerabilities exist in the IFFOutput::close functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability...
CVE-2022-43598
Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary code execution. An attacker can provide malicious input to trigger these vulnerabilities.This...