Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service.The vulnerability exists due to network access via multiple protocols to compromise MySQL Server which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to Denial of Service. The vulnerability exists because of missing validate network access via multiple protocols which allows an attacker to cause an application crash via malicious input...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to Denial of Service. The vulnerability exists because of lack of security encryption support to network access via multiple protocols which allows an attacker to cause an application crash via malicious input...

Msgpack 安全漏洞

Msgpack is open source an efficient binary serialization format . It allows you to exchange data between multiple languages such as JSON. But it's faster and smaller. Small integers are encoded as one byte, and typical short strings require only one extra byte in addition to the string itself...

No commitment to data passed as input to the init contract during the execution of the diamond cut proposal

Lines of code Vulnerability details Description There is a function executeDiamondCutProposal in the DiamondCutFacet contract. It checks that proposal data passed as input to this call is equal to the data that is declared when the creation of this proposal using the following logic: require...

Denial Of Service (DoS)

keylime is vulnerable to denial of service. The vulnerability is due to a lack of proper exception handling in the request function of tornadorequests.py which allows an attacker to crash the application via malicious input...

[PNM-002] finalize with malicious input may lock bidder funds in the contract

Lines of code Vulnerability details Description The finalize function of the contract SizeSealed is used to finalize an auction, allowing the auctioner or seller to be paid quote tokens and also eventually allowing successful bidders to withdraw base tokens. Once the finalize function is called,...

Denial Of Service (DoS)

mruby is vulnerable denial of service. The vulnerability exists in ivfree function of variable.c due to a null pointer dereference which allows an attacker to crash the application via malicious input...

SUSE-SU-2022:3875-1 Security update for xmlbeans

This update for xmlbeans fixes the following issues: - CVE-2021-23926: Fixed XML parsers not protecting from malicious XML input bsc1180915...

Denial Of Service (DoS)

libtasn1.so is vulnerable to Denial Of Service DoS. The vulnerability exists in struct tagandclassst function of init.h due to an ETYPEOK off-by-one array size check which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

muhammara is vulnerable to denial of service. The vulnerability exists in multiple functions of ObjectByteWriterWithPosition.cpp when PDFStreamForResponse is used with invalid data which allows an attacker to crash the application via malicious input...

RUSTSEC-2022-0079 ELF header parsing library doesn't check for valid offset

The crate has several unsafe sections that don't perform proper pointer validation. An example can be found in the following function: fn sectionheaderraw&self - &ET::SectionHeader let shoff = self.elfheader.sectionheaderoffset as usize; let shnum = self.elfheader.sectionheaderentrynum as usize;...

Buffer Overflow

libexiv2.so is vulnerable to buffer overflow. The vulnerability exists when datasize is less than headersize in the WebPImage::getHeaderOffset function of webpimage.cpp, allowing an attacker to cause an application crash through the integer overflow by providing a malicious input...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to the use after free in the qfupdatebuffer function of quickfix.c, allowing an attacker to cause an application crash through malicious input...

httpd: Out-of-bounds write in ap_escape_quotes() via malicious input

An out-of-bounds write in function apescapequotes of httpd allows an unauthenticated remote attacker to crash the server or potentially execute code on the system with the privileges of the httpd user, by providing malicious input to the function...

CVE-2022-38162

Reflected cross-site scripting XSS vulnerabilities in WithSecure through 2022-08-10 exists within the F-Secure Policy Manager due to an unvalidated parameter in the endpoint, which allows remote attackers to provide a malicious input...

Cross site scripting

Reflected cross-site scripting XSS vulnerabilities in WithSecure through 2022-08-10 exists within the F-Secure Policy Manager due to an unvalidated parameter in the endpoint, which allows remote attackers to provide a malicious input...

CVE-2022-38162

Reflected cross-site scripting XSS vulnerabilities in WithSecure through 2022-08-10 exists within the F-Secure Policy Manager due to an unvalidated parameter in the endpoint, which allows remote attackers to provide a malicious input...

Privilege Escalation

chromium is vulnerable to privilege escalation. The vulnerability exists due to type confusion in Blink which allows an attacker to inject malicious input...

Remote Code Execution (RCE)

chromium is vulnerable to remote code execution. The vulnerability exists due to insufficient validation of untrusted input in VPN, allowing an attacker to crash the application by providing a malicious input...