Dell BIOS 安全漏洞

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. The Dell BIOS has a security vulnerability that stems from the inclusion of a competitive condition vulnerability that can be exploited by a local attacker by sending malicious input via SMI to bypass...

Dell BIOS 安全漏洞

Dell BIOS is embedded software on a small memory chip SMM on a computer motherboard from Dell Inc. in the United States. A security vulnerability exists in Dell BIOS, which stems from the inclusion of an insecure auto-optimization vulnerability that can be exploited by a malicious, locally...

Remote Code Execution

thunderbird is vulnerable to denial of service. The vulnerability exists due to the lack of memory safety checks in the library, allowing an attacker to crash the application by providing malicious input...

Denial Of Service (DoS)

firefox-esr is vulnerable to denial of service. The vulnerability exists due to the lack of memory safety checks in the library, allowing an attacker to crash the application by providing malicious input...

Denial Of Service (DoS)

radare2 is vulnerable to denial of service. The vulnerability exists due to an off-by-one overflow flaw caused by mismatched array length in corejava.c which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

vim is vulnerable to denial of service. An attacker can crash the application through the null pointer deference in the library by providing a maliciously crafted input...

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to a memory corruption in FedCM which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service. The vulnerability exists in rotateImage function in tiffcrop.c due to a double-free vulnerability which allows an attacker to cause an application crash via a malicious input...

Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service. The vulnerability exists due to the null pointer dereference when calling ZPrint, allowing an attacker to cause an application crash by providing a maliciously crafted input...

Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service. The vulnerability exists due to the use after free condition in a pointer which pushed into previously free memory by the loop, allowing an attacker to cause an application crash by providing a malicious input...

Regular Expression Denial Of Service (ReDoS)

uri-template-lite is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the expandRe attribute in index.js, allowing an attacker to crash the application by providing a malicious input through the URI.expand method...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to the use after free in the library, allowing an attacker to crash the application by providing a malicious input...

Denial Of Service (DoS)

vim is vulnerable to denial of service. It is possible to cause heap-based buffer overflow in GitHub repository which allows an attacker to crash the application by providing malicious input...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists in vimregsubboth function of regexp.c due to substitute overwrites allocated buffer which allows an attacker to crash the application via malicious input...

Regular Expression Denial Of Service (ReDoS)

v8n is vulnerable to regular expression denial of service. The vulnerability exists in the availableRules.lowercase function in v8n.js due to the lack of complexity in the regex which allows an attacker to crash the application by providing malicious input...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists due to an insufficient TLB flush for x86 PV guests in shadow mode which allows an attacker to crash the application by providing a malicious input...

Prototype Pollution

react-navigation is vulnerable to prototype pollution. A malicious input can be parsed and decoded as it does not prevent the properties such as "proto" to pollute the global object prototype...

ion-parser 安全漏洞

ion-parser is 418sec open source one of the fastest and lightest Javascript parser for TOML and ION files . A security vulnerability exists in ion-parser that stems from the package's susceptibility to prototype contamination, which can be exploited by an attacker to submit malicious INI files to...

PT-2022-8904 · Unknown · Ion-Parser

Name of the Vulnerable Software and Affected Versions: ion-parser versions all Description: The issue affects the ion-parser package, where an attacker can submit a malicious INI file to an application that uses the parse function, leading to prototype pollution on the application. This can be...

Denial Of Service (DoS)

libtirpc.so is vulnerable to denial of service DoS. The vulnerability exists in svcrun because does not properly handle idle TCP connections which allows an attacker to crash the application by providing malicious input...