Regular Expression Denial Of Service (ReDoS)

soap is vulnerable to regular expression denial of service. The use of an inefficient regex pattern for match in handleResponse function of http.js allows a malicious user to crash the application by providing a malicious input...

Regular Expression Denial Of Service (ReDoS)

nltk is vulnerable to regular expression denial of service. An attacker is able to crash the application by providing a malicious input through the readcomparisonblock function in comparativesents.py...

SUSE-SU-2021:14811-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2021-39275: Fixed an out-of-bounds write in apescapequotes via malicious input. bsc1190666...

CVE-2021-34729 Cisco IOS XE SD-WAN Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software and Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI...

Apache < 2.4.49 Multiple Vulnerabilities

The version of Apache httpd installed on the remote host is prior to 2.4.49. It is, therefore, affected by multiple vulnerabilities as referenced in the 2.4.49 changelog. - apescapequotes may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to...

Apache HTTP Server ap_escape_quotes buffer overflow vulnerability

Apache HTTP Server is an open source web server from the Apache Foundation. The server is fast, reliable, and extensible via a simple API. buffer overflow vulnerability exists in Apache HTTP Server versions 2.4.48 and earlier, which stems from the possibility that apescapequotes may write content...

Denial Of Service (DoS)

libde265.so is vulnerable to denial of service. An attacker is able to send malicious input to the mcchroma function to cause a heap buffer overflow...

Denial Of Service (DoS)

libde265.so is vulnerable to denial of service. An attacker is able to send malicious input to the decodeCABACbit function to cause a heap buffer overflow...

Denial Of Service (DoS)

libde265.so is vulnerable to denial of service. An attacker is able to send malicious input to the putepel16fallback function to cause a heap buffer overflow...

CVE-2021-39275

An out-of-bounds write in function apescapequotes of httpd allows an unauthenticated remote attacker to crash the server or potentially execute code on the system with the privileges of the httpd user, by providing malicious input to the function. Mitigation Mitigation for this issue is either no...

Denial Of Service (DoS)

libsolv.so is vulnerable to denial of service. Malicious input to the function pooldisabledsolvable in src/repo.h causes a heap buffer overflow...

GHSA-WHGM-JR23-G3J9 Uncontrolled Resource Consumption in ansi-html

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...

CVE-2021-36692

libjxl v0.3.7 is affected by a Divide By Zero in issue in lib/extras/codecapng.cc jxl::DecodeImageAPNG. When encoding a malicous APNG file using cjxl, an attacker can trigger a denial of service...

CVE-2020-35634

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsface sfh-boundaryentryobjects Sloopof. A specially crafted malformed file can lead to an out-of-bounds read and type...

DEBIAN-CVE-2020-35634

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsface sfh-boundaryentryobjects Sloopof. A specially crafted malformed file can lead to an out-of-bounds read and type...

CVE-2020-35635

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in NefS2/SNCioparser.h SNCioparser::readsface storesmboundaryitem Sloopof OOB read. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead t...

DEBIAN-CVE-2020-35633

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsface storesmboundaryitem Edgeof.A specially crafted malformed file can lead to an out-of-bounds read and type...

CVE-2020-35633

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsface storesmboundaryitem Edgeof.A specially crafted malformed file can lead to an out-of-bounds read and type...

Type confusion

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsface sfh-boundaryentryobjects Sloopof. A specially crafted malformed file can lead to an out-of-bounds read and type...

Type confusion

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsface storesmboundaryitem Edgeof.A specially crafted malformed file can lead to an out-of-bounds read and type...