139 matches found
CVE-2019-12822
In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory assertion, out-of-bounds memory reference, and potential DoS, as demonstrated by a colon on a line by itself...
CVE-2019-12822
In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory assertion, out-of-bounds memory reference, and potential DoS, as demonstrated by a colon on a line by itself...
CVE-2019-12822
In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory assertion, out-of-bounds memory reference, and potential DoS, as demonstrated by a colon on a line by itself...
CVE-2019-12822: Improper Restriction of Operations within the Bounds of a Memory Buffer
In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory assertion, out-of-bounds memory reference, and potential DoS, as demonstrated by a colon on a line by itself...
PT-2019-12966
Name of the Vulnerable Software and Affected Versions GoAhead versions prior to 4.1.1 GoAhead versions 5.x prior to 5.0.1 Description A header parsing issue in the http.c file causes a memory assertion and out-of-bounds memory reference, potentially leading to a denial-of-service DoS. This can be...
Denial Of Service (DoS)
libsass.so is vulnerable to denial of service DoS. Failure to validate empty reference combinators in Inspect::operator causes an invalid memory reference, resulting in an application crash...
Design/Logic Flaw
NVIDIA Tegra library contains a vulnerability in libnvmmlitevideo.so, where referencing memory after it has been freed may lead to denial of service or possible escalation of privileges. Android ID: A-80433161...
CVE-2018-18989
In CX-One Versions 4.42 and prior CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior, when processing project files, the application fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code unde...
Code injection
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, which may allow an attacker to execute code under the context of the application...
CVE-2018-1000807
Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitable via Depends on...
CVE-2017-1000198
tcmu-runner daemon version 0.9.0 to 1.2.0 is vulnerable to invalid memory references in the handlerglfs.so handler resulting in denial of service...
Code injection
The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times can be measured by a performance.now "Time to Tick" approach even with the https://bugzilla.mozilla.org/showbug.cgi?id=1167489c9 protection mechanism in place, which makes it...
CVE-2017-5928
The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times can be measured by a performance.now "Time to Tick" approach even with the https://bugzilla.mozilla.org/showbug.cgi?id=1167489c9 protection mechanism in place, which makes it...
CVE-2017-5928
CVE-2017-5928 maps to a timing-related vulnerability in the W3C High Resolution Time API. The issue arises because memory-reference times can be measured in ways Cited as a “Time to Tick” approach, which bypasses protection mechanisms (e.g., Mozilla’s 1167489#c9) and facilitates AnC-style attacks...
CVE-2017-5928
The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times can be measured by a performance.now "Time to Tick" approach even with the https://bugzilla.mozilla.org/showbug.cgi?id=1167489c9 protection mechanism in place, which makes it...
PT-2017-10516
Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to the kernel mode layer implementation of the SubmitCommandVirtual DDI DxgkDdiSubmitCommandVirtual in the nvlddmkm.sys driver, where untrusted...
Adobe Flash Player & Compiler内存错误引用漏洞（CNVD-2015-07616）
No description provided by source...
Adobe Flash Player/AIR Memory Error Reference Vulnerability (CNVD-2015-06881)
FlashPlayer is a high-performance, lightweight and very expressive client-side runtime player. Adobe AIR is a technology developed for the integration of web and desktop applications. A memory misreference vulnerability exists in the implementation of Adobe Flash Player/AIR. A remote attacker can...
Hex Workshop 6.0 - (ColorMap files .cmap) Invalid Memory Reference PoC
No description provided by source. !/usr/bin/perl -w Hex Workshop v6 ColorMap files .cmap Invalid Memory Reference Crash POC Discovred by : DATASNIPER for more information vist my blog:http://datasniper.arab4services.net/ the Exploit it's very hard to implemented,if we can make the reference poin...
