571 matches found
CVE-2019-17340
An issue was discovered in Xen through 4.11.x allowing x86 guest OS users to cause a denial of service or gain privileges because grant-table transfer requests are mishandled...
CVE-2019-16347
ngiflib 0.4 has a heap-based buffer overflow in WritePixels in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...
CVE-2019-16346
ngiflib 0.4 has a heap-based buffer overflow in WritePixel in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...
Heap overflow
ngiflib 0.4 has a heap-based buffer overflow in WritePixel in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...
CVE-2019-16346
ngiflib 0.4 has a heap-based buffer overflow in WritePixel in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...
CVE-2019-16347
ngiflib 0.4 has a heap-based buffer overflow in WritePixels in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...
CVE-2019-16275
hostapd before 2.10 and wpasupplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF aka management frame protection. The attacker must send a...
CVE-2019-16217
WordPress before 5.2.3 allows XSS in media uploads because wpajaxuploadattachment is mishandled...
CVE-2019-16217
WordPress before 5.2.3 allows XSS in media uploads because wpajaxuploadattachment is mishandled...
VulnCheck KEV: CVE-2019-1214
Microsoft Windows Common Log File System CLFS driver improperly handles objects in memory which can allow for privilege escalation...
Arbitrary file deletion
LimeSurvey before v3.17.14 allows stored XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. The attack uses a survey group in which the title contains JavaScript that is mishandled upon group deletion...
CVE-2019-16139
An issue was discovered in the compactarena crate before 0.4.0 for Rust. Generativity is mishandled, leading to an out-of-bounds write or read...
CVE-2019-16139
The CVE-2019-16139 issue affects the Rust crate compact_arena prior to 0.4.0, where flawed generativity handling allowed an out-of-bounds write or read. Exploitation involves mixing indices between arenas, enabling memory access violations. The root cause is improper generativity implementation; ...
Design/Logic Flaw
FreeType before 2.6.1 has a buffer over-read in skipcomment in psaux/psobjs.c because psparserskipPStoken is mishandled in an FTNewMemoryFace operation...
Remote code execution
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 and Pigeonhole before 0.5.7.2, protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASNBOOLEAN byte is mishandled for a crafted DER certificate in GetLengthex. Remediation There...
CVE-2019-15651
wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASNBOOLEAN byte is mishandled for a crafted DER certificate in GetLengthex...
CVE-2019-15547
An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are format string issues in printw functions because C format arguments are mishandled...