Sean Barrett stb_vorbis Number Error Vulnerability

Sean Barrett stbvorbis is an open source audio codec for decoding ogg vorbis files. Sean Barrett stbvorbis A numeric error vulnerability exists in the 'predictpoint' function in versions 2019-03-04 and earlier. The vulnerability stems from a networked system or product not properly calculating or...

CVE-2019-14809

net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. This is related to a Host field with a suffix appearing in neither Hostname nor Port, and is related to a non-numeric port number. For example, an...

UBUNTU-CVE-2019-14809

net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. This is related to a Host field with a suffix appearing in neither Hostname nor Port, and is related to a non-numeric port number. For example, an...

CVE-2019-14809

CVE-2019-14809 (Go): The issue arises in net/url parsing in Go before 1.11.13 and 1.12.x before 1.12.8, where malformed hosts in URLs can allow an authorization bypass by crafting a Host field suffix not present in Hostname() or Port(). Example: a javascript:// URL yielding a hostname like google...

The vulnerability of the PDFium browser’s PDF-content processor in Google Chrome, which allows a hacker to trigger a service failure.

The vulnerability of the PDFium browser’s PDF-content processing component in Google Chrome is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially crafted web page...

CVE-2019-14809

net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. This is related to a Host field with a suffix appearing in neither Hostname nor Port, and is related to a non-numeric port number. For example, an...

The vulnerability in the Google Chrome web browser allows a perpetrator to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the Google Chrome web browser is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to influence the confidentiality, integrity, and accessibility of the protected information through a specially crafted HTML page...

Wind River Systems VxWorks Numeric Error Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A numeric error vulnerability exists in Wind River Systems VxWorks. An attacker could exploit this vulnerability to execute code...

Das U-Boot Digital Error Vulnerability

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A numeric error vulnerability exists in Das U-Boot. An attacker could exploit this vulnerability to caus...

Libav Number Error Vulnerability

Libav is Libav team's set of cross-platform audio and video can be recorded, converted solution, which includes a libavcodec encoder. A numeric error vulnerability exists in Libav. The vulnerability stems from a networked system or product that does not properly calculate or convert the resulting...

libdwarf Numeric Error Vulnerability

libdwarf is a library and command line tool for reading and writing DWARF2 standardized debug data format. A numeric error vulnerability exists in libdwarf. The vulnerability arises from a networked system or product that does not properly compute or convert resulting numbers. An attacker could...

VideoLAN VLC media player digital error vulnerability

VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. The product supports the playback of a variety of media files, CD-ROMs, etc., a variety of audio and video formats WMV, MP3, etc. and so on. A numeric error...

DEBIAN-CVE-2019-9085

Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service invoice-creation outage via the nfile parameter to visualizzacontratto.php with invalid arguments any non-numeric value, as demonstrated by the anno=2019&idtransazione=1&numerocontratto=1&nfile=a query string ...

CVE-2019-9085

Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service invoice-creation outage via the nfile parameter to visualizzacontratto.php with invalid arguments any non-numeric value, as demonstrated by the anno=2019&idtransazione=1&numerocontratto=1&nfile=a query string ...

UBUNTU-CVE-2019-9085

Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service invoice-creation outage via the nfile parameter to visualizzacontratto.php with invalid arguments any non-numeric value, as demonstrated by the anno=2019&idtransazione=1&numerocontratto=1&nfile=a query string ...

CVE-2019-9085

Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service invoice-creation outage via the nfile parameter to visualizzacontratto.php with invalid arguments any non-numeric value, as demonstrated by the anno=2019&idtransazione=1&numerocontratto=1&nfile=a query string ...

The vulnerability of the TCP Selective Acknowledgment mechanism in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the TCP SACK mechanism TCP Selective Acknowledgement in the Linux operating system is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure by sending a specially crafted sequence of SACK packets remotely...

Cisco Integrated Management Controller Numeric Error Vulnerability

Cisco Integrated Management Controller IMC is a set of software from the American company Cisco Cisco for the management of UCS Unified Computing System. The software supports HTTP, SSH access, etc., and can perform operations such as powering on, powering off and rebooting the server. A numeric...

DEBIAN-CVE-2019-9084

In Hoteldruid before 2.3.1, a division by zero was discovered in $numtabelle in tabtariffe.php aka the numtariffa1 parameter due to the mishandling of non-numeric values, as demonstrated by the /tabtariffe.php?anno=YEAR&numtariffa1=1a URI. It could allow an administrator to conduct remote denial ...

CVE-2019-9084

In Hoteldruid before 2.3.1, a division by zero was discovered in $numtabelle in tabtariffe.php aka the numtariffa1 parameter due to the mishandling of non-numeric values, as demonstrated by the /tabtariffe.php?anno=YEAR&numtariffa1=1a URI. It could allow an administrator to conduct remote denial ...