Modsecurity numerical error vulnerabilities

Modsecurity is an open-source web traffic security processing library developed by OWASP ModSecurity. Versions of Modsecurity from 3.0.0 to 3.0.15 contained a numerical error vulnerability. This vulnerability stemmed from an unsigned integer underflow, which led to unhandled exceptions and could...

bettercap: Numerical error vulnerability

Bettercap is an open-source framework for network attacks and security testing developed by Bettercap. Versions of Bettercap 2.41.5 and earlier contained a numerical error vulnerability. This vulnerability stemmed from an integer coercion conversion error in the ippReadChunkedBody function within...

bettercap: Numerical error vulnerability

Bettercap is an open-source framework for network attacks and security testing developed by Bettercap. Versions of Bettercap 2.41.5 and earlier contain a numerical error vulnerability. This vulnerability stems from an unknown function in the modules/mysqlserver/mysqlserver.go file of the MySQL...

FlashMQ numerical error vulnerability

FlashMQ is a fast and lightweight MQTT proxy server developed by Wiebe Cazemier. Versions of FlashMQ prior to 1.26.1 contained a numerical error vulnerability. This vulnerability could cause the FlashMQ proxy to crash and lead to a denial-of-service attack when the setretainedmessagedefertimeout...

Red Hat Enterprise Linux numerical error vulnerabilities

Red Hat Enterprise Linux is a Linux operating system for enterprise users developed by Red Hat, Inc. Red Hat Enterprise Linux 10 contains a numerical error vulnerability. This vulnerability stems from the allowed use of zero-length and non-zero offset fragments during DTLS handshake parsing. This...

MongoDB Server numerical error vulnerability

MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a numerical error vulnerability in MongoDB Server, where the MD5 checks...

Linux Heap Buffer Overflow DoS

The vulnerability of the mwifiexprocessmgmtpacket function in the Linux operating system is related to a numerical reduction in significance. Exploiting this vulnerability could allow an attacker to cause a service failure...

PowerDNS DNSdist has a numerical error vulnerability

PowerDNS DNSdist is a proxy software provided by PowerDNS, which offers capabilities for DNS traffic load balancing and security protection. PowerDNS DNSdist has a numerical error vulnerability; this vulnerability stems from the ability of clients to trigger a zero error by sending a specially...

CVE-2026-34317

CVE-2026-34317 affects Oracle MySQL Shell (Shell: Core Client). Affected versions are 8.0.0–8.0.45, 8.4.0–8.4.8, and 9.0.0–9.6.0. The vulnerability exists in the Core Client component and can be exploited by a user who has logon to the environment where MySQL Shell executes, indicating a local at...

driver’s Privilege Escalation

The vulnerability of the driver for enabling Storage Spaces Controller on Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Windows Storage Spaces Controller numerical error vulnerability

Microsoft Windows Storage Spaces Controller is a necessary driver provided by Microsoft for providing storage space functions. There is a numerical error vulnerability in Microsoft Windows Storage Spaces Controller. Attackers can exploit this vulnerability to gain higher privileges. The following...

Microsoft Hyper-V numerical error vulnerability

Microsoft Hyper-V is an application developed by Microsoft Corporation in the United States. It is a system management program that enables desktop virtualization. Microsoft Hyper-V has a numerical error vulnerability. Attackers can exploit this vulnerability to execute code. The following produc...

ImageMagick numerical error vulnerability

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-189 and 6.9.13-44 contained a numerical error vulnerability. This vulnerability stemmed from the...

Google Chrome Media DoS

The vulnerability of the Google Chrome browser’s Media component is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created video file...

OSSLSIGNCODE: Numerical error vulnerability

Osslsigncode is a small tool developed by Michał Trojnara as an individual project. It implements some functions of the Microsoft tool signtool.exe. Versions of Osslsigncode prior to version 2.13 contained a numerical error vulnerability. This vulnerability stemmed from the PE page hash calculati...

XPCOM Component Compromise Data Compromise

The vulnerability of the XPCOM component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...

Graphics Component DoS

The vulnerability of the Graphics component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

WebML Component DoS

The vulnerability of the WebML component in Google Chrome relates to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially crafted HTML page...

core-rs-albatross numerical error vulnerability

core-rs-albatross is a Rust implementation of the Albatross protocol developed by Nimiq. Versions prior to 1.3.0 of core-rs-albatross contained a numerical error vulnerability. This vulnerability stems from the fact that the discovery processor accepts peer control restrictions without any change...

iccDEV numerical error vulnerability

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.6 contained a numerical error vulnerability. This vulnerability occurred due to specially crafted TIFF inputs, which could lead to zero errors and trigger...