474 matches found
bettercap 数字错误漏洞
Bettercap is an open-source framework for network attacks and security testing developed by Bettercap. Versions of Bettercap 2.41.5 and earlier contained a numerical error vulnerability. This vulnerability stemmed from an integer coercion conversion error in the ippReadChunkedBody function within...
bettercap 数字错误漏洞
Bettercap is an open-source framework for network attacks and security testing developed by Bettercap. Versions of Bettercap 2.41.5 and earlier contain a numerical error vulnerability. This vulnerability stems from an unknown function in the modules/mysqlserver/mysqlserver.go file of the MySQL...
FlashMQ 数字错误漏洞
FlashMQ is a fast and lightweight MQTT proxy server developed by Wiebe Cazemier. Versions of FlashMQ prior to 1.26.1 contained a numerical error vulnerability. This vulnerability could cause the FlashMQ proxy to crash and lead to a denial-of-service attack when the setretainedmessagedefertimeout...
Red Hat Enterprise Linux 数字错误漏洞
Red Hat Enterprise Linux is a Linux operating system for enterprise users developed by Red Hat, Inc. Red Hat Enterprise Linux 10 contains a numerical error vulnerability. This vulnerability stems from the allowed use of zero-length and non-zero offset fragments during DTLS handshake parsing. This...
MongoDB Server 数字错误漏洞
MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a numerical error vulnerability in MongoDB Server, where the MD5 checks...
PowerDNS DNSdist 数字错误漏洞
PowerDNS DNSdist is a proxy software provided by PowerDNS, which offers capabilities for DNS traffic load balancing and security protection. PowerDNS DNSdist has a numerical error vulnerability; this vulnerability stems from the ability of clients to trigger a zero error by sending a specially...
CVE-2026-34317
CVE-2026-34317 affects Oracle MySQL Shell (Shell: Core Client). Affected versions are 8.0.0–8.0.45, 8.4.0–8.4.8, and 9.0.0–9.6.0. The vulnerability exists in the Core Client component and can be exploited by a user who has logon to the environment where MySQL Shell executes, indicating a local at...
Microsoft Hyper-V 数字错误漏洞
Microsoft Hyper-V is an application developed by Microsoft Corporation in the United States. It is a system management program that enables desktop virtualization. Microsoft Hyper-V has a numerical error vulnerability. Attackers can exploit this vulnerability to execute code. The following produc...
Microsoft Windows Storage Spaces Controller 数字错误漏洞
Microsoft Windows Storage Spaces Controller is a necessary driver provided by Microsoft for providing storage space functions. There is a numerical error vulnerability in Microsoft Windows Storage Spaces Controller. Attackers can exploit this vulnerability to gain higher privileges. The following...
ImageMagick 数字错误漏洞
ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-189 and 6.9.13-44 contained a numerical error vulnerability. This vulnerability stemmed from the...
The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to trigger a service failure.
The vulnerability of the Google Chrome browser’s Media component is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially created video file...
osslsigncode 数字错误漏洞
Osslsigncode is a small tool developed by Michał Trojnara as an individual project. It implements some functions of the Microsoft tool signtool.exe. Versions of Osslsigncode prior to version 2.13 contained a numerical error vulnerability. This vulnerability stemmed from the PE page hash calculati...
The vulnerability of the WebML component in the Google Chrome browser, which allows a hacker to trigger a service failure.
The vulnerability of the WebML component in Google Chrome relates to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially crafted HTML page...
core-rs-albatross 数字错误漏洞
core-rs-albatross is a Rust implementation of the Albatross protocol developed by Nimiq. Versions prior to 1.3.0 of core-rs-albatross contained a numerical error vulnerability. This vulnerability stems from the fact that the discovery processor accepts peer control restrictions without any change...
iccDEV 数字错误漏洞
iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.6 contained a numerical error vulnerability. This vulnerability occurred due to specially crafted TIFF inputs, which could lead to zero errors and trigger...
The vulnerability of Google Chrome’s Font component allows a hacker to trigger a service failure.
The vulnerability of Google Chrome’s Font component is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Stream_EnsureCapacity() function in the RDP client FreeRDP, which allows a attacker to trigger a service failure
The vulnerability of the StreamEnsureCapacity function in the RDP client FreeRDP is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...
CVE-2026-30960
rssn is a scientific computing library for Rust, combining a high-performance symbolic computation engine with numerical methods support and physics simulations functionalities. The vulnerability exists in the JIT Just-In-Time compilation engine, which is fully exposed via the CFFI Foreign Functi...
Echo-Mate 安全漏洞
Echo-Mate is a desktop robot and AI assistant developed by Kingham Xu. Previous versions of Echo-Mate, including V250329, had security vulnerabilities. These vulnerabilities were caused by improper numerical processing, which could lead to issues with the program files nftables.H, nftbyteorder.C,...
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...