The vulnerability of the hb-ot-shape-fallback.cc component in the Harfbuzz text transformation library, which allows a hacker to trigger a service failure.

The vulnerability of the hb-ot-shape-fallback.cc component in the Harfbuzz text transformation library is related to a numerical overflow in the hb-ot-shape-fallback.cc file. Exploiting this vulnerability could allow an attacker to cause a service failure by sending specially crafted data to the...

Vulnerability Spotlight: Three vulnerabilities in HDF5 file format could lead to remote code execution

Dave McDaniel of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered three vulnerabilities in a library that works with the HDF5 file format that could allow an attacker to execute remote code on a targeted device. These issues arise in the libhdf5...

The vulnerability of the executable file IGSSdataServer.exe of the Data Server module in the Interactive Graphical SCADA System (IGSS) allows a perpetrator to execute arbitrary code.

The vulnerability of the IGSSdataServer.exe executable file of the Data Server module in the Interactive Graphical SCADA System IGSS is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted...

The vulnerability of the Mono_Loader.dll library, used by 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, allows a hacker to trigger a service failure.

The vulnerability of the MonoLoader.dll library, which is used by 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, is related to a numerical overflow issue during syntax analysis of TG4 files. Exploiting this vulnerability can allow attacke...

Huawei MindSpore Community numeric error vulnerability

Huawei MindSpore Community is an open source deep learning framework from Huawei China.A numerical error vulnerability exists in versions prior to Huawei MindSpore Community 1.3.0, which stems from the fact that when performing the initialization operation of the Split operator, if a dimension in...

LibTIFF 数字错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF version 4.4.0. An attacker has exploited the vulnerability to cause a denial of service via...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Order partial fulfilling can be blocked by the first fulfiller

Lines of code Vulnerability details DOS attack is possible as OrderValidator.validateOrderAndUpdateStatus sets order's numerator and denominator based on an arbitrary fulfiller provided input. When there is a large bulk sale, an attacker can become one of the first buyers partial fulfillers and s...

NewStart CGSL MAIN 6.02 : systemd Multiple Vulnerabilities (NS-SA-2022-0055)

The remote NewStart CGSL host, running version MAIN 6.02, has systemd packages installed that are affected by multiple vulnerabilities: - An issue was discovered in buttonopen in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur...

The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling attackers to increase their privileges.

The vulnerability of the driver for enabling Storage Spaces Controller on Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the `php_html_entities` function in the PHP programming language allows attackers to trigger a service failure or potentially cause other adverse effects.

The vulnerability of the phphtmlentities function in the PHP programming language is caused by a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service failures or potentially other adverse effects...

The vulnerability of the php_escape_html_entities_ex function (ext/standard/html.c) in the PHP language interpreter allows a attacker to trigger a service failure or possibly cause other effects.

The vulnerability of the phpescapehtmlentitiesex function ext/standard/html.c in the PHP language interpreter is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service failures or potentially cause other adverse effects...

The vulnerability of the mcrypt extension in the PHP programming language interpreter allows a hacker to trigger a service failure or possibly cause other effects.

The vulnerability of the mcrypt extension in the PHP programming language interpreter is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service failures or potentially have other adverse effects...

The vulnerability of the virtual_file_ex function in the PHP programming language allows a hacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the virtualfileex function in the PHP programming language is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause service failures or potentially have other adverse effects...

The vulnerability of the SplFileObject::fread function in the PHP programming language allows a attacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the SplFileObject::fread function in the PHP programming language is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service failures or potentially cause other adverse effects...

The vulnerability of the OpenSSL library, caused by a numerical overflow, allows attackers to trigger a service failure or possibly cause other adverse effects.

The vulnerability of the OpenSSL library is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause a service failure, or possibly have other adverse effects...

The vulnerability of the `mysqli_real_escape_string` function in the PHP programming language allows a attacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the mysqlirealescapestring function in the PHP programming language is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause service interruptions or potentially have other adverse effects...

The vulnerability of the SSL VPN orchestrator for FortiOS operating systems allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the SSL VPN orchestrator for FortiOS systems is related to a numerical overflow condition. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted requests...

The vulnerability of the libsndfile library for reading and writing audio files involves a numerical overflow with empty stack traces, allowing an attacker to execute arbitrary code in the target system.

The vulnerability of the libsndfile library for reading and writing audio files is related to a numerical overflow with empty stack traces. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the target system...

The vulnerability of the psf_log_printf() function in the libsndfile library, which is used for reading and writing audio files, allows a hacker to execute arbitrary code on the target system.

The vulnerability of the psflogprintf function in the libsndfile library, which is used for reading and writing audio files, is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the target system...