The vulnerability of the Real demuxer plugin (real.c) in the Media Player software VideoLAN VLC allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Real demuxer plugin real.c in the Media Player software VideoLAN VLC is related to numerical processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the 2D software platforms Oracle Java SE and Oracle Java SE Embedded allows a attacker to cause partial service disruption.

The vulnerability of the 2D software platforms Oracle Java SE and Oracle Java SE Embedded is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a partial service failure...

Vulnerability of the gdi_Bitmap_Decompress() function in the RDP client FreeRDP, allowing a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the gdiBitmapDecompress function in the FreeRDP RDP client is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerabilities of the Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are caused by a numerical overflow condition that allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are caused by a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information through...

The vulnerability of the SwizzleData function in browsers like Firefox and Firefox ESR, as well as in the Thunderbird email client, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SwizzleData function in browsers like Firefox and Firefox ESR, as well as in the Thunderbird email client, is caused by a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation

Description According to the WordPress release notes: "Props to Soroush Dalili @irsdl from NCC Group for disclosing an issue with URL sanitization that can lead to cross-site scripting XSS attacks." Thanks to @irsdl's Hacker1 disclosure: JS - Numerical Entities JS - Hex Entities...

The vulnerability of the PDFium browser’s PDF-content processor in Google Chrome, which allows a hacker to trigger a service failure.

The vulnerability of the PDFium browser’s PDF-content processing component in Google Chrome browser is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially crafted web page...

How the West Got China's Social Credit System Wrong

It occupies a spot next to 'Black Mirror' and Big Brother in popular imagination, but China’s social credit project is far more complicated than a single, all-powerful numerical score...

The vulnerability of the MDC2_Update function in the OpenSSL library, which allows a hacker to trigger a service failure

The vulnerability of the MDC2Update function crypto/mdc2/mdc2dgst.c in the OpenSSL library is due to a numerical overflow condition. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

The vulnerability of the mempcpy function in libraries that handle system calls and core glibc functions allows a hacker to execute arbitrary code.

The vulnerability of the mempcpy function in the library that handles system calls and core functions of glibc is caused by a numerical overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the ntlmdecode_type2_target function in the libcurl library, which allows a hacker to cause a service failure

The vulnerability of the ntlmDecodeType2target function lib/vauth/ntlm.c in the curl library is caused by a numerical overflow. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Vulnerability of Firefox web browsers, Firefox ESR, and Thunderbird email client, related to a numerical overflow condition, allowing an attacker to perform write-offs beyond the buffer in memory.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to perform write-offs beyond the buffer in memory...

The vulnerability of the libssh2 library, caused by a numerical overflow, allows an attacker to execute arbitrary code.

The vulnerability of the libssh2 library arises due to a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code on the client system at the moment the user connects to the server...

The compatibility subsystem for running Linux applications allows the Windows Subsystem for Linux operating systems to enable attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the compatibility subsystem for running Linux applications stems from a numerical overflow. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code through a specially created application...

The compatibility subsystem for running Linux applications allows the Windows Subsystem for Linux operating systems to enable attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the compatibility subsystem for running Linux applications stems from a numerical overflow. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code using a specially created application...

The compatibility subsystem for running Linux applications allows the Windows Subsystem for Linux operating systems to enable attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the compatibility subsystem for running Linux applications stems from a numerical overflow. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code using a specially created application...

The vulnerability of the libzmq library in the messaging system ZeroMQ allows a hacker to execute arbitrary code.

The vulnerability of the libzmq library in the messaging system ZeroMQ is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the `update_read_bitmap_update` function in the RDP client FreeRDP allows a hacker to execute arbitrary code.

The vulnerability of the updatereadbitmapupdate function in the RDP client FreeRDP is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause memory corruption...

The vulnerability of the `load_specificdebug_section` function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the GNU Binutils development tool is related to a numerical overflow of the loadspecific DebugSection function in objdump.c, which results in the allocation of zero-sized memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Skia graphic library in Google Chrome web browsers allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Skia graphic library in Google Chrome’s web browser is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML...