PT-2022-23228 · Fdkaac +4 · Fdkaac +4

Name of the Vulnerable Software and Affected Versions: fdkaac affected versions not specified Description: A floating point exception FPE issue was discovered in fdkaac via the wav open function at /src/wav reader.c. Recommendations: At the moment, there is no information about a newer version th...

PT-2022-12155 · Fis +3 · Fis Gt.M +3

Name of the Vulnerable Software and Affected Versions: FIS GT.M versions through V7.0-000 Description: An issue was discovered related to a lack of NULL checks in calls to ious open in sr unix/ious open.c, allowing attackers to crash the application by dereferencing a NULL pointer. Recommendation...

CVE-2021-45941

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 8 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...

PT-2021-6133 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to a Use After Free condition in the vim text editor, specifically in the ex open function located in src/ex docmd.c. This condition may allow an attacker to impact the...

DEBIAN-CVE-2021-25804

A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service DOS in the application...

The vulnerability of the process-interaction channel of the Cisco AnyConnect Secure Mobility Client encryption protection tool allows a intruder to disclose the protected information.

The vulnerability of the process-interaction channel of the Cisco AnyConnect Secure Mobility Client cryptographic security device is related to the open IPC function. Exploiting this vulnerability can allow a attacker to disclose the protected information...

kernel: possible use-after-free due to a race condition in cdev_get of char_dev.c

A use-after-free flaw was found in the way the Linux kernel's filesystem subsystem handled a race condition in the chrdevopen function. This flaw allows a privileged local user to starve the resources, causing a denial of service or potentially escalating their privileges. The highest threat from...

PT-2021-6810 · Videolan +3 · Vlc Media Player +3

Name of the Vulnerable Software and Affected Versions: VLC Media Player version 3.0.11 Description: The issue is related to a NULL-pointer dereference in the Open function within the avi.c file of the VLC Media Player. This can cause a denial of service DOS in the application, allowing a remote...

The vulnerability of the Open function in the VideoLAN VLC media player’s modules/demux/tta.c file allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Open function in the VideoLAN VLC media player’s modules/demux/tta.c file is related to numerical processing errors. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

The vulnerability of the Open function in the modules/demux/wav.c file of the Media Player software VideoLAN VLC allows a hacker to execute arbitrary code.

The vulnerability of the Open function in the VideoLAN VLC media player’s modules/demux/wav.c file is related to numerical processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted .WAV file...

CVE-2017-1000418

The WildMidiOpen function in WildMIDI since commit d8a466829c67cacbb1700beded25c448d99514e5 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

CVE-2018-20540

There is memory leak at liblas::Open liblas/liblas.hpp in libLAS 1.8.1...

libLAS Memory Disclosure Vulnerability

libLAS is a C/C++ library for reading and writing the common LAS LiDAR format. A memory leak vulnerability exists in libLAS 1.8.1 in liblas::Open liblas/liblas.hpp. No details of the vulnerability are provided at this time...

thor ruby gem command injection vulnerability

The thor ruby gem is a toolkit for building command-line applications. A command injection vulnerability exists in the thor ruby gem, which stems from the use of the open-uri 'open' function in Thor::Actionsget. An attacker could exploit this vulnerability to execute system commands...

UBUNTU-CVE-2017-1000418

The WildMidiOpen function in WildMIDI since commit d8a466829c67cacbb1700beded25c448d99514e5 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

UBUNTU-CVE-2017-11697

The hashopen function in hash.c:229 in Mozilla Network Security Services NSS allows context-dependent attackers to cause a denial of service floating point exception and crash via a crafted cert8.db file...

PT-2017-11931 · Xiph.Org +2 · Vorbis-Tools +2

Name of the Vulnerable Software and Affected Versions: vorbis-tools version 1.4.0 Description: The issue allows remote attackers to cause a denial of service, specifically a memory allocation error, by using a crafted wav file. This is related to the wav open function in oggenc/audio.c...

USN-2825-1: Oxide vulnerabilities

Multiple use-after-free bugs were discovered in the application cache implementation in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the...

CVE-2015-6782

The Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0.2526.73 does not ensure that page-dismissal event handling is compatible with modal-dialog blocking, which makes it easier for remote attackers to spoof Omnibox content via a crafted web site...

CVE-2015-6782

CVE-2015-6782 affects Google Chrome/Chromium up to version 47.0.2526.73, where Document::open in WebKit's DOM handling fails to align page-dismissal with modal-dialog blocking. This enables remote attackers to spoof Omnibox content via a crafted website. Connected sources confirm the vulnerabilit...