The vulnerability of the phar_parse_pharfile function (ext/phar/phar.c), a PHAR archive handler, allows a attacker to cause a service failure.

The vulnerability of the pharparsepharfile function ext/phar/phar.c, a PHAR archive handler, arises due to the execution of an operation beyond the buffer’s boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using a...

PT-2018-5316

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description A potential buffer overflow issue exists due to the hdd parse...

DEBIAN-CVE-2018-5295

In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function base/PdfXRefStreamParserObject.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file...

knot-dns/fuzz_zscanner: Index-out-of-bounds in parse

Project: https://gitlab.labs.nic.cz/knot/knot-dns Detailed report: https://oss-fuzz.com/testcase?key=4734243205808128 Project: knot-dns Fuzzer: libFuzzerknot-dnsfuzzzscanner Fuzz target binary: fuzzzscanner Job Type: libfuzzerubsanknot-dns Platform Id: linux Crash Type: Index-out-of-bounds Crash...

PT-2021-11098

Name of the Vulnerable Software and Affected Versions: libass versions prior to 0.15.0 Description: The issue is related to a stack overflow in the parse tag function in libass/ass parse.c. This allows remote attackers to cause a denial of service or potentially execute remote code via a crafted...

PT-2018-3082

Name of the Vulnerable Software and Affected Versions Android versions 5.1.1 through 8.1 Description The issue is related to the ihevcd parse sps function in ihevcd parse headers.c, which can enter an infinite loop due to negative parameter values leading to negative indexes. This can cause a...

PT-2018-3081

Name of the Vulnerable Software and Affected Versions Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 Description The issue is related to the ihevcd parse slice header function in ihevcd parse slice header.c, where a slice address of zero after the first slice could result in an...

The vulnerability of the cdc_parse_cdc_header function in the Linux operating system’s kernel allows a attacker to cause a service failure or exert other effects.

The vulnerability of the cdcparsecdcheader function in the Linux kernel’s drivers/usb/core/message.c file arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure or other adverse effects through a...

wildfly: ParseState headerValuesCache can be exploited to fill heap with garbage

It was found that JBoss EAP 7 Header Cache was inefficient. An attacker could use this flaw to cause a denial of service attack...

wildfly: ParseState headerValuesCache can be exploited to fill heap with garbage

It was found that JBoss EAP 7 Header Cache was inefficient. An attacker could use this flaw to cause a denial of service attack...

wildfly: ParseState headerValuesCache can be exploited to fill heap with garbage

It was found that JBoss EAP 7 Header Cache was inefficient. An attacker could use this flaw to cause a denial of service attack...

Fluentd vulenrable to escape sequence injection

Overview Fluentd provided by Cloud Native Computing Foundation CNCF contains an escape sequence injection vulnerability. Fluentd is an open source data collector provided by Cloud Native Computing Foundation CNCF. The parse Filter Plugin for Fluentd contains an escape sequence injection...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3657)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3657 advisory. - mm: Tighten x86 /dev/mem with zeroing reads Kees Cook Orabug: 26675925 CVE-2017-7889 - more biomapuseriov leak fixes Al Viro Orabug: 27069042...

libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c

A use-after-free flaw was found in the libxml2 library. An attacker could use this flaw to cause an application linked against libxml2 to crash when parsing a specially crafted XML file...

zw.wowcity.com XSS vulnerability

Open Bug Bounty ID: OBB-444554 Description| Value ---|--- Affected Website:| zw.wowcity.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

MGASA-2017-0414 Updated bluez packages fix security vulnerability

Buffer overflow in parseline function in the csr tool CVE-2016-7837...

DEBIAN-CVE-2017-1000231

A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors...

PT-2017-4249

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.29.1 Description The issue is related to the bfd elf parse gnu properties function in the Binary File Descriptor BFD library, which does not prevent negative pointers. This allows remote attackers to cause a denial of...

MSA vot.Ar 'parse' function unauthorized operation vulnerability

MSA vot.Ar is a suite of voting election applications. A security vulnerability exists in the 'parse' function in MSA vot.Ar version 3.1. An attacker in close physical proximity could exploit this vulnerability to cast multiple votes for a candidate with the help of a specially designed RFID voti...

Linux kernel local denial of service vulnerability (CNVD-2017-33096)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'cdcparsecdcheader' function in the drivers/usb/core/message.c file in versions of Linux kernel prior to 4.13.6. A local...