Lucene search
+L

60 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 9:06 p.m.•17 views

CVE-2021-42040

An issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control allowed for an infinite loop and php-fpm hang within the Loops extension because egLoopsCountLimit is mishandled. This could lead to memory exhaustion...

7.5CVSS6.7AI score0.01159EPSS
SaveExploits0
Veracode
Veracode
•added 2025/02/26 6:11 a.m.•17 views

Denial Of Service (DoS)

Libming is vulnerable to Denial Of Service DoS. The vulnerability is due to improper memory management due to the parseSWFDEFINESCENEANDFRAMEDATA function in util/parser.c failing to release allocated memory, allowing attackers to cause a denial of service via a crafted SWF file...

6.5CVSS6.2AI score0.00391EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2024/06/13 4:15 p.m.•53 views

CVE-2024-35328

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

SaveExploits0
CNNVD
CNNVD
•added 2024/04/29 12:00 a.m.•17 views

tftpy 安全漏洞

tftpy is a Python library by the individual developer Michael P. Soulier. A security vulnerability exists in tftpy. A remote attacker can exploit this vulnerability to cause a denial of service via a parser function in the TftpPacketFactory class...

7.5CVSS6.8AI score0.00683EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/02/16 12:00 a.m.•19 views

URLite Security Vulnerabilities

URLite is a very small, fast, dependency-free url parser and formatter for Nodejs and the Web. A security vulnerability exists in URLite version v.3.1.0, which stems from a vulnerability that allows an attacker to cause a denial of service DoS via a crafted payload to the parser function...

7.5CVSS6.6AI score0.00621EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2023/11/11 12:00 a.m.•24 views

The vulnerability in the cr parser_parse_selector_core function of the cr-parser.c library, used for working with cascade CSS2 Libcroco tables, allows a attacker to cause a service failure.

The vulnerability of the cr parserparseselectorcore function in the cr-parser.c component, a library for working with cascading CSS tables, is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failur...

7.1CVSS6.6AI score0.12996EPSS
SaveExploits4References11Affected Software3
NVD
NVD
•added 2023/10/31 4:15 p.m.•54 views

CVE-2023-46256

PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerability in the parser function due to the absence of parserbufindex value checking. A malfunction of the sensor device can cause a heap buffer overflow...

9.8CVSS6.1AI score0.0063EPSS
SaveExploits1References2
Prion
Prion
•added 2023/10/31 4:15 p.m.•37 views

Heap overflow

PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerability in the parser function due to the absence of parserbufindex value checking. A malfunction of the sensor device can cause a heap buffer overflow...

7.5CVSS9.5AI score0.0063EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2023/10/31 3:29 p.m.•66 views

CVE-2023-46256 PX4-Autopilot Heap Buffer Overflow Bug

PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerability in the parser function due to the absence of parserbufindex value checking. A malfunction of the sensor device can cause a heap buffer overflow...

4.4CVSS9.8AI score0.0063EPSS
SaveExploits1References2
OSV
OSV
•added 2023/10/31 3:29 p.m.•43 views

CVE-2023-46256 PX4-Autopilot Heap Buffer Overflow Bug

PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerability in the parser function due to the absence of parserbufindex value checking. A malfunction of the sensor device can cause a heap buffer overflow...

4.4CVSS9.3AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2023/10/31 3:29 p.m.•32 views

CVE-2023-46256 PX4-Autopilot Heap Buffer Overflow Bug

PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerability in the parser function due to the absence of parserbufindex value checking. A malfunction of the sensor device can cause a heap buffer overflow...

4.4CVSS7.3AI score0.0063EPSS
SaveExploits1References2
CVE
CVE
•added 2023/10/31 3:29 p.m.•71 views

CVE-2023-46256

CVE-2023-46256 affects PX4-Autopilot (versions 1.14.0-rc1 and prior). The vulnerability is a heap buffer overflow in the parser function caused by missing validation of the parserbuf_index, allowing writes up to the maximum unsigned int to heap memory. This can lead to unexpected drone behavior, ...

9.8CVSS7.3AI score0.0063EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/10/31 12:00 a.m.•19 views

PT-2023-29936 · Unknown · Px4-Autopilot

Name of the Vulnerable Software and Affected Versions: PX4-Autopilot versions 1.14.0-rc1 and prior Description: The issue is related to a heap buffer overflow vulnerability in the parser function of PX4-Autopilot due to the absence of parserbuf index value checking. This can cause unexpected dron...

9.8CVSS9.4AI score0.0063EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/31 12:00 a.m.•3 views

CVE-2023-46256: Heap-based Buffer Overflow

PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerability in the parser function due to the absence of parserbufindex value checking. A malfunction of the sensor device can cause a heap buffer overflow...

9.8CVSS8.2AI score0.0063EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2023/02/15 5:59 a.m.•13 views

SUSE CVE-2010-1869

Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent attackers to execute arbitrary code via a crafted PostScript file...

9.3CVSS8.3AI score0.09234EPSS
SaveExploits1References7
SUSE CVE
SUSE CVE
•added 2023/02/15 4:10 a.m.•10 views

SUSE CVE-2019-13288

In Xpdf 4.01.01, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646...

5.5CVSS9.2AI score0.04556EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/11/30 2:35 p.m.•34 views

CVE-2022-1911 Information disclosure in M-Files Server

Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated access to some information of the underlying operating system...

5.3CVSS5.5AI score0.00619EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/30 12:00 a.m.•1 views

CVE-2022-1911: Exposure of Sensitive Information to an Unauthorized Actor

Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated access to some information of the underlying operating system...

5.3CVSS5.8AI score0.00619EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/30 12:00 a.m.•20 views

PT-2022-14188

Name of the Vulnerable Software and Affected Versions M-Files Server versions before 22.6.11534.1 M-Files Server versions before 22.6.11505.0 Description The issue is related to an error in a parser function that allowed unauthenticated access to some information of the underlying operating syste...

5.3CVSS5.7AI score0.00619EPSS
SaveExploits0References6
CNVD
CNVD
•added 2022/04/25 12:00 a.m.•30 views

Accusoft ImageGear out-of-bounds write vulnerability (CNVD-2022-35417)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A security vulnerability exists in Accusoft ImageGear that originates from a boundary error when handling untrusted input in the TIFF YCbCr image parser function. An attacker can exploit the vulnerabilit...

9.8CVSS8.9AI score0.02012EPSS
SaveExploits1References1
Rows per page
Query Builder