662 matches found
Cross-site Scripting (XSS)
contao/core-bundle is vulnerable to cross-site scripting. The vulnerability exists in the prepare function of PageRegular.php, allowing an attacker to inject and execute malicious javascript through the canonical tags...
PT-2022-37956
Уязвимость функции ath9k rx prepare модуля drivers/net/wireless/ath/ath9k/htc drv txrx.c драйвера поддержки адаптеров беспроводной связи Atheros/Qualcomm ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю получить доступ к...
PT-2022-36865
Name of the Vulnerable Software and Affected Versions vips affected versions not specified Description The issue is related to a heap-buffer-overflow read, which occurs in the vips rect intersectrect function, specifically when calling vips foreign load pdf generate and vips region prepare to...
DEBIAN-CVE-2021-26252
A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in pspdfpreparepage,in ps-pdf.cxx may lead to execute arbitrary code and denial of service...
CVE-2021-26252
A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in pspdfpreparepage,in ps-pdf.cxx may lead to execute arbitrary code and denial of service...
CVE-2021-40413
An incorrect default permission vulnerability exists in the cgiserver.cgi cgicheckability functionality of reolink RLC-410W v3.0.0.13620121102. The UpgradePrepare is the API that checks if a provided filename identifies a new version of the RLC-410W firmware. If the version is new, it would be...
VulnCheck KEV: CVE-2017-14723
Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb-prepare, and thus did not properly address the possibility of plugins and themes enabling SQL injection attacks...
PT-2025-8479
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak has been identified in the Linux kernel, specifically in the x86/kexec component. The issue arises from the crash prepare elf64 headers function, where a buffer allocated v...
Denial Of Service (DoS)
glib2 is vulnerable to denial of service. It is possible due to a heap-buffer-overflow in tokenstreamprepare on glib/gvariant-parser.c...
PT-2022-3327 · Mariadb +7 · Mariadb +8
Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.4 through 10.7 Description: The issue is related to a buffer overflow in the prepare inplace add virtual function of the MariaDB database management system. This could allow a remote attacker to impact the confidentiality,...
User prepare can be denied
Handle cmichel Vulnerability details Vulnerability Details Upon observing a prepare transaction, an attacker can frontrun it with the same invariantData but an amount of a single wei. This inserts a value into variantTransactionDatadigest and the original transcation will fail because of the...
HTMLDOC 缓冲区错误漏洞
HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript, and PDF formats.HTMLDOC is vulnerable to a buffer error vulnerability that originates from a boundary error in the pspdfpreparepage function ps-pdf.cxx. A remote attacker could use this...
PT-2021-24754
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to a PM reference leak in the lpspi prepare xfer hardware function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-28748
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to a PM reference leak in the lpspi prepare xfer hardware function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-28897
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.119 Description The issue is related to a PM reference leak in the lpspi prepare xfer hardware function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-24903
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.119 Description: The issue is related to a PM reference leak in the lpspi prepare xfer hardware function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...
PT-2021-24853
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue is related to a PM reference leak in the lpspi prepare xfer hardware function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...
PT-2021-28847
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue is related to a PM reference leak in the lpspi prepare xfer hardware function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
Division by zero in TFLite's implementation of `SpaceToDepth`
Impact The Prepare step of the SpaceToDepth TFLite operator does not check for 0 before division. cc const int blocksize = params-blocksize; const int inputheight = input-dims-data1; const int inputwidth = input-dims-data2; int outputheight = inputheight / blocksize; int outputwidth = inputwidth ...
PYSEC-2021-515
TensorFlow is an end-to-end open source platform for machine learning. The Prepare step of the SpaceToDepth TFLite operator does not check for 0 before divisionhttps://github.com/tensorflow/tensorflow/blob/5f7975d09eac0f10ed8a17dbb6f5964977725adc/tensorflow/lite/kernels/spacetodepth.ccL63-L67. An...