Lucene search
K

9 matches found

Positive Technologies
Positive Technologies
added 2026/04/03 12:0 a.m.3 views

PT-2026-30218

Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially crafted data that is processed by the driver during query operations. To remediate this issue, users should upgrade to version 2.1.0...

7.1CVSS5.9AI score0.00271EPSS
Exploits0References7
NVD
NVD
added 2025/08/26 7:15 p.m.4 views

CVE-2025-23314

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...

7.8CVSS0.00224EPSS
Exploits0References3
Prion
Prion
added 2022/12/28 7:15 a.m.15 views

Code injection

Elrond-GO is a go implementation for the Elrond Network protocol. Versions prior to 1.3.50 are subject to a processing issue where nodes are affected when trying to process a cross-shard relayed transaction with a smart contract deploy transaction data. The problem was a bad correlation between t...

6.4CVSS6.4AI score0.00724EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2022/12/28 6:27 a.m.21 views

CVE-2022-46173 Elrond go Processing: fallback search of SCRs when not found in the main cache

Elrond-GO is a go implementation for the Elrond Network protocol. Versions prior to 1.3.50 are subject to a processing issue where nodes are affected when trying to process a cross-shard relayed transaction with a smart contract deploy transaction data. The problem was a bad correlation between t...

7.2CVSS7.2AI score0.00724EPSS
Exploits0References3
OSV
OSV
added 2022/12/28 6:27 a.m.45 views

CVE-2022-46173 Elrond go Processing: fallback search of SCRs when not found in the main cache

Elrond-GO is a go implementation for the Elrond Network protocol. Versions prior to 1.3.50 are subject to a processing issue where nodes are affected when trying to process a cross-shard relayed transaction with a smart contract deploy transaction data. The problem was a bad correlation between t...

7.2CVSS6.5AI score0.00724EPSS
Exploits0References5
OSV
OSV
added 2022/10/07 6:15 p.m.3 views

CVE-2021-40163

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component...

7.8CVSS6.2AI score0.00242EPSS
Exploits0References1
CNVD
CNVD
added 2020/03/26 12:0 a.m.2 views

Multiple Apple Products Image Processing Component Resource Management Error Vulnerability

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple iPadOS is an operating system for iPad tablets. image Processing is one of the image processing Image Processing is one of the image processing components. A resource management...

9.3CVSS7.5AI score0.01279EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.5 views

Vulnerability of the Java Runtime Environment software platform, which allows a malicious attacker to compromise data confidentiality and integrity

Vulnerability of the Java Runtime Environment, related to program components. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data by using the JAXP component...

5CVSS7.1AI score0.03821EPSS
Exploits0References6Affected Software1
RedHat Linux
RedHat Linux
added 2016/01/20 7:30 p.m.2 views

OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)

It was discovered that the JAXP component in OpenJDK did not properly enforce the totalEntitySizeLimit limit. An attacker able to make a Java application process a specially crafted XML file could use this flaw to make the application consume an excessive amount of memory...

5CVSS7.2AI score0.05453EPSS
Exploits0References5
Rows per page
Query Builder