11491 matches found
The vulnerability of the DwaCompressor component of the image storage software for OpenEXR files, which has a wide dynamic range of brightness levels, leads to uncontrolled resource consumption. This allows attackers to cause system failures.
The vulnerability of the DwaCompressor component of the image storage software for OpenEXR files, which supports a wide dynamic range of brightness levels, is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
EulerOS 2.0 SP3 : squid (EulerOS-SA-2021-2618)
According to the versions of the squid packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a buffer-management bug, it allows a denial of service. When resolving ...
CLSA-2021-1634922702 Fixed CVE-2021-2388 in java-1.8.0-openjdk
Fix CVE-2021-2388 OpenJDK: Incorrect comparison during range check elimination...
Online Course Registration 1.0 - Blind Boolean-Based SQL Injection Exploit
Exploit Title: Online Course Registration 1.0 - Blind Boolean-Based SQL Injection Authenticated Exploit Author: Sam Ferguson @AffineSecurity and Drew Jones @qhum7sec Vendor Homepage: https://www.sourcecodester.com/php/14251/online-course-registration.html Software Link:...
DEBIAN-CVE-2021-42715
An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stbimage by submitting crafted HDR files...
UBUNTU-CVE-2021-42715
An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stbimage by submitting crafted HDR files...
CVE-2021-39126
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources via a Cross-Site Request Forgery CSRF vulnerability, following an Information Disclosure vulnerability in the referrer headers which discloses a user's CSRF token. The affected versions a...
stb 安全漏洞
stb is a single-file public domain library for C/C. stbimage.h is one of the image loaders. stb stbimage.h contains a security vulnerability that stems from the HDR loader parsing truncated file-tailed RLE scan lines into an infinitely long zero-length sequence. An attacker could cause a denial o...
CVE-2021-42764
The Proof-of-Stake PoS Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service delayed consensus decisions, and also increase the profits of individual validators, via short-range reorganizations of the underlying consensus chain...
CVE-2021-42766
The Proof-of-Stake PoS Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service long-range consensus chain reorganizations, even when this adversary has little stake and cannot influence network message propagation. This can cause a protocol stall, or an...
CVE-2021-42764
Technical details (affected components, root cause, impacted versions, fixes) are not publicly available in the provided documents; monitor for updates.
CVE-2021-2482
Vulnerability in the Oracle Payables product of Oracle E-Business Suite component: Invoice Approvals. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payables. Successful...
CVE-2021-3889
libmobi is vulnerable to Use of Out-of-range Pointer Offset...
CVE-2021-3888
libmobi is vulnerable to Use of Out-of-range Pointer Offset...
CVE-2021-3889
libmobi is vulnerable to Use of Out-of-range Pointer Offset...
Null pointer dereference
libmobi is vulnerable to Use of Out-of-range Pointer Offset...
CVE-2021-3888
libmobi is vulnerable to Use of Out-of-range Pointer Offset...
CVE-2021-3889
libmobi is vulnerable to Use of Out-of-range Pointer Offset...
CVE-2021-3889
CVE-2021-3889 affects Libmobi, a C library for MOBI/Kindle formats. Connected sources describe an out-of-bounds read in mobi_decompress_huffman_internal caused by unsafe Huffman code_length handling, leading to a heap-buffer-overflow and potential memory disclosure or crash when processing input....
