CVE-2020-36420

Polipo through 1.1.1, when NDEBUG is omitted, allows denial of service via a reachable assertion during parsing of a malformed Range header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

UBUNTU-CVE-2020-36420

Polipo through 1.1.1, when NDEBUG is omitted, allows denial of service via a reachable assertion during parsing of a malformed Range header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2020-36420

Polipo through 1.1.1, when NDEBUG is omitted, allows denial of service via a reachable assertion during parsing of a malformed Range header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2020-36420

Removed by vendor...

CVE-2020-36420

CVE-2020-36420 affects Polipo up to version 1.1.1. When NDEBUG is omitted, parsing a malformed Range header can trigger a reachable assertion, causing a denial of service. This is described in multiple connected sources (NVD entry and Nessus/Red Hat/OSV/etc.), which consistently note the vulnerab...

PT-2021-6719 · Polipo · Polipo

Name of the Vulnerable Software and Affected Versions: Polipo versions 1.1.1 and earlier Description: The issue is related to the insufficient use of the assert function in the Polipo proxy server, allowing a remote attacker to cause a denial of service. This can be achieved by parsing a malforme...

Polipo 安全漏洞

Polipo is a small proxy server software. A security vulnerability exists in Polipo that allows denial of service via reachable assertions when parsing an incorrectly formatted Range header...

putil-merge 安全漏洞

putil-merge is an open source solution for merging two or more objects. It supports deep merging, cloning attributes, copying descriptors and filtering. A security vulnerability exists in putil-merge, which stems from a prototype contamination vulnerability in "putil-merge" versions 1.0.0 through...

The vulnerability of the search_in_range function in the Oniguruma library, related to reading beyond the permissible buffer limits, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the searchinrange function in the Oniguruma library relates to integer overflow of values. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the DeepScanLineInputFile() function in software for storing images with wide dynamic range brightness in OpenEXR, related to memory usage after deallocation, allows a hacker to cause a service failure.

The vulnerability of the DeepScanLineInputFile function in software for storing images in OpenEXR format with a wide dynamic range of brightness levels is related to the use of memory areas after they are freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

SAP NetWeaver AS ABAP 代码注入漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides web services, but is also the basic platform for SAP software. A security vulnerability exists in SAP NetWeaver AS ABAP, which originates from a code injection in the product. The following products and versions a...

The vulnerability of the getChunkOffsetTableSize() function in software for storing OpenEXR images with a wide dynamic range in brightness levels, related to out-of-buffer writing, allows attackers to cause service interruptions.

The vulnerability of the getChunkOffsetTableSize function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the operation exceeding the allowable buffer data size. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ImfOptimizedPixelReading.h library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from reading data beyond the acceptable buffer limit. This allows attackers to cause service interruptions.

The vulnerability of the ImfOptimizedPixelReading.h library, which is used in software for storing images with wide dynamic range brightness in OpenEXR format, relates to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service...

PT-2021-15273 · Brave · Brave Desktop

Name of the Vulnerable Software and Affected Versions: Brave Desktop versions 1.17 through 1.26.60 Description: The issue occurs when adblocking is enabled and a proxy browser extension is installed in Brave Desktop. The CNAME adblocking feature makes DNS requests using the system DNS settings...

The vulnerability of the storeSSE function in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, allows attackers to access confidential information or cause service failures.

Vulnerability of the storeSSE function in software for storing images with wide dynamic range brightness in OpenEXR format. Exploitation of this vulnerability allows a remote attacker to access confidential information or cause service failures...

CVE-2021-25952

Prototype pollution vulnerability in ‘just-safe-set’ versions 1.0.0 through 2.2.1 allows an attacker to cause a denial of service and may lead to remote code execution...

PT-2021-16928 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.0.0 through 3.9.27 Description: An issue was discovered in the JForm API, where inadequate escaping in the rules field leads to a XSS vulnerability. Recommendations: For versions 3.0.0 through 3.9.27, update to a version th...

just-safe-set 安全漏洞

just-safe-set is an npm module library. A security vulnerability exists in just-safe-set 1.0.0 through 2.2.1, which can be exploited by an attacker to cause a denial of service and possibly remote code execution...

Joomla! 代码问题漏洞

Joomla! is a set of forum components used in the Joomla! content management system. A code issue vulnerability exists in Joomla! 2.5.0 - 3.9.27. The vulnerability stems from a hard-coded ACL check for superuser missing from the install operation in cominstaller, which can be exploited to execute...

PT-2021-16929 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 2.5.0 through 3.9.27 Description: An issue was discovered in Joomla! where missing validation of input could lead to a broken usergroups table. Recommendations: For Joomla! versions 2.5.0 through 3.9.27, update to a version...