ehttp Security Vulnerabilities

ehttp is a library by the Chinese developer hongliuliao. A security vulnerability exists in versions prior to ehttp 1.0.6, which stems from a post-release reuse in the readfunc function in epollsocket.cpp, resulting in memory corruption...

The vulnerability of the Read() function in the open-source cryptographic algorithm library Circl allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Read function in the open-source cryptographic algorithm library Circl is related to insufficient validation of input data and the failure to eliminate instructions in dynamically executed code. Exploiting this vulnerability can allow attackers to compromise the...

PT-2023-35548 · Git +1 · Igraph

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including igraph strvector set len, igraph strvect...

The vulnerability of the avi_read function (media_tools/avilib.c:67) in the GPAC multimedia platform allows a hacker to induce a service failure.

The vulnerability of the aviread function mediatools/avilib.c:67 in the GPAC multimedia platform is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure...

SAP Host Agent Information Disclosure Vulnerability (CNVD-2023-65176)

SAP Host Agent is a set of agent programs from SAP that supports a number of lifecycle management tasks such as operating system monitoring, database monitoring and system instance monitoring. An information disclosure vulnerability exists in SAP Host Agent that stems from a lack of authenticatio...

SAP Host Agent 授权问题漏洞

SAP Host Agent is a set of agent programs from SAP that supports a number of lifecycle management tasks such as operating system monitoring, database monitoring and system instance monitoring. An information disclosure vulnerability exists in SAP Host Agent that stems from a lack of authenticatio...

The vulnerability of the MP4SdpAtom::Read() function in the atom_sdp.cpp component of the library for creating, modifying, and reading MP4 files, mp4v2, allows a malicious actor to cause a service failure.

The vulnerability of the MP4SdpAtom::Read function in the atomsdp.cpp component of the library for creating, modifying, and reading MP4 files in mp4v2 is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

Denial Of Service (DoS)

github.com/corazawaf/coraza is vulnerable to Denial Of Service DoS. The vulnerability exists in the Read function of multipart.go due to misuse of the log.Fatalf function, which allows an attacker to cause an application crash by providing maliciously crafted requests...

CVE-2023-35862

libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...

CVE-2023-33719

mp4v2 v2.1.3 was discovered to contain a memory leak via MP4SdpAtom::Read at atomsdp.cpp...

CVE-2020-19692

Buffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attacker to execute arbitrary code via the njsmoduleread in the njsmodule.c file...

Nginx 安全漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx, Inc. in the United States. njs is one of the scripting language components that supports extended NGINX functionality. A security vulnerability exists in Nginx NJS v.0feca92. An attacker can exploi...

PT-2023-19993

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.12.5 Description A heap-based buffer overflow issue exists via the bit read RC function at bits.c. Recommendations For GNU LibreDWG version 0.12.5, consider disabling the bit read RC function as a temporary workaround...

SUSE CVE-2012-2110

The asn1d2ireadbio function in crypto/asn1/ad2ifp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service memory corruption or possibly have...

SUSE CVE-2014-1593

Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code via crafted media content...

SUSE CVE-2015-8789

Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document...

SUSE CVE-2018-13876

An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer overflow in the function H5FDsec2read in H5FDsec2.c, related to HDread...

SUSE CVE-2019-9036

An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a heap-based buffer overflow in the function ReadNextFunctionHandle in mat5.c...

SUSE CVE-2019-12217

An issue was discovered in libSDL2.a in Simple DirectMedia Layer SDL 2.0.9 when used in conjunction with libSDL2image.a in SDL2image 2.0.4. There is a NULL pointer dereference in the SDL stdioread function in file/SDLrwops.c...

SUSE CVE-2020-36476

An issue was discovered in Mbed TLS before 2.24.0 and before 2.16.8 LTS and before 2.7.17 LTS. There is missing zeroization of plaintext buffers in mbedtlssslread to erase unused application data from memory...