Denial Of Service (DoS)

libcroco-0.6.so is vulnerable to denial of service. An infinite loop in the crparserparseselectorcore function in cr-parser.c allows a remote attacker to cause a denial of service condition via a crafted CSS file...

so-soest.nl XSS vulnerability

Open Bug Bounty ID: OBB-698373 Description| Value ---|--- Affected Website:| so-soest.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

Denial Of Service (DoS)

libexiv2.so is vulnerable to a denial of service DoS attack. A malicious user can pass a psd file to the application that when parsed, causes an integer overflow that can crash the application...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of serviceDoS. The attack can be caused due to a flaw in updating resourcesLength parameter in the readMetadata function of psdimage.cpp...

Denial Of Service (DoS)

libbind9.so is vulnerable to denial of service. An attacker is able to trigger an infinite recursion in lwresd and named using a non absolute name for getrrsetbyname that exceeds the maximum allowable length, resulting in a denial of service condition...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. The Exiv2::IptcData::printStructure function in iptc.cpp related to the != 0x1c case, is affected with a heap-based over-read which would allow a remote attacker to cause a denial of service condition via a crafted TIFF file...

Remote Code Execution (RCE)

libSDL-1.2.so is vulnerable to remote code execution RCE. A malicious user can pass an ILBM image to the application to cause a heap overflow, crashing the application or causing arbitrary code to be executed...

Remote Code Execution (RCE)

libSDL-1.2.so is vulnerable to remote code execution. The library does not properly check the BytePerPixel variable, allowing a malicious user to pass a crafted ico image to cause an integer overflow that can cause arbitrary code to be executed...

Denial Of Service (DoS)

libgstreamer-0.10.so is vulnerable to denial of service. A remote attacker is able to produce a floating point exception in the gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c and cause the application to crash via a crafted ASF file...

Denial Of Service (DoS)

liblcms2.so is vulnerable to denial of service. The vulnerability exists in the AllocateDataSet function of cmscgats.c because of not limiting the size of the Data from integer multiplication, leading to an attack if a malicious IT8 calibration file is passed to the second argument to...

Demarshalling With Improper Bounds Check

libspice-client-glib-2.0.so, libspice-client-gtk-2.0.so, libspice-client-gtk-3.0.so are vulnerable to demarshalling with improper bounds check. The vulnerability exists due to the lack of check where demarshalling could happen at an item position beyond the message end, leading to a denial of...

Denial Of Service

libexiv2.so is vulnerable to denial of service. The Exiv2::Internal::PngChunk::parseTXTChunk function allows remote attackers to cause a denial of service condition through a heap-based buffer over-read using a crafted image file. This CVE ID is different from CVE-2018-10999...

Denial Of Service (DoS)

libxml2.so is vulnerable to denial of service DoS attacks. The library does not make sure that the context of the objects in the stack is protected, causing an use-after-free bug that can crash the application...

Denial Of Service (DoS)

libX11.so is vulnerable to denial of service DoS attacks. A malicious user can pass a reply where the first string overflows the number of bytes transmitted, causing a variable to be set NULL, crashing the application...

Out-Of-Bounds Write

libX11.so is vulnerable to an out-of-bounds write. The server response consisting of a length byte followed by the actual string is not NULL-terminated, which could lead to an off-by-one override in the functions XGetFontPath, XListExtensions and XListFonts, and result in an out-of-bounds write...

Denial Of Service (DoS) Through Out-of-Bounds Read

libtasn1.so is vulnerable to denial of service DoS attacks. The library contains multiple missing boundary checks, allowing a malicious user to pass ASN.1 input to cause an out-of-bounds read that can crash the application...

Out-of-Bounds Access

libtasn1.so is vulnerable to out-of-bounds access. The library does not properly report if a negative bit length error occurs in the asn1getbitder function in lib/decoding.c, causing an out-of-bounds access that can crash the application or cause arbitrary code to be executed...

Denial Of Service (DoS)

libkrb5.so is vulnerable to denial of service DoS attacks. The vulnerability exists in the krb5encodekrbsecretkey function of plugins/kdb/ldap/libkdbldap/ldapprincipal2.c where authenticated users can cause DoS attacks through a series of cpw -keepold commands...

Denial Of Service (DoS)

libkrb5.so is vulnerable to denial of service DoS attacks. The vulnerability exists in the krb5gssprocesscontexttoken function of lib/gssapi/krb5/processcontexttoken.c where a terminated security-context handle could be used by authenticated users to cause a Denial of Service DoS attack...

Denial Of Service (DoS) Through Integer Underflow

libgdkpixbuf-2.0.so is vulnerable to denial of service DoS attacks. A malicious user can pass an ICO file to the loadresources function in io-icns.c to cause an integer underflow, crashing the application...