4246 matches found
PT-2021-10532
Name of the Vulnerable Software and Affected Versions: GilaCMS version 1.11.4 Description: The issue is related to a SQL injection vulnerability. It occurs via the $ GET parameter in the /src/core/controllers/cm.php file. This allows for potential exploitation. Recommendations: For GilaCMS versio...
Prototype Pollution
zrender is vulnerable to prototype pollution. An attacker is able to inject malicious property using merge and clone helper methods in the src/core/util.ts causing prototype pollution via proto...
The vulnerability of the testcase_read() function in the src/testcase.c component of the Libsolv library, which is related to buffer overflow in memory, allows a attacker to cause a service failure.
The vulnerability of the testcaseread function in the src/testcase.c component of the Libsolv library is related to buffer overflow in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
CVE-2021-39227
ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to 5.2.1, using "merge" and "clone" helper methods in the "src/core/util.ts" module results in prototype pollution. It affects the popular data visualization library Apache ECharts, which uses and...
CVE-2021-39227: Improperly Controlled Modification of Object Prototype Attributes
ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to 5.2.1, using merge and clone helper methods in the src/core/util.ts module results in prototype pollution. It affects the popular data visualization library Apache ECharts, which uses and exports...
Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
...
CVE-2021-33930
Buffer overflow vulnerability in function poolinstallablewhatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service...
CVE-2021-33928
Buffer overflow vulnerability in function poolinstallable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service...
CVE-2021-33928: Out-of-bounds Write
Buffer overflow vulnerability in function poolinstallable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service...
GHSA-QGM6-9472-PWQ7 Integer Overflow in openssl-src
Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 indicating succes...
CVE-2020-18971
Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65'...
CVE-2020-18971: Out-of-bounds Write
Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65'...
CVE-2020-18972: Exposure of Resource to Wrong Sphere
Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive information via 'IsNextToken' in the component 'src/base/PdfToenizer.cpp'...
CVE-2021-38714: Integer Overflow or Wraparound
In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA function in src/ssg/ssgLoadTGA.cxx file...
CVE-2020-18735
A heap buffer overflow in /src/ddsstream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash...
CVE-2020-18735
CVE-2020-18735 relates to Eclipse IoT Cyclone DDS Project v0.1.0, with a heap buffer overflow in /src/dds_stream.c that causes the DDS subscriber server to crash. The connected documents confirm the root cause and the vulnerable file, and consistently describe a crash as the impact. No exploitati...
PT-2021-10230
Name of the Vulnerable Software and Affected Versions: Eclipse IOT Cyclone DDS Project version 0.1.0 Description: A heap buffer overflow in the /src/dds stream.c file causes the DDS subscriber server to crash. Recommendations: For Eclipse IOT Cyclone DDS Project version 0.1.0, consider disabling...
The vulnerability of the Thunderbird email client, related to the disclosure of information, allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Thunderbird email client is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through the src attribute...
