ClamAV HFS+ Syntax Analyzer Resource Leak

The vulnerability of the syntax analyzer for the Hierarchical File System Plus HFS+ ClamAV is related to improper cleaning or release of resources. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted version of the HFS+ file system image...

YANG Libyang Heap Buffer Overflow DoS

The vulnerability of the lysnodefree function in the syntax analyzer and modeling tool of the YANG Libyang language is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Apache PDFBox XXE

The vulnerability of the XML syntax analyzer in the Apache PDFBox Java library is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks using a specially created XFDF file...

Cisco IOS Command Syntax Analyzer Access Disclosure

The vulnerability of the command syntax analyzer in Cisco IOS and Cisco IOS XE operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information...

Cisco NX-OS Syntax Analyzer Command Execution

The vulnerability of the syntax analyzer in Cisco NX-OS exists due to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands with root privileges...

Libyang Buffer Overflow DoS

The vulnerability of the syntax analyzer and the YANG data modeling language toolset lies in the writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

tcpdump Syntax Analyzer DoS

The vulnerability of the syntax analyzer in the tcpdump tool, a tool for intercepting and analyzing network traffic, is related to the execution of read operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

XML Platform Unprotected Access

The vulnerability of the XML syntax analyzer on the SAP Enable Now platform, which is designed to improve the effectiveness of educational materials and documentation, is related to errors in XML link restrictions. Exploiting this vulnerability could allow an attacker to gain unauthorized access ...

Microsoft XML Core Services Code Execution

The vulnerability of the syntactic analyzer of the Microsoft XML Core Services for Windows operating systems is related to errors in restricting XML references to external objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

LQS File Code Execution

The vulnerability of the LQS syntax analyzer in data collection files and in LAquis SCADA, a tool for industrial automation control, is related to the use of pointers. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

syntax analyzer Heap Buffer Overflow Read Beyond Buffer

The vulnerability of the software tool’s syntax analyzer for interacting with servers using curl is related to an error during registration on the server using the FTP protocol. Exploiting this vulnerability allows a malicious actor to gain access to data beyond the boundaries of the allocated...