Vulnerability in packaging (CVE-2020-10733)

Windows installer runs executables from uncontrolled directories The Windows installer for PostgreSQL invokes system-provided executables that do not have fully-qualified paths. Executables in the directory where the installer loads or the current working directory take precedence over the intend...

SAP Business Client Code Issue Vulnerability

SAP Business Client is a user interface client program from SAP Germany. The program supports access to multiple SAP applications from a single platform. A code issue vulnerability exists in SAP Business Client version 7.0, which arises from an uncontrolled search path element in the program. The...

CVE-2020-6244

SAP Business Client, version 7.0, allows an attacker after a successful social engineering attack to inject malicious code as a DLL file in untrusted directories that can be executed by the application, due to uncontrolled search path element. An attacker could thereby control the behavior of the...

PT-2020-6929

Name of the Vulnerable Software and Affected Versions libcroco versions 0.6.13 and earlier Description The issue is related to the cr parser parse any core function in the cr-parser.c component of the libcroco library, which is used for working with cascading style sheets css2. It is associated...

The vulnerability of the Tricon Communications Module, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of the Tricon Communications Module is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

AZL-7337 CVE-2018-21232 affecting package re2c for versions less than 2.0-1

re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags...

CVE-2018-21232

re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags...

CVE-2018-21232

re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags. Remediation Upgrade re2c to version 2.0.3 or higher. References - GitHub Issue...

CVE-2018-21232

re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags...

CVE-2018-21232

CVE-2018-21232 concerns the re2c tool (a C/C++ recognizer generator). Versions before 2.0 contain an uncontrolled recursion in find_fixed_tags that can cause stack consumption, leading to a potential denial of service. The impact described in the sources is stack exhaustion; no exploitation detai...

Design/Logic Flaw

SHAREit through 4.0.6.177 does not check the full message length from the received packet header which is used to allocate memory for the next set of data. This could lead to a system denial of service due to uncontrolled memory allocation. This is different from CVE-2019-14941...

CVE-2019-14941

SHAREit through 4.0.6.177 does not check the body length from the received packet header which is used to allocate memory for the next set of data. This could lead to a system denial of service due to uncontrolled memory allocation...

The vulnerability of the crwimage_int.cpp component in the Exiv2 metadata management library allows a attacker to cause a service failure.

The vulnerability of the crwimageint.cpp component in the Exiv2 metadata management library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Rust programming language plugin rustdoc, which allows a hacker to execute arbitrary code

The vulnerability of the Rust programming language plugin rustdoc is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the parse_sinar_ia() function in the LibRaw image processing library allows a hacker to trigger a service failure.

The vulnerability of the parsesinaria function in the LibRaw image processing library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

EulerOS Virtualization 3.0.2.2 : glibc (EulerOS-SA-2020-1478)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2020-1388)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-0598

Uncontrolled search path in the installer for the IntelR Binary Configuration Tool for Windows, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

EulerOS 2.0 SP3 : glibc (EulerOS-SA-2020-1388)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the GNU C Library aka glibc or libc6 through 2.29, checkdstlimitscalcpos1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by...