2575 matches found
Input validation
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly, resulting in a denial of...
GHSA-7F6X-JWH5-M9R4 Cranelift vulnerable to miscompilation of constant values in division on AArch64
Impact There was a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors could result in incorrect division results at runtime. The translation rules for constants did not take into account whether sign- or zero-extension should happen, which resulted in an...
The vulnerability of the Red Database database management system lies in the improper handling of unexpected data types, which allows attackers to trigger service failures.
The vulnerability of the Red Database database management system is related to the improper handling of unexpected data types. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending an incorrect page number to the server during replication...
About the security content of macOS Monterey 12.5
About the security content of macOS Monterey 12.5 This document describes the security content of macOS Monterey 12.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...
About the security content of watchOS 8.7
About the security content of watchOS 8.7 This document describes the security content of watchOS 8.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
Oracle Linux 9 : qemu-kvm (ELSA-2022-5263)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5263 advisory. - Resolves: bz2075635 CVE-2022-26353 qemu-kvm: QEMU: virtio-net: map leaking on error during receive rhel-9 rhel-9.0.0.z - Resolves: bz2075640...
_initiate() function can be called multiple times at GovernorBravoDelegate.sol
Lines of code Vulnerability details Impact initiate function is supposed to be called only once, but it can be called many times which are not expected behavior. Proof of Concept function initiate external requiremsg.sender == admin, "GovernorBravo::initiate: admin only"; requireinitialProposalId...
CVE-2022-31045
A flaw was found in Istio. Memory access violation of ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access, resulting in undefined behavior or crashing...
Unused Return
Lines of code Vulnerability details Impact Configuration Check: unused-return Severity: Medium Confidence: Medium Description: The return value of this external call is not stored in a local or state variable. Unused return values of function calls are indicative of programmer errors which may ha...
CVE-2022-32138
In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite...
CVE-2021-41490
Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior...
CVE-2021-41490
Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior...
CVE-2021-41490
Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior...
CVE-2021-41490
Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior...
CVE-2021-41490
Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior...
CVE-2021-41490
Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior...
CVE-2022-22068
kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
CVE-2022-22068
CVE-2022-22068 affects Qualcomm/ Snapdragon kernel components. The issue arises when a kernel event contains content not generated by NPU software during asynchronous execution, potentially enabling local escalation of privileges with high impact (confidentiality, integrity, and availability all ...
GHSA-XWX5-5C9G-X68X Ill-formed headers may lead to unexpected behavior in Istio
Impact Ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. You are at most risk if you have an Istio ingress Gateway exposed to external traffic. Patches 1.12.8, 1.13.5, 1.14.1 Workarounds No. References More...
Ill-formed headers may lead to unexpected behavior in Istio
Impact Ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. You are at most risk if you have an Istio ingress Gateway exposed to external traffic. Patches 1.12.8, 1.13.5, 1.14.1 Workarounds No. References More...