6026 matches found
SnakeYAML 缓冲区错误漏洞
SnakeYAML is a Java-based YAML parser. SnakeYAML suffers from a buffer error vulnerability that stems from the fact that parsing untrusted YAML files may be susceptible to a denial of service attack DOS. If the parser is run on user-supplied input, an attacker can cause the parser to crash due to...
SnakeYAML 缓冲区错误漏洞
SnakeYAML is a Java-based YAML parser. SnakeYAML suffers from a buffer error vulnerability that stems from the fact that parsing untrusted YAML files may be susceptible to a denial of service attack DOS. If the parser is run on user-supplied input, an attacker can cause the parser to crash due to...
GO-2022-0963 Resource exhaustion in github.com/gagliardetto/binary
A memory allocation vulnerability can be exploited to allocate arbitrarily large slices, which can exhaust available memory or crash the program. When parsing data from untrusted sources of input e.g. the blockchain, the length of the slice to allocate is read directly from the data itself withou...
CVE-2022-36078 Slice Memory Allocation with Excessive Size Value in binary
Binary provides encoding/decoding in Borsh and other formats. The vulnerability is a memory allocation vulnerability that can be exploited to allocate slices in memory with arbitrary excessive size value, which can either exhaust available memory or crash the whole program. When using...
CVE-2022-36078 Slice Memory Allocation with Excessive Size Value in binary
Binary provides encoding/decoding in Borsh and other formats. The vulnerability is a memory allocation vulnerability that can be exploited to allocate slices in memory with arbitrary excessive size value, which can either exhaust available memory or crash the whole program. When using...
Google Chrome Window Manager Buffer Overflow Vulnerability
Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in versions of Google Chrome prior to 105.0.5195.52, which stems from a boundary error in Window Manager when handling untrusted input. An attacker can exploit the vulnerability to trick a user...
golang: regexp: stack exhaustion via a deeply nested expression
A stack overflow flaw was found in Golang's regexp module, which can crash the runtime if the application using regexp accepts very long or arbitrarily long regexps from untrusted sources that have sufficient nesting depths. To exploit this vulnerability, an attacker would need to send large...
FreeBSD : chromium -- multiple vulnerabilities (f2043ff6-2916-11ed-a1ef-3065ec8fd3ec)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f2043ff6-2916-11ed-a1ef-3065ec8fd3ec advisory. - Use after free in Network Service. CVE-2022-3038 - Use after free in WebSQL. CVE-2022-3039,...
Google Chrome 缓冲区错误漏洞
Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in versions of Google Chrome prior to 105.0.5195.52, which originates from a boundary error when handling untrusted input in the WebUI. An attacker can exploit the vulnerability to trick a user...
Google Chrome 缓冲区错误漏洞
Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in versions of Google Chrome prior to 105.0.5195.52, which stems from a boundary error in Window Manager when handling untrusted input. An attacker can exploit the vulnerability to trick a user...
Google Chrome缓冲区错误漏洞
Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in versions of Google Chrome prior to 105.0.5195.52, which stems from a boundary error when handling untrusted input in Exosphere. An attacker can exploit the vulnerability to execute arbitrary...
SUSE SLES15 Security Update : python-PyYAML (SUSE-SU-2022:2841-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2841-1 advisory. - CVE-2020-1747: Fixed an arbitrary code execution issue when parsing an untrusted YAML file with the default loader bsc1165439. -...
Microsoft Edge (Chromium-Based) Input Validation Vulnerability (Aug 2022)
This host is missing an important security update according to Microsoft Edge Chromium-Based update. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Google Chrome Intents security bypass vulnerability
Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Intents, which is caused by an untrusted input that does not adequately validate intent and can be exploited by attackers to bypass security restrictions...
New Google Chrome Zero-Day Vulnerability Being Exploited in the Wild
Google on Tuesday rolled out patches for Chrome browser for desktops to contain an actively exploited high-severity zero-day flaw in the wild. Tracked as CVE-2022-2856, the issue has been described as a case of insufficient validation of untrusted input in Intents. Security researchers Ashley She...
KLA15723 DoS vulnerability in Microsoft Browser
Validation of untrusted input vulnerability was found in Google Chrome. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2022-2856 Related products Microsoft-Edge CVE list CVE-2022-2856 high KB list Solution Install necessary updates from the...
Google Chrome 输入验证错误漏洞
Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Intents, which is caused by an untrusted input that does not adequately validate intent and can be exploited by attackers to bypass security restrictions...
SWFMill 缓冲区错误漏洞
SWFMill is a tool for working with Adobe Flash SWF files from Daniel Cassidy, a personal developer in the UK. A buffer overflow vulnerability exists in SWFMill 0.3.6 and prior versions, which stems from a boundary error in its base64encode component when processing untrusted input. An attacker...
openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10086-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10086-1 advisory. - Use after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a...