7291 matches found
The vulnerability of the shift_line() function in the Vim text editor, allowing a hacker to trigger a service failure
The vulnerability of the shiftline function in the Vim text editor is related to the use of extremely large values during row shifting. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Important: thunderbird
Issue Overview: AppendEncodedAttributeValue, ExtraSpaceNeededForAttrEncoding and AppendEncodedCharacters could have experienced integer overflows, causing underallocation of an output buffer leading to an out of bounds write. This vulnerability affects Firefox 124, Firefox ESR 115.9, and...
GHSA-39FP-MQMM-GXJ6 CodeIgniter4 DoS Vulnerability
Impact A vulnerability was found in the Language class that allowed DoS attacks. This vulnerability can be exploited by an attacker to consume a large amount of memory on the server. Patches Upgrade to v4.4.7 or later. See upgrading guide. Workarounds - Disabling Auto Routing prevents a known...
CVE-2024-30246 Tuleap deleting or moving an artifact can delete values from unrelated artifacts
Tuleap is an Open Source Suite to improve management of software developments and collaboration. A malicious user could exploit this issue on purpose to delete information on the instance or possibly gain access to restricted artifacts. It is however not possible to control exactly which...
CVE-2024-28867
Swift Prometheus is a Swift client for the Prometheus monitoring system, supporting counters, gauges and histograms. In code which applies un-sanitized string values into metric names or labels, an attacker could make use of this and send a ?lang query parameter containing newlines, or similar...
CVE-2024-28867 Swift Prometheus un-sanitized metric name or labels can be used to take over exported metrics
Swift Prometheus is a Swift client for the Prometheus monitoring system, supporting counters, gauges and histograms. In code which applies un-sanitized string values into metric names or labels, an attacker could make use of this and send a ?lang query parameter containing newlines, or similar...
CVE-2024-28013
Use of Insufficiently Random Values vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP,...
CVE-2024-28013
Use of Insufficiently Random Values vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP,...
CVE-2024-28013
Use of Insufficiently Random Values vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP,...
CVE-2024-28013
CVE-2024-28013 concerns NEC Aterm devices (e.g., WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP2, WG1200HS, WG1800HP, W1200EX-MS, CR2500P, WR8200N, WM3800R, WG1810HP, MR01LN, MR02LN, and many other WG/WG/WF/WR/WL models) where the vulnerability stems from Use of Insufficiently Random Values. The issue...
NEC Aterm 安全漏洞
NEC Aterm is a series of wireless routers from Japan Electric NEC. A security vulnerability exists in NEC Aterm that stems from insufficient random values. The following products are affected: WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS,...
The vulnerability of the Mozilla Firefox browser, related to incorrect processing of WASM register values, allows a hacker to execute arbitrary code.
The vulnerability of the Mozilla Firefox browser is related to incorrect processing of WASM register values. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Rocky Linux 8 : thunderbird (RLSA-2024:1494)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:1494 advisory. - NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the...
Oracle Linux 7 : thunderbird (ELSA-2024-1498)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-1498 advisory. 115.9.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 115.9.0-1 - Update to...
DEBIAN-CVE-2021-47138
In the Linux kernel, the following vulnerability has been resolved: cxgb4: avoid accessing registers when clearing filters Hardware register having the server TID base can contain invalid values when adapter is in bad state for example, due to AER fatal error. Reading these invalid values in the...
Return-Oriented Programming(ROP)
thunderbird:sid, firefox-esr:sid is vulnerable to Return-Oriented ProgrammingROP. The vulnerability is due to improper handling of return registers, potentially allowing attackers to execute arbitrary code by overwriting them with controlled values...
Improper Input Validation
firefox is vulnerable to Improper Input Validation. The vulnerability is due to improper data handling leading to the creation of invalid Wasm values, potentially converting arbitrary integers into pointer values...
USN-6709-1 openssl1.0 vulnerabilities
It was discovered that checking excessively long DH keys or parameters may be very slow. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, resulting in a denial of service. CVE-2023-3446 After the fix for CVE-2023-3446 Bernd Edlinger discovered that a large q...
CVE-2024-2610
The Mozilla Foundation Security Advisory describes this flaw as: Using a markup injection an attacker could have stolen nonce values. This could have been used to bypass strict content security policies...
