6947 matches found
Mozilla: IndexedDB files retained in private browsing mode
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: If the browser.privatebrowsing.autostart preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox...
Hirschmann HiOS Switches Classic Buffer Overflow (CVE-2019-12261)
The impact of this vulnerability is a buffer overflow of up to a full TCP receive-window by default, 10k-64k depending on version. The buffer overflow happens in the task calling recv/recvfrom/recvmsg. Applications that pass a buffer equal to or larger than a full TCP-window are not susceptible t...
Hirschmann HiOS Switches Classic Buffer Overflow (CVE-2019-12260)
This vulnerability could lead to a buffer overflow of up to a full TCP receive-window by default, 10k-64k depending on version. The buffer overflow happens in the task calling recv/recvfrom/recvmsg. Applications that pass a buffer equal to or larger than a full TCP-window are not susceptible to...
AZL-43167 CVE-2024-37535 affecting package vte291 for versions less than 0.74.2-6
GNOME VTE before 0.76.3 allows an attacker to cause a denial of service memory consumption via a window resize escape sequence, a related issue to CVE-2000-0476...
AZL-42631 CVE-2024-37535 affecting package vte291 for versions less than 0.66.2-3
GNOME VTE before 0.76.3 allows an attacker to cause a denial of service memory consumption via a window resize escape sequence, a related issue to CVE-2000-0476...
CVE-2024-37535
GNOME VTE before 0.76.3 allows an attacker to cause a denial of service memory consumption via a window resize escape sequence, a related issue to CVE-2000-0476...
CVE-2024-37535
GNOME VTE before 0.76.3 allows an attacker to cause a denial of service memory consumption via a window resize escape sequence, a related issue to CVE-2000-0476...
CVE-2024-37535
GNOME VTE before 0.76.3 allows an attacker to cause a denial of service memory consumption via a window resize escape sequence, a related issue to CVE-2000-0476...
CVE-2024-37535
GNOME VTE before 0.76.3 allows an attacker to cause a denial of service memory consumption via a window resize escape sequence, a related issue to CVE-2000-0476...
GNOME VTE Security Vulnerability
GNOME VTE is an open source library for GNOME. A security vulnerability exists in GNOME VTE versions prior to 0.76.3, which originates from an attacker being able to cause a denial of service by sending a window resize escape sequence...
CVE-2024-37535
The GNOME VTE terminal emulation library (vte291) is vulnerable to an uncontrolled resource consumption flaw in versions prior to 0.76.3 . An attacker can trigger a denial of service (DoS) via excessive memory consumption by using a specific window resize escape sequence, a regression related to ...
CVE-2024-37535
GNOME VTE before 0.76.3 allows an attacker to cause a denial of service memory consumption via a window resize escape sequence, a related issue to CVE-2000-0476...
CVE-2024-37535: Uncontrolled Resource Consumption
GNOME VTE before 0.76.3 allows an attacker to cause a denial of service memory consumption via a window resize escape sequence, a related issue to CVE-2000-0476...
PT-2024-27633 · Gnome +5 · Gnome Vte +5
Name of the Vulnerable Software and Affected Versions: GNOME VTE versions prior to 0.76.3 Description: The issue allows an attacker to cause a denial of service, specifically memory consumption, via a window resize escape sequence. This is related to a historical issue. Recommendations: For...
UBUNTU-CVE-2024-37535
GNOME VTE before 0.76.3 allows an attacker to cause a denial of service memory consumption via a window resize escape sequence, a related issue to CVE-2000-0476...
SUSE CVE-2024-26761
In the Linux kernel, the following vulnerability has been resolved: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window The Linux CXL subsystem is built on the assumption that HPA == SPA. That is, the host physical address HPA the HDM decoder registers are programmed wi...
PT-2024-40167
Name of the Vulnerable Software and Affected Versions: TYPO3 affected versions not specified Description: The issue arises from the failure to properly encode user input, making notifications shown in modal windows in the TYPO3 backend susceptible to cross-site scripting. A valid backend user...
[SECURITY] Fedora 40 Update: qt5-qtx11extras-5.15.14-1.fc40
The X11 Extras module provides features specific to platforms using X11, e.g. Linux and UNIX-like systems including embedded Linux systems that use the X Window System...
SUSE CVE-2024-36926
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE At the time of LPAR boot up, partition firmware provides Open Firmware property ibm,dma-window for the PE. This property is provided on the PCI bus the PE is...
DEBIAN-CVE-2024-36926
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE At the time of LPAR boot up, partition firmware provides Open Firmware property ibm,dma-window for the PE. This property is provided on the PCI bus the PE is...