ImageMagick Pointer Manipulation DoS

The vulnerability of the console-based graphic editor ImageMagick is related to the use of pointers. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ImageMagick Memory Leak DoS

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow an attacker to cause a service failure...

GNU C Library Code Execution

The vulnerability of the nsprintrrf, nsprintrr, and fpnquery functions in the GNU C Library lies in their reliance on buffer overflow attacks. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

ImageMagick Buffer Overflow Code Execution

The vulnerability of the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ImageMagick Decoder DoS

The vulnerability of the ICON console-based image editing tool ImageMagick relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ImageMagick DoS

The vulnerability of the console-based graphic editor ImageMagick is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick Encoder DoS

The vulnerability of the SF3 encoder in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Apache Camel WebSocket Component Disclosure

The vulnerability of the sendEventNotification and getQueryMap functions in the WebsocketConsumer class of the camel-atmosphere-websocket component of the Apache Camel framework is related to insufficient validation of input data during the processing of WebSocket request parameters. Exploiting...

RDPEAR NDR RDP-client Parser DoS

The vulnerability of the RDPEAR NDR RDP-client FreeRDP lies in a memory reclamation error. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the avidmxprocess function in the filters/dmxavi.c file of the MP4Box packaging tool for the GPAC multimedia platform is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

MP4Box gf_filter_pid_get_packet Heap Buffer Overflow DoS

The vulnerability of the gffilterpidgetpacket function in the /filtercore/filterpid.c file of the MP4Box multiplexer for GPAC multimedia platform is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure by...

Linux Flow Dissector DoS

The vulnerability in the net/core/flowdissector.c module of the Linux operating system is related to data type mixing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

YARD Path Traversal

The vulnerability of the YARD tool for generating and hosting documentation in the Ruby programming language is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Linux Heap Buffer Overflow DoS

The vulnerability of the rtwcbufalloc function in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

NGINX Plus/Open Source SSI Module Memory Modification DoS

The vulnerability of the ngxhttpssimodule module in NGINX Plus and NGINX Open Source HTTP servers relates to the possibility of using memory after it is freed. Exploiting this vulnerability allows a remote attacker to modify the memory contents of the working process or cause service failures...

D-Link DNS-120 CGI Check RCE

The vulnerability of the cgicheckrsyncrw function in the script /cgi-bin/remotebackup.cgi of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and...

Linux XFS Buffer Overflow DoS

The vulnerabilities of the functions xfsreflinkfillcowhole and xfsreflinkfilldelalloc in the fs/xfs/xfsreflink.c module of the Linux operating system’s file system are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to compromise...

IggyFetchRecords Component Disclosure

The vulnerability of the createExchange function in the IggyFetchRecords class of the camel-iggy component of the Apache Camel framework is related to insufficient validation of input data when processing user-defined message headers. Exploiting this vulnerability could allow an attacker to...

UndertowComponent Class Disclosure

The vulnerability of the UndertowComponent class in the camel-undertow framework from Apache Camel is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that should be protected...

FreeRDP planar_decompress_plane_rle RCE

The vulnerability of the planardecompressplanerle function in the FreeRDP RDP client is related to buffer overflow attacks. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

ImageMagick Decoder DoS

The vulnerability of the DCM decoder in the console-based image editing tool ImageMagick is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

Oracle WebLogic Server Data Compromise

The vulnerability of the Oracle WebLogic Server application server’s kernel is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information using the SAML protoc...

FoxitPDFReaderUpdater Update Privilege Escalation

The vulnerability of the FoxitPDFReaderUpdater.exe service, a tool for viewing electronic documents in PDF format within the Foxit PDF Reader formerly Foxit Reader and the Foxit PDF Editor formerly Foxit PhantomPDF, is related to an uncontrolled pathfinding mechanism. Exploiting this vulnerabilit...

XZ Decoder Heap Buffer Overflow DoS

The vulnerability of the MixCoderCode function in the XZ Decoder component of the 7-Zip archive processor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gffilterpidinstswapdeletetask function in the filtercore/filterpid.c file of the MP4Box package for the GPAC multimedia platform is related to a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Libexif Integer Overflow DoS

The vulnerability of the library for EXIF-file grammar analysis in Libexif is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

GNU C Library Heap Buffer Overflow DoS

The vulnerability of the nsprintrrf, nsprintrr, and fpnquery functions in the GNU C Library lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ImageMagick Uncontrolled Recursion DoS

The vulnerability of the console-based graphic editor ImageMagick is related to uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

ImageMagick PasskeyEncipherImage Disclosure

The vulnerability of the PasskeyEncipherImage method in the console-based image editing tool ImageMagick is related to insufficient resource control during its existence. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gffilterpidinstswapdeletetask function in the /filtercore/filterpid.c file of the MP4Box multiplexer for multimedia platforms GPAC is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service...

JQ Uncontrolled Recursion DoS

The vulnerability of the JQ programming language lies in its uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gfseiloadfromstateinternal function in the /filters/seiload.c file of the MP4Box package from the GPAC multimedia platform is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failur...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gffilterinparentchain function in the /filtercore/filterpid.c file of the MP4Box encoder for the GPAC multimedia platform is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Django UpdateCacheMiddleware Disclosure

The vulnerability of the django.middleware.cache.UpdateCacheMiddleware middleware in the Django web application framework is related to improper handling of registrations. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by this middleware...

ImageMagick DoS

The vulnerability of the console-based graphic editor ImageMagick is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

NGINX Slice Module Information Disclosure

The vulnerability of the ngxhttpslicemodule in NGINX Plus and NGINX Open Source is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gffilterpidinstswap function in the /filtercore/filterpid.c file of the MP4Box multiplexer for multimedia platforms GPAC is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Django has_vary_header Disclosure

The vulnerability of the django.utils.cache.hasvaryheader function in the Django web application framework is related to incomplete comparisons with missing factors. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

ImageMagic CheckPrimitiveExtent Heap Buffer Overflow DoS

The vulnerability of the CheckPrimitiveExtent function in the console-based ImageMagick graphics editor relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ImageMagick Heap Buffer Overflow DoS

The vulnerability of the console-based graphic editor ImageMagick is related to reading data beyond the allowable range in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

ImageMagick Unauthorized Access

The vulnerability of the console-based graphic editor ImageMagick is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

ImageMagick Buffer Overflow Code Execution

The vulnerability of the console-based graphic editor ImageMagick is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Django EmailBackend Disclosure

The vulnerability of the django.core.mail.backends.smtp.EmailBackend function in the Django web application framework involves the transmission of critical information in plaintext. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

ImageMagick Memory Leak DoS

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Oracle Enterprise Manager Metadata Plugin Full Control

The vulnerability of the Metadata Plugin component of the Oracle Enterprise Manager Base Platform relates to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using th...

F2FS Heap Buffer Overflow DoS

The vulnerability of the f2fsstartdiscardthread function in the fs/f2fs/segment.c file of the F2FS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Oracle WebCenter Content Full Control

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform relates to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using...

Dovecot Mail Server Unauthorized Access

The vulnerability of the Dovecot mail server is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

io_uring Heap Buffer Overflow DoS

The vulnerability of the iowqcreate function in the iouring module of the Linux kernel’s asynchronous input/output interface relates to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...

EDAC Driver Heap Buffer Overflow DoS

The vulnerability of the pcigetdevwrapper function in the drivers/edac/i10nmbase.c file of the EDAC driver for the Linux operating system is related to errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...