68 matches found
CVE-2021-40438
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVE-2021-34798
Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVE-2022-25235
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.
CVE-2020-7595
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
CVE-2022-25236
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
CVE-2022-25315
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
CVE-2019-19956
xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.
CVE-2021-22925
curl supports the -t command line option, known as CURLOPT_TELNETOPTIONSin libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending NEW_ENV variables, libcurlcould be made to pass on uninitialized data from a stack based b...
CVE-2022-23852
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
CVE-2021-22924
libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths case insensitively ,which could lead t...
CVE-2022-23990
Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.
CVE-2022-22822
addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVE-2021-45960
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
CVE-2022-22824
defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVE-2022-22823
build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVE-2022-25314
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.
CVE-2019-13920
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2019-13922
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2019-13918
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2019-13919
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2022-22825
lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVE-2021-46143
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
CVE-2022-25313
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.
CVE-2022-22826
nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVE-2022-22827
storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVE-2022-23102
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2022-29034
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2021-20093
A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions
CVE-2022-32259
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2024-39873
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2022-32251
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2022-32257
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2022-32260
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2022-32254
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2022-32255
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2022-32256
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2022-27221
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2022-32252
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2022-32262
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2022-27220
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2022-32261
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2024-39872
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2022-27219
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2022-32253
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2022-32258
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2021-37191
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2021-37190
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2021-37177
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2021-37183
A vulnerability has been identified in SINEMA Remote Connect Server (All versions
CVE-2021-37192
A vulnerability has been identified in SINEMA Remote Connect Server (All versions