All CVEs — page 252 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A remote attacker can trigger stack exhaustion and process crashes in OFFIS DCMTK 3.7.0 by sending a DICOM dataset with deeply nested sequences, causing denial of service without authentication. This affects DICOM services like storescp, dcmrecv, and dcmqrscp, as well as local tools like dcmdump.
The vulnerability in MyRezzta allows attackers to exploit weak password recovery mechanisms, leading to unauthorized access.
The flaw is an out-of-bounds write in the RFC2047 encoded-word parser, allowing remote attackers to execute arbitrary code. This matters because it provides a critical vulnerability that can be exploited to gain full control over the affected IBM DataPower Gateway instances.
IBM DataPower Gateway suffers from a heap buffer underwrite vulnerability that can lead to service crashes, potentially allowing attackers to cause denial of service by sending specially crafted requests that trigger memory corruption in the application's heap management.
IBM DataPower Gateway suffers from a buffer overflow vulnerability (CWE-787) that allows remote attackers to cause a denial of service by sending improperly validated input. This affects multiple versions including 10.5.x, 10.6.x, and 11.0.x series.
IBM DataPower Gateway suffers from a memory reallocation vulnerability where improper validation of length fields can lead to heap-based buffer overflows during dynamic memory allocation, potentially causing denial of service conditions.
A heap buffer overflow in IBM DataPower Gateway allows remote attackers to cause a denial of service by sending specially crafted input that exceeds allocated buffer boundaries, potentially leading to application crashes or unavailability.
IBM DataPower Gateway suffers from uncontrolled resource consumption that can lead to denial of service, allowing remote attackers to exhaust system resources without requiring authentication or user interaction.