All CVEs — page 261 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A heap-based buffer overflow exists in Cyrus SASL's DIGEST-MD5 plugin where improperly calculated buffer sizes during challenge field processing can lead to out-of-bounds writes when special characters are escaped, potentially allowing remote code execution or application crashes.
Excelize library allows attackers to cause excessive memory consumption and CPU usage by manipulating column ranges in Excel files without proper validation of column limits. This vulnerability can lead to denial of service through out-of-memory conditions when processing crafted spreadsheets.
Excelize library is vulnerable to CPU exhaustion during password decryption when processing malicious Excel files with crafted spinCount values. This allows attackers to consume excessive CPU resources for extended periods without cancellation.
The Excelize library has a buffer overflow vulnerability in its ColumnNameToNumber function that can cause invalid column names to wrap to zero, leading to negative slice indices and process termination when processing crafted Excel files.
Apache Geode's web management interface is logging sensitive information like passwords and session tokens to log files, potentially exposing credentials and authentication data to unauthorized parties. This creates a risk of credential theft and unauthorized access to the system.
A missing authorization flaw in Forminator allows attackers to bypass access controls and perform unauthorized actions, potentially leading to data manipulation or system compromise. This vulnerability affects versions up to 1.57.2.
The vulnerability is an out-of-bounds slice error in the Nickname profile transformation logic that can cause a panic when processing crafted input into a short destination buffer. This allows an attacker to trigger a denial of service condition without requiring authentication or user interaction.
The flaw is a recursive calculation loop in Excelize library versions 2.8.1 through 2.11.0 that causes Go stack overflow when processing mutually referencing dynamic-array formulas, leading to process termination without any fixed version available yet.