All CVEs — page 291 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The RabbitMQ Java client library has a UTF-8 decoding flaw that allows malformed bytes to be re-encoded beyond AMQP shortstr limits, causing unchecked exceptions during message processing. This leads to message requeuing and consumer disablement, creating a denial-of-service condition.
ImageSharp library has a buffer overflow vulnerability in TIFF decoding where tiled images with smaller tile widths can cause out-of-bounds writes into heap memory, potentially leading to arbitrary code execution or process termination.
A server-side template injection vulnerability in NetBox allows low-privileged users to craft custom links that can steal session cookies and API tokens from other users by embedding request data directly into Jinja2 templates. This enables attackers to hijack user sessions and gain full access to their accounts.
The flaw allows a remote attacker to execute arbitrary code by exploiting incorrect authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39, posing a critical risk.
ImageSharp library has a heap buffer overflow vulnerability in TIFF decoding when processing CCITT Group 3 or Modified Huffman compressed strips. An attacker can craft malicious TIFF files that cause oversized data writes to heap buffers, potentially leading to process termination or memory corruption.
ImageSharp's TIFF CCITT Group 4 encoder has a buffer overflow vulnerability that can lead to arbitrary code execution when processing specially crafted TIFF images. This occurs due to unchecked writes beyond allocated memory boundaries during compression.
ImageSharp library allows attackers to crash applications when processing specially crafted TIFF images through histogram equalization operations, leading to denial of service via out-of-range memory access.
ImageSharp library suffers from a buffer overflow vulnerability in its ICC profile handling when processing LUT16 conversions with more than four output channels. This allows attackers to corrupt memory and potentially terminate processes when embedded profiles are processed with Convert mode, affecting applications that use ImageSharp for image processing.