All CVEs — page 534 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows a truncated label to be decoded incorrectly, leading to a different code point being derived. This can cause a sender to pick a label that resolves to a name on one installation but is rejected on another.
The flaw in Net::IDN::Punycode allows attackers to cause a denial of service by sending invalid labels, leading to excessive memory allocation.
The flaw allows heap use-after-free via a decoded code point that reallocates the output buffer, leading to potential memory corruption.
The flaw allows authenticated attackers with Subscriber-level access or higher to delete arbitrary files, potentially leading to remote code execution.
The flaw is a heap buffer overflow in the Net::IDN::Punycode Perl module, which can be exploited by attackers to corrupt the heap. This matters because it can lead to arbitrary code execution or other severe impacts.
The flaw allows unauthenticated users to inject malicious code into form submissions, which could then be executed in the browser of an admin user reviewing the submission, leading to potential remote code execution.