CWE-401 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-401/ Sun, 26 Feb 2023 09:10:16 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-401 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-401/ 32 32 CVE-2008-3913 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3913/ Sun, 26 Feb 2023 09:10:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3913/ Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service (memory consumption) via unspecified vectors related to “error handling logic”.

The post CVE-2008-3913 appeared first on CVE Vulnerability.

]]> Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service (memory consumption) via unspecified vectors related to “error handling logic”.

The post CVE-2008-3913 appeared first on CVE Vulnerability.

]]> CVE-2007-2274 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-2274/ Sun, 26 Feb 2023 09:06:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-2274/ The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU consumption and application crash) via a malformed torrent file. NOTE: the original disclosure refers to this as a memory leak, but it is not certain.

The post CVE-2007-2274 appeared first on CVE Vulnerability.

]]> The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU consumption and application crash) via a malformed torrent file. NOTE: the original disclosure refers to this as a memory leak, but it is not certain.

The post CVE-2007-2274 appeared first on CVE Vulnerability.

]]> CVE-2018-21079 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-21079/ Sun, 26 Feb 2023 06:48:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-21079/ An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), N(7.x), and O(8.0) software. There is a kernel pointer leak in the USB gadget driver. The Samsung ID is SVE-2017-10993 (March 2018).

The post CVE-2018-21079 appeared first on CVE Vulnerability.

]]> An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), N(7.x), and O(8.0) software. There is a kernel pointer leak in the USB gadget driver. The Samsung ID is SVE-2017-10993 (March 2018).

The post CVE-2018-21079 appeared first on CVE Vulnerability.

]]> CVE-2018-21017 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-21017/ Sun, 26 Feb 2023 06:48:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-21017/ GPAC 0.7.1 has a memory leak in dinf_Read in isomedia/box_code_base.c.

The post CVE-2018-21017 appeared first on CVE Vulnerability.

]]> GPAC 0.7.1 has a memory leak in dinf_Read in isomedia/box_code_base.c.

The post CVE-2018-21017 appeared first on CVE Vulnerability.

]]> CVE-2018-17240 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-17240/ Sun, 26 Feb 2023 06:47:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-17240/ There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network configuration (e.g., username and password).

The post CVE-2018-17240 appeared first on CVE Vulnerability.

]]> There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network configuration (e.g., username and password).

The post CVE-2018-17240 appeared first on CVE Vulnerability.

]]> CVE-2018-15377 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-15377/ Sun, 26 Feb 2023 06:46:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-15377/ A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to insufficient input validation by the affected software. […]

The post CVE-2018-15377 appeared first on CVE Vulnerability.

]]> A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to insufficient input validation by the affected software. An attacker could exploit this vulnerability by sending invalid data to the Cisco Network Plug and Play agent on an affected device. A successful exploit could allow the attacker to cause a memory leak on the affected device, which could cause the device to reload.

The post CVE-2018-15377 appeared first on CVE Vulnerability.

]]> CVE-2018-13844 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-13844/ Sun, 26 Feb 2023 06:46:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-13844/ ** DISPUTED ** An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by fai_load() in their own […]

The post CVE-2018-13844 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** An issue has been found in HTSlib 1.8. It is a memory leak in fai_read in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by fai_load() in their own code.

The post CVE-2018-13844 appeared first on CVE Vulnerability.

]]> CVE-2018-11246 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-11246/ Sun, 26 Feb 2023 06:45:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-11246/ K7TSMngr.exe in K7Computing K7AntiVirus Premium 15.1.0.53 has a Memory Leak.

The post CVE-2018-11246 appeared first on CVE Vulnerability.

]]> K7TSMngr.exe in K7Computing K7AntiVirus Premium 15.1.0.53 has a Memory Leak.

The post CVE-2018-11246 appeared first on CVE Vulnerability.

]]> CVE-2018-0891 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-0891/ Sun, 26 Feb 2023 06:44:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-0891/ ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow information disclosure, due to how the scripting engine handles objects […]

The post CVE-2018-0891 appeared first on CVE Vulnerability.

]]> ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow information disclosure, due to how the scripting engine handles objects in memory, aka “Scripting Engine Information Disclosure Vulnerability”. This CVE ID is unique from CVE-2018-0939.

The post CVE-2018-0891 appeared first on CVE Vulnerability.

]]> CVE-2018-0895 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-0895/ Sun, 26 Feb 2023 06:44:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-0895/ The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka […]

The post CVE-2018-0895 appeared first on CVE Vulnerability.

]]> The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka “Windows Kernel Information Disclosure Vulnerability”. This CVE is unique from CVE-2018-0811, CVE-2018-0813, CVE-2018-0814, CVE-2018-0894, CVE-2018-0896, CVE-2018-0897, CVE-2018-0898, CVE-2018-0899, CVE-2018-0900, CVE-2018-0901 and CVE-2018-0926.

The post CVE-2018-0895 appeared first on CVE Vulnerability.

]]>