CWE-682 Archives - CVE Vulnerability

CVE-2018-8319

Sun, 26 Feb 2023 06:51:24 +0000

A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka “MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability.” This affects Microsoft Research JavaScript Cryptography Library.

The post CVE-2018-8319 appeared first on CVE Vulnerability.

CVE-2018-20999

Sun, 26 Feb 2023 06:48:50 +0000

An issue was discovered in the orion crate before 0.11.2 for Rust. reset() calls cause incorrect results.

The post CVE-2018-20999 appeared first on CVE Vulnerability.

CVE-2018-18225

Sun, 26 Feb 2023 06:47:42 +0000

In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed.

The post CVE-2018-18225 appeared first on CVE Vulnerability.

CVE-2018-16781

Sun, 26 Feb 2023 06:47:11 +0000

ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE signal) via a progressive JPEG file that lacks an AC Huffman table.

The post CVE-2018-16781 appeared first on CVE Vulnerability.

CVE-2018-15391

Sun, 26 Feb 2023 06:46:38 +0000

A vulnerability in certain IPv4 fragment-processing functions of Cisco Remote PHY Software could allow an unauthenticated, remote attacker to impact traffic passing through a device, potentially causing a denial of service (DoS) condition. The vulnerability is due to the affected software not validating and calculating certain numerical values in IPv4 packets that are sent to an affected device. An attacker could exploit this vulnerability by sending malformed IPv4 traffic to an affected device. A successful exploit could allow the attacker to disrupt the flow of certain IPv4 traffic passing through an affected device, which could result in a DoS condition.

The post CVE-2018-15391 appeared first on CVE Vulnerability.

CVE-2018-14439

Sun, 26 Feb 2023 06:46:19 +0000

espritblock eos4j, an unofficial SDK for EOS, through 2018-07-12 mishandles floating-point numbers with more than four digits after the decimal point, which might allow attackers to trigger currency transfers of unintended amounts.

The post CVE-2018-14439 appeared first on CVE Vulnerability.

CVE-2018-11790

Sun, 26 Feb 2023 06:45:24 +0000

When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic Overflow at a string length calculation.

The post CVE-2018-11790 appeared first on CVE Vulnerability.

CVE-2018-11262

Sun, 26 Feb 2023 06:45:10 +0000

In Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel while trying to find out total number of partition via a non zero check, there could be possibility where the ‘TotalPart’ could cross ‘GptHeader->MaxPtCnt’ and which could result in OOB write in patching GPT.

The post CVE-2018-11262 appeared first on CVE Vulnerability.

CVE-2020-28393

Sun, 26 Feb 2023 06:40:39 +0000

An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device on the SCALANCE XM-400, XR-500 (All versions prior to v6.4).

The post CVE-2020-28393 appeared first on CVE Vulnerability.

CVE-2020-28030

Sun, 26 Feb 2023 06:40:33 +0000

In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by correcting the implementation of offset advancement.

The post CVE-2020-28030 appeared first on CVE Vulnerability.