Dhananjay Arunesh

Foi encontrada uma falha no método ‘isValid’ do hibernate-validator, na classe org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator, que pode ser contornada omitindo a tag que termina com o caractere menor que. Os navegadores podem renderizar um HTML inválido, permitindo injeção de HTML ou ataques de Cross-Site-Scripting (XSS).

A flaw was found in Infinispan's REST, where Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.

A flaw was found in Infinispan's REST, where bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.

A heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file of OpenImageIO. This flaw allows a remote attacker to pass a specially crafted file to the application, triggering a heap-based buffer overflow that could cause a crash, leading to a denial of service.

The issue is related to a boundary condition within the `XpmCreateXpmImageFromBuffer()` function of the libXpm library, which can lead to an out-of-bounds read error. This allows a local attacker to read the contents of memory on the system, potentially gaining unauthorized access to protected information.

The issue is related to a boundary condition in libXpm, which can cause an out-of-bounds read error. This can allow a local user to read contents of memory on the system, potentially leading to unauthorized access to protected information.

The issue is related to an infinite loop within the `PutSubImage()` function of the libX11 library, which provides the client API for the X Window System. This flaw allows a local user to consume all available system resources, causing a denial of service condition. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

A vulnerability in the libX11 library is related to a boundary condition within the ` XkbReadKeySyms()` function, allowing a local user to trigger an out-of-bounds read error and read the contents of memory on the system. This issue is associated with reading beyond the valid boundaries of a data buffer.

A vulnerability was found in libtiff due to multiple potential integer overflows in `raw2tiff.c`. This flaw allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.

The issue is related to an integer overflow in the LibTIFF library, which can be triggered by a crafted tiff image. This flaw allows remote attackers to cause a denial of service, resulting in an application crash, or possibly execute arbitrary code. The vulnerability is associated with the `readSeparateTilesIntoBuffer()` function and can lead to a heap-based buffer overflow.

A heap buffer overflow issue was found in the startread function at sox/src/hcom.c:160:41. This can lead to a denial of service, code execution, or information disclosure.

A floating point exception issue was found in the `lsx aiffstartwrite` function at `sox/src/aiff.c:622:58`. This flaw can lead to a denial of service.

A heap buffer overflow issue was found in the `lsx readbuf` function at `sox/src/formats i.c:98:16`. This can lead to a denial of service, code execution, or information disclosure.

A floating point exception vulnerability was found in the `read samples` function at `sox/src/voc.c:334:18`. This flaw can lead to a denial of service. The issue is related to incorrect numerical calculations when processing floating point values.

A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.

A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting in an application crash, eventually leading to a denial of service.

A vulnerability was found in pgadmin, where users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously. This issue is related to incorrect session fixation due to improper access separation in the LDAP authentication configuration. Exploitation of this vulnerability may allow a remote attacker to bypass security restrictions and gain unauthorized access to protected information.

Foi identificada uma falha na GLib em que a desserialização do GVariant está sujeita a um problema de lentidão. Um GVariant malicioso pode causar processamento excessivo, levando à negação de serviço. O problema está relacionado ao consumo descontrolado de recursos, o que pode ser explorado para causar uma interrupção do serviço.

O problema está relacionado à deserialização do GVariant no GLib, que não consegue validar se a entrada está em conformidade com o formato esperado. Isso pode levar a uma negação de serviço. O problema também está associado à função `is normal()` e ao consumo descontrolado de recursos.

Foi identificada uma falha do tipo “use-after-free” na função `btrfs get dev args from path()` no arquivo `fs/btrfs/volumes.c` do sistema de arquivos btrfs no Kernel do Linux. Este problema está relacionado ao uso de memória previamente liberada. A exploração dessa falha pode permitir que um invasor local com privilégios especiais cause uma falha no sistema ou vaze informações internas do kernel, afetando potencialmente a confidencialidade, integridade e disponibilidade das informações protegidas.