Search Vulnerabilities

nimiq-transaction vulnerable to panic via `HistoryTreeProof` length mismatch

nimiq-blockchain: Peer-triggerable panic during history sync

network-libp2p: Peer can crash the node by opening discovery protocol substream twice

nimiq-consensus panics via RequestMacroChain micro-block locator

Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon

CocoaMQTT: Denial of Service via Reachable Assertion in `PUBLISH` Packet Parsing

libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow

FreeRDP: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks

FreeRDP: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331)

iconv crash due to assertion failure with untrusted input

Users could trigger a crash of mongod primaries during promotion to sharded

Authenticated query containing a TKEY record may cause named to terminate unexpectedly

Stack overflow in Kea daemons

nghttp2 Denial of service: Assertion failure due to the missing state validation

Reachable Assertion in FW

Reachable Assertion in Modem

psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps

FreeRDP: Smartcard NDR Alignment Padding Triggers Reachable WINPR_ASSERT Abort (Client DoS)

Open5GS SMF gn-handler.c smf_gn_handle_create_pdp_context_request assertion

A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation