Lucene search
+L

4186 matches found

NVD
NVD
•added 2020/11/06 6:15 p.m.•23 views

CVE-2017-18926

raptorxmlwriterstartelementcommon in raptorxmlwriter.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows sometimes seen in raptorqnameformatasxml...

7.1CVSS6.9AI score0.03117EPSS
SaveExploits1References12
Prion
Prion
•added 2020/11/06 6:15 p.m.•26 views

Heap overflow

raptorxmlwriterstartelementcommon in raptorxmlwriter.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows sometimes seen in raptorqnameformatasxml...

5.8CVSS6.7AI score0.03117EPSS
SaveExploits1References12Affected Software3
UbuntuCve
UbuntuCve
•added 2020/11/06 6:15 p.m.•46 views

CVE-2017-18926

raptorxmlwriterstartelementcommon in raptorxmlwriter.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows sometimes seen in raptorqnameformatasxml...

7.1CVSS7.2AI score0.03117EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2020/11/06 5:48 p.m.•39 views

CVE-2017-18926

raptorxmlwriterstartelementcommon in raptorxmlwriter.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows sometimes seen in raptorqnameformatasxml...

6.8AI score0.03117EPSS
SaveExploits1References12
CVE
CVE
•added 2020/11/06 5:48 p.m.•298 views

CVE-2017-18926

CVE-2017-18926 affects Raptor RDF Syntax Library 2.0.15, where raptor_xml_writer_start_element_common miscalculates the maximum number of XML namespace declarations, causing heap-based buffer overflows (observed with raptor_qname_format_as_xml). The connected Nessus advisories show the issue impa...

7.1CVSS6.7AI score0.03117EPSS
SaveExploits1References12Affected Software1
Mend
Mend
•added 2020/11/06 5:48 p.m.•9 views

CVE-2017-18926

raptorxmlwriterstartelementcommon in raptorxmlwriter.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows sometimes seen in raptorqnameformatasxml...

7.1CVSS0.03117EPSS
SaveExploits1References13
AlpineLinux
AlpineLinux
•added 2020/11/06 5:48 p.m.•45 views

CVE-2017-18926

raptorxmlwriterstartelementcommon in raptorxmlwriter.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows sometimes seen in raptorqnameformatasxml...

7.1CVSS7AI score0.03117EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/11/06 5:48 p.m.•38 views

CVE-2017-18926

raptorxmlwriterstartelementcommon in raptorxmlwriter.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows sometimes seen in raptorqnameformatasxml...

7.1CVSS7AI score0.03117EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/06 12:00 a.m.•8 views

CVE-2017-18926: Out-of-bounds Write

raptorxmlwriterstartelementcommon in raptorxmlwriter.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows sometimes seen in raptorqnameformatasxml...

7.1CVSS6AI score0.03117EPSS
SaveExploits1References2
CNVD
CNVD
•added 2020/11/04 12:00 a.m.•8 views

Mozilla Network Security Services Code Issue Vulnerability

Network Security Services NSS is a set of libraries for cross-platform development of security-enabled client and server applications compiled with NSS to support security standards such as SSLv2, SSLv3, TLS, etc. NSS is an underlying cryptography library from the Mozilla Foundation. NSS is an...

6.5CVSS8.9AI score0.01971EPSS
SaveExploits0References1
osv_rlsa
osv_rlsa
•added 2020/11/03 12:13 p.m.•51 views

RLSA-2020:4539 Moderate: pcre2 security and enhancement update

The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl. Security Fixes: pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode CVE-2019-20454 For...

7.5CVSS7.6AI score0.01561EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2020/10/07 12:00 a.m.•36 views

Fedora: Security Advisory for gitit (FEDORA-2020-1eaffe0013)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.5AI score0.01566EPSS
SaveExploits0References2
Fedora
Fedora
•added 2020/10/06 3:07 p.m.•21 views

[SECURITY] Fedora 31 Update: gitit-0.12.3.2-4.fc31

Gitit is a wiki backed by a git, darcs, or mercurial filestore. Pages and uploaded files can be modified either directly via the VCS's command-line t ools or through the wiki's web interface. Pandoc is used for markup processing, so pages may be written in extended markdown, reStructuredText,...

6.5CVSS0.1AI score0.01566EPSS
SaveExploits0
Fedora
Fedora
•added 2020/10/06 3:02 p.m.•52 views

[SECURITY] Fedora 32 Update: gitit-0.12.3.2-6.fc32

Gitit is a wiki backed by a git, darcs, or mercurial filestore. Pages and uploaded files can be modified either directly via the VCS's command-line t ools or through the wiki's web interface. Pandoc is used for markup processing, so pages may be written in extended markdown, reStructuredText,...

6.5CVSS0.1AI score0.01566EPSS
SaveExploits0
osv_cve
osv_cve
•added 2020/10/01 6:15 p.m.•28 views

CVE-2020-15228

In the @actions/core npm module before version 1.2.6,addPath and exportVariable functions communicate with the Actions Runner over stdout by generating a string in a specific format. Workflows that log untrusted data to stdout may invoke these commands, resulting in the path or environment...

5CVSS5.9AI score0.01488EPSS
SaveExploits2References2
Prion
Prion
•added 2020/10/01 6:15 p.m.•33 views

Design/Logic Flaw

In the @actions/core npm module before version 1.2.6,addPath and exportVariable functions communicate with the Actions Runner over stdout by generating a string in a specific format. Workflows that log untrusted data to stdout may invoke these commands, resulting in the path or environment...

4CVSS5.3AI score0.01488EPSS
SaveExploits2References2Affected Software1
Github Security Blog
Github Security Blog
•added 2020/10/01 5:16 p.m.•67 views

Environment Variable Injection in GitHub Actions

Impact The @actions/core npm module addPath and exportVariable functions communicate with the Actions Runner over stdout by generating a string in a specific format. Workflows that log untrusted data to stdout may invoke these commands, resulting in the path or environment variables being modifie...

5CVSS3.7AI score0.01488EPSS
SaveExploits2References4Affected Software1
Fedora
Fedora
•added 2020/09/29 12:17 a.m.•49 views

[SECURITY] Fedora 33 Update: gitit-0.13.0.0-4.fc33

Gitit is a wiki backed by a git, darcs, or mercurial filestore. Pages and uploaded files can be modified either directly via the VCS's command-line t ools or through the wiki's web interface. Pandoc is used for markup processing, so pages may be written in extended markdown, reStructuredText,...

6.5CVSS0.1AI score0.01566EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2020/09/29 12:00 a.m.•25 views

Fedora: Security Advisory for gitit (FEDORA-2020-c39d7a562c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.01566EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/09/28 12:00 a.m.•42 views

Debian DLA-2382-1 : curl security update

An issue has been found in curl, a command line tool for transferring data with URL syntax. In rare circumstances, when using the multi API of curl in combination with CURLOPTCONNECTONLY, the wrong connection might be used when transfering data later. For Debian 9 stretch, this problem has been...

7.5CVSS6.5AI score0.05344EPSS
SaveExploits1References4
Rows per page
Query Builder