Lucene search
+L

3567 matches found

BDU FSTEC
BDU FSTEC
added 2021/03/04 12:00 a.m.10 views

The vulnerability of the implementation of the ISN generator in the protocols used by uC/OS and uC/TCP-IP allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ISN generator implementation in the uC/OS and uC/TCP-IP protocols is related to the use of insufficiently random values. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

6.5CVSS7.7AI score0.01083EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/03/04 12:00 a.m.51 views

EulerOS Virtualization 3.0.6.6 : nss (EulerOS-SA-2021-1502)

According to the versions of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way NSS handled CCS ChangeCipherSpec messages in TLS 1.3. This flaw allows a remote attacker to send multipl...

7.5CVSS6.5AI score0.03901EPSS
SaveExploits1References4
CNVD
CNVD
added 2021/03/04 12:00 a.m.22 views

Xterm Input Validation Error Vulnerability

XTerm is a terminal emulator on the X Window System used to provide multiple independent SHELL inputs and outputs. An input validation error vulnerability exists in Xterm that originates from allowing remote attackers to cause a denial of service segmentation error or possibly have unspecified...

9.8CVSS7.5AI score0.07541EPSS
SaveExploits1References1
OSV
OSV
added 2021/03/02 10:33 p.m.10 views

MGASA-2021-0094 Updated xterm package fixes security vulnerability

xterm through Patch 365 allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafted UTF-8 character sequence. CVE-2021-27135...

9.8CVSS9.7AI score0.07541EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2021/03/01 12:00 a.m.10 views

PT-2024-11038 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel related to the TCP QUEUE SEQ option. The issue was reported by Qingyu Li, who found a syzkaller bug that changes the RCV SEQ after...

8.8CVSS6.7AI score0.07604EPSS
SaveExploits20References679
Debian
Debian
added 2021/02/21 8:31 a.m.49 views

[SECURITY] [DSA 4861-1] screen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4861-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 21, 2021 https://www.debian.org/security/faq -...

7.5CVSS2.5AI score0.09147EPSS
SaveExploits1
Veracode
Veracode
added 2021/02/11 12:01 p.m.25 views

Denial Of Service (DoS)

screen is vulnerable to denial of service DoS. The vulnerability exists in encoding.c through an invalid write access via a crafted UTF-8 character sequence...

9.8CVSS2.8AI score0.09147EPSS
SaveExploits1References12Affected Software3
ICS
ICS
added 2021/02/11 12:00 a.m.132 views

Multiple Embedded TCP/IP Stacks (Update B)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Multiple Equipment: Nut/Net, CycloneTCP, NDKTCPIP, FNET, uIP-Contiki-OS, uC/TCP-IP, uIP-Contiki-NG, uIP, picoTCP-NG, picoTCP, MPLAB Net, Nucleus NET, Nucleus ReadyStart Vulnerabilities: Use of...

9.8CVSS8.4AI score0.01716EPSS
SaveExploits1References5
OSV
OSV
added 2021/02/10 4:15 p.m.4 views

DEBIAN-CVE-2021-27135

xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...

9.8CVSS9.1AI score0.07541EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2021/02/10 4:15 p.m.42 views

CVE-2021-27135

xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...

9.8CVSS7.5AI score0.07541EPSS
SaveExploits1References5
Prion
Prion
added 2021/02/10 4:15 p.m.26 views

Design/Logic Flaw

xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...

7.5CVSS9.4AI score0.07541EPSS
SaveExploits1References13Affected Software3
Cvelist
Cvelist
added 2021/02/10 3:51 p.m.30 views

CVE-2021-27135

xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...

9.8AI score0.07541EPSS
SaveExploits1References13
AlpineLinux
AlpineLinux
added 2021/02/10 3:51 p.m.48 views

CVE-2021-27135

xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...

9.8CVSS9.8AI score0.07541EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/02/10 12:00 a.m.14 views

Xterm 输入验证错误漏洞

XTerm is a terminal emulator on the X Window System used to provide multiple independent SHELL inputs and outputs. An input validation error vulnerability exists in Xterm that originates from allowing remote attackers to cause a denial of service segmentation error or possibly have unspecified...

9.8CVSS7.4AI score0.07541EPSS
SaveExploits1References29
OSV
OSV
added 2021/02/09 8:15 p.m.11 views

AZL-7356 CVE-2021-26937 affecting package screen for versions less than 4.9.1-1

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...

9.8CVSS7AI score0.09147EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/09 8:15 p.m.7 views

ALPINE-CVE-2021-26937

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...

9.8CVSS7.5AI score0.09147EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/09 8:15 p.m.5 views

DEBIAN-CVE-2021-26937

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...

9.8CVSS7.5AI score0.09147EPSS
SaveExploits1References1
Prion
Prion
added 2021/02/09 8:15 p.m.27 views

Command injection

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...

7.5CVSS9.4AI score0.09147EPSS
SaveExploits1References9Affected Software3
Debian CVE
Debian CVE
added 2021/02/09 7:35 p.m.31 views

CVE-2021-26937

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...

9.8CVSS8AI score0.09147EPSS
SaveExploits1
CVE
CVE
added 2021/02/09 7:35 p.m.615 views

CVE-2021-26937

CVE-2021-26937 affects the GNU Screen utility. The vulnerability exists in encoding.c when handling combining characters/UTF-8 sequences, and can enable a remote attacker to cause a denial of service (invalid write access and crash) or, in some advisories, potentially arbitrary code execution. Af...

9.8CVSS9.6AI score0.09147EPSS
SaveExploits1References10Affected Software1
Rows per page
Query Builder