Lucene search
+L

4539 matches found

Positive Technologies
Positive Technologies
•added 2020/03/22 12:00 a.m.•14 views

PT-2020-6976 · Hdf5 +3 · Hdf5 +3

Name of the Vulnerable Software and Affected Versions: HDF5 versions through 1.12.0 Description: The issue is related to a heap-based buffer over-read in the H5O layout decode function located in H5Olayout.c. This can allow an attacker to cause a Denial of Service. The vulnerability is associated...

9.8CVSS6AI score0.02789EPSS
SaveExploits21References134
NVD
NVD
•added 2020/03/11 5:15 p.m.•28 views

CVE-2013-1753

The gzipdecode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service memory consumption via a crafted HTTP request...

7.5CVSS8AI score0.03462EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2020/03/11 5:15 p.m.•7 views

DEBIAN-CVE-2013-1753

The gzipdecode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service memory consumption via a crafted HTTP request...

7.5CVSS7.3AI score0.03462EPSS
SaveExploits0References1
osv_alpine
osv_alpine
•added 2020/03/10 8:15 p.m.•11 views

ALPINE-CVE-2020-0034

In vp8decodeframe of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product...

7.5CVSS6.1AI score0.01945EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2020/03/10 8:15 p.m.•10 views

DEBIAN-CVE-2020-0034

In vp8decodeframe of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product...

7.5CVSS6.1AI score0.01945EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/03/09 12:00 a.m.•24 views

Libnsbmp buffer overflow vulnerability (CNVD-2020-33732)

Libnsbmp is a decoding library written in C for the BMP and ICO image file formats. A buffer overflow vulnerability exists in the libnsbmp.c file in Libnsbmp version 0.1.2. An attacker can exploit this vulnerability to cause a denial of service by sending a specially crafted color table to the...

7.5CVSS7.2AI score0.02041EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2020/03/02 12:00 a.m.•4 views

PT-2020-3693

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 8.1 Description The issue is related to a possible out of bounds read in the vp8 decode frame function due to improper input validation. This could lead to remote information disclosure if error correction is turne...

7.8CVSS0.01945EPSS
SaveExploits0References32
RedHat Linux
RedHat Linux
•added 2020/02/24 9:54 a.m.•28 views

openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c

A heap-based buffer overflow flaw was found in the opjt1clbldecodeprocessor in openjpeg2. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

8.8CVSS6AI score0.03624EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2020/02/24 9:33 a.m.•24 views

openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c

A heap-based buffer overflow flaw was found in the opjt1clbldecodeprocessor in openjpeg2. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

8.8CVSS6AI score0.03624EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2020/02/20 10:18 p.m.•16 views

python-pillow: out-of-bounds write in expandrow in libImaging/SgiRleDecode.c

An out-of-bounds write flaw was discovered in python-pillow in the way SGI RLE images are decoded. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the application or potentially execute code on the system...

9.8CVSS7.2AI score0.04212EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/02/19 1:06 p.m.•19 views

openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c

A heap-based buffer overflow flaw was found in the opjt1clbldecodeprocessor in openjpeg2. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

8.8CVSS6AI score0.03624EPSS
SaveExploits1References4
osv_debian
osv_debian
•added 2020/02/18 7:15 p.m.•20 views

DEBIAN-CVE-2015-7507

libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service out-of-bounds read via a crafted color table to the 1 bmpdecodergb or 2 bmpdecoderle function...

7.5CVSS7.3AI score0.02041EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2020/02/18 12:00 a.m.•6 views

PT-2020-7893

Name of the Vulnerable Software and Affected Versions: Libnsbmp version 0.1.2 Description: The issue allows context-dependent attackers to cause a denial of service, specifically an out-of-bounds read, by providing a crafted color table to either the bmp decode rgb or bmp decode rle function...

7.5CVSS0.02041EPSS
SaveExploits2References6
CNVD
CNVD
•added 2020/02/17 12:00 a.m.•73 views

Libnsbmp Buffer Overflow Vulnerability

Libnsbmp is a decoding library for the BMP and ICO image file formats, written in C. It is available as part of the NetSurf project. It is part of the NetSurf project and is available for other software under the MIT license. A buffer overflow vulnerability exists in the 'bmpdecoderle' function o...

8.8CVSS7.4AI score0.03126EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2020/02/12 12:00 a.m.•5 views

PT-2020-7894

Name of the Vulnerable Software and Affected Versions: Libnsbmp version 0.1.2 Description: The issue is related to a heap-based buffer overflow in the bmp decode rle function in libnsbmp.c. This allows context-dependent attackers to cause a denial of service, potentially leading to an application...

8.8CVSS0.03126EPSS
SaveExploits2References7
CNVD
CNVD
•added 2020/02/12 12:00 a.m.•18 views

OpenJPEG Buffer Overflow Vulnerability (CNVD-2020-33736)

OpenJPEG is a C-based open source JPEG2000 codec . A buffer overflow vulnerability exists in OpenJPEG version 2.3.1 in the opjt1clbldecodeprocessor in the openjp2/t1.c file, which stems from the program's failure to properly check boundaries. A remote attacker could exploit this vulnerability wit...

8.8CVSS8.2AI score0.03624EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2020/02/10 6:44 p.m.•64 views

CVE-2020-7226

CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...

7.5CVSS4.6AI score0.03334EPSS
SaveExploits1References3
Veracode
Veracode
•added 2020/02/10 4:49 a.m.•32 views

Denial Of Service (DoS)

cryptacular is vulnerable to denial of service. Failure to validate the nonce array length associated with new byte allows an attacker to cause excessive memory allocation on the system during a decode operation, potentially resulting in an application crash...

7.5CVSS4.2AI score0.03334EPSS
SaveExploits1References32Affected Software82
zdt
zdt
•added 2020/02/06 12:00 a.m.•160 views

Ecommerce Systempay 1.0 - Production KEY Brute Force Exploit

Exploit for php platform in category web applications Exploit Title: Ecommerce Systempay 1.0 - Production KEY Brute Force Author: live3 Vendor Homepage: https://paiement.systempay.fr/doc/fr-FR/ Software Link: https://paiement.systempay.fr/doc/fr-FR/module-de-paiement-gratuit/ Tested on: MacOs...

7.1AI score
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2020/01/28 7:15 p.m.•11 views

UBUNTU-CVE-2015-8011

Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...

9.8CVSS7.7AI score0.05473EPSS
SaveExploits0References6
Rows per page
Query Builder