Lucene search
+L

7304 matches found

Snyk
Snyk
added 2022/10/18 9:46 p.m.6 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 to version 6.0.3 or higher. References - Dotnet Announcement - Dotn...

8.8CVSS7.6AI score0.01555EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.6 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64 to version 6.0.3 or higher. References - Dotnet Announcement - Dotn...

8.8CVSS7.5AI score0.01555EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.6 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet...

8.8CVSS7.5AI score0.01555EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.7 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet...

8.8CVSS7.5AI score0.01555EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.6 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet...

8.8CVSS7.6AI score0.01555EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.7 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet...

8.8CVSS7.5AI score0.01555EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.6 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet...

8.8CVSS7.6AI score0.01555EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.4 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet...

8.8CVSS7.6AI score0.01555EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.6 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86 to version 6.0.3 or higher. References - Dotnet Announcement -...

8.8CVSS7.5AI score0.01555EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.8 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86 to version 6.0.3 or higher. References - Dotnet Announcement ...

8.8CVSS7.6AI score0.01555EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.5 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.win-x86 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet Issue -...

8.8CVSS7.6AI score0.01555EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv
added 2022/10/18 4:8 p.m.7 views

@bigegg/parse-server-schema-config (>=1.0.5 <=1.0.10), @peterpme/parse-server-mailgun (>=2.4.8 <=2.5.11) +19 more potentially affected by CVE-2022-39313 via parse-server (>=2.0.8 <=3.10.0)

parse-server NPM version =2.0.8, =1.0.5, =2.4.8, =1.0.0, =0.1.1, =0.0.2, =1.0.0, =0.1.0, =0.1.7, =0.0.1, =0.0.0, =1.0.0, =1.0.0, =1.4.0 and more Source cves: CVE-2022-39313 Source advisory: OSV:GHSA-H423-W6QV-2WJ3...

7.5CVSS7.1AI score0.00689EPSS
SaveExploits0
OSV
OSV
added 2022/10/18 4:8 p.m.41 views

GHSA-H423-W6QV-2WJ3 parse-server crashes when receiving file download request with invalid byte range

Impact Parse Server crashes when a file download request is received with an invalid byte range. Patches Improved parsing of the range parameter to properly handle invalid range requests. Workarounds None References - GHSA-h423-w6qv-2wj3...

7.5CVSS7.4AI score0.00689EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/10/18 4:8 p.m.52 views

parse-server crashes when receiving file download request with invalid byte range

Impact Parse Server crashes when a file download request is received with an invalid byte range. Patches Improved parsing of the range parameter to properly handle invalid range requests. Workarounds None References - GHSA-h423-w6qv-2wj3...

7.5CVSS7.3AI score0.00689EPSS
SaveExploits0References6Affected Software1
CNVD
CNVD
added 2022/10/18 12:0 a.m.24 views

OTFCC Buffer Overflow Vulnerability (CNVD-2023-11782)

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files.OTFCC 0.10.4 and earlier versions have a buffer overflow vulnerability that originates in /release-x64/otfccdump 0x6b84b1 with a boundary error when processing untrusted input, which can be...

6.5CVSS5AI score0.00725EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/10/18 12:0 a.m.7 views

PT-2022-24895 · Unknown · Parse Server

Name of the Vulnerable Software and Affected Versions: Parse Server versions prior to 4.10.17 Parse Server versions prior to 5.2.8 on the 5.x branch Description: The issue occurs when a file download request is received with an invalid byte range, causing the server to crash and resulting in a...

7.5CVSS7.3AI score0.00689EPSS
SaveExploits0References10
OSV
OSV
added 2022/10/17 9:15 a.m.3 views

DEBIAN-CVE-2022-3533

A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects the function parseusdtarg of the file tools/lib/bpf/usdt.c of the component BPF. The manipulation of the argument regname leads to memory leak. It is recommended to apply a patch to fix this issue. The...

5.7CVSS4AI score0.00419EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/14 3:16 p.m.1 views

DEBIAN-CVE-2022-41715

Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consu...

7.5CVSS8.6AI score0.01364EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/14 3:15 p.m.28 views

CVE-2022-32149

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

7.5CVSS0.01494EPSS
SaveExploits0References5
OSV
OSV
added 2022/10/14 3:15 p.m.4 views

DEBIAN-CVE-2022-32149

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

7.5CVSS6.9AI score0.01494EPSS
SaveExploits0References1
Rows per page
Query Builder