Lucene search
K

24 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:10 a.m.6 views

CVE-2019-11934

Improper handling of closenotify alerts can result in an out-of-bounds read in AsyncSSLSocket. This issue affects folly prior to v2019.11.04.00...

9.8CVSS6.7AI score0.00418EPSS
Exploits0References1
Circl
Circl
added 2025/11/21 11:26 p.m.2 views

CVE-2025-11934

creationtimestamp| type| source ---|---|--- 2025-11-21 23:26:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m66gmwybeo2b...

2.7CVSS5.8AI score0.00018EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2025/11/21 11:15 p.m.1 views

CVE-2025-11934

Improper input validation in the TLS 1.3 CertificateVerify signature algorithm negotiation in wolfSSL 5.8.2 and earlier on multiple platforms allows for downgrading the signature algorithm used. For example when a client sends ECDSA P521 as the supported signature algorithm the server previously...

2.7CVSS5.9AI score0.00018EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-11934

Malicious code in bioql PyPI...

4.8CVSS3.6AI score0.00192EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/05/22 6:24 a.m.4 views

CVE-2018-11934

Possible out of bounds write due to improper input validation while processing DOACS vendor command in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607,...

7.8CVSS7.9AI score0.00042EPSS
Exploits0References1
Circl
Circl
added 2025/01/07 3:28 a.m.2 views

CVE-2024-11934

creationtimestamp| type| source ---|---|--- 2025-01-07 03:28:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113784946172253533 2025-01-07 03:37:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/292 2025-01-07 04:15:32+00:00| seen|...

6.4CVSS8.7AI score0.0036EPSS
Exploits0References4
Circl
Circl
added 2024/03/07 11:6 a.m.2 views

CVE-2019-11934

creationtimestamp| type| source ---|---|--- 2024-03-07 11:06:50+00:00| seen| https://t.me/ctinow/202290...

9.8CVSS8.7AI score0.00418EPSS
Exploits0References1
Circl
Circl
added 2020/07/29 8:55 p.m.1 views

CVE-2020-11934

creationtimestamp| type| source ---|---|--- 2020-07-29 20:55:26+00:00| seen| https://t.me/cibsecurity/13739...

5.9CVSS6.1AI score0.00045EPSS
Exploits0References1
OSV
OSV
added 2020/07/29 5:15 p.m.3 views

CVE-2020-11934

It was discovered that snapctl user-open allowed altering the $XDGDATADIRS environment variable when calling the system xdg-open. OpenURL in usersession/userd/launcher.go would alter $XDGDATADIRS to append a path to a directory controlled by the calling snap. A malicious snap could exploit this t...

5.9CVSS5.7AI score
Exploits0References2
NVD
NVD
added 2020/07/29 5:15 p.m.18 views

CVE-2020-11934

It was discovered that snapctl user-open allowed altering the $XDGDATADIRS environment variable when calling the system xdg-open. OpenURL in usersession/userd/launcher.go would alter $XDGDATADIRS to append a path to a directory controlled by the calling snap. A malicious snap could exploit this t...

5.9CVSS6.3AI score0.00045EPSS
Exploits0References2
CVE
CVE
added 2020/07/29 4:25 p.m.78 views

CVE-2020-11934

CVE-2020-11934 concerns snapd’s snapctl user-open path where OpenURL() manipulates the XDG_DATA_DIRS environment variable, allowing a malicious snap to influence how host xdg-open opens URLs and potentially run a script within the snap with confinement bypass. The issue did not affect Ubuntu Core...

5.9CVSS6.1AI score0.00045EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2020/07/16 12:0 a.m.23 views

Ubuntu: Security Advisory (USN-4424-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3CVSS6.7AI score0.00045EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/07/16 12:0 a.m.33 views

Fedora 31 : snapd (2020-ccb155ea2c)

Update to v2.45.2 to fix CVE-2020-11933 and CVE-2020-11934 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

7.3CVSS6.2AI score0.00045EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2020/07/16 12:0 a.m.31 views

Fedora 32 : snapd (2020-7685deba9b)

Update to v2.45.2 to fix CVE-2020-11933 and CVE-2020-11934 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

7.3CVSS6.2AI score0.00045EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2020/07/15 12:0 p.m.25 views

CVE-2020-11934

It was discovered that snapctl user-open allowed altering the $XDGDATADIRS environment variable when calling the system xdg-open. OpenURL in usersession/userd/launcher.go would alter $XDGDATADIRS to append a path to a directory controlled by the calling snap. A malicious snap could exploit this t...

5.9CVSS6.6AI score0.00045EPSS
Exploits0References2
OSV
OSV
added 2019/12/04 5:16 p.m.16 views

CVE-2019-11934

Improper handling of closenotify alerts can result in an out-of-bounds read in AsyncSSLSocket. This issue affects folly prior to v2019.11.04.00...

9.8CVSS6.7AI score0.00418EPSS
Exploits0References2
CVE
CVE
added 2019/12/04 4:25 p.m.60 views

CVE-2019-11934

The CVE concerns the Folly library’s AsyncSSLSocket. The issue is an improper handling of close_notify alerts that can cause an out-of-bounds read, affecting Folly prior to v2019.11.04.00. Reported as a Denial of Service risk due to the out-of-bounds read, with Red Hat/Veracode descriptions align...

9.8CVSS9.3AI score0.00418EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2019/06/14 5:29 p.m.15 views

CVE-2018-11934

Possible out of bounds write due to improper input validation while processing DOACS vendor command in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607,...

7.8CVSS7.9AI score0.00042EPSS
Exploits0References1
CVE
CVE
added 2019/06/14 5:2 p.m.272 views

CVE-2018-11934

CVE-2018-11934 is a Qualcomm WLAN-host vulnerability affecting Snapdragon WLAN components (multiple Qualcomm SoCs). The issue is described as a possible out-of-bounds write caused by improper input validation during processing of the DO_ACS vendor command. The Hazard is memory corruption with LOC...

7.8CVSS7.8AI score0.00042EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2017/12/13 12:0 a.m.39 views

Microsoft Office 2016 Information Disclosure Vulnerability (KB4011095)

This host is missing an important security update according to Microsoft KB4011095 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

5.5CVSS5.7AI score0.23479EPSS
Exploits0References2
Rows per page
Query Builder