Lucene search
K

45 matches found

Circl
Circl
added 2025/12/12 8:24 a.m.1 views

CVE-2025-14354

creationtimestamp| type| source ---|---|--- 2025-12-12 08:24:38+00:00| seen| https://gist.github.com/Darkcrai86/619265f864587e9b916f49ea137e97bc...

4.3CVSS5.7AI score0.00016EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:7 a.m.2 views

CVE-2019-14354

On Ledger Nano S and Nano X devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might ...

2.4CVSS6.5AI score0.00058EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2018-14354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote...

9.8CVSS7.6AI score0.0253EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/09/26 12:0 a.m.14 views

Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2022-2375)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS4.4AI score0.00188EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2022/09/24 12:0 a.m.71 views

EulerOS Virtualization 2.9.1 : c-ares (EulerOS-SA-2022-2337)

According to the versions of the c-ares package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A possible use-after-free and double-free in c-ares lib version 1.16.0 if aresdestroy is called prior to aresgetaddrinfo completin...

3.3CVSS7AI score0.00188EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2022/09/23 12:0 a.m.27 views

EulerOS Virtualization 2.9.0 : c-ares (EulerOS-SA-2022-2375)

According to the versions of the c-ares package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A possible use-after-free and double-free in c-ares lib version 1.16.0 if aresdestroy is called prior to aresgetaddrinfo completin...

3.3CVSS7AI score0.00188EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.23 views

Ubuntu: Security Advisory (USN-3719-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.9AI score0.04101EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/07/08 12:0 a.m.26 views

EulerOS 2.0 SP9 : c-ares (EulerOS-SA-2022-1959)

According to the versions of the c-ares package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A possible use-after-free and double-free in c-ares lib version 1.16.0 if aresdestroy is called prior to aresgetaddrinfo completing. This flaw...

3.3CVSS7AI score0.00188EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/07/08 12:0 a.m.14 views

Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2022-1959)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS4.4AI score0.00188EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2018:2403-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8AI score0.04101EPSS
Exploits0References15
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.12 views

SUSE: Security Advisory (SUSE-SU-2018:2085-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.04101EPSS
Exploits1References2
CVE
CVE
added 2021/05/13 1:38 p.m.136 views

CVE-2020-14354

The CVE-2020-14354 entry concerns c-ares library 1.16.0, where a use-after-free and double-free can occur if ares_destroy() completes before an in-progress ares_getaddrinfo() finishes. This condition may allow a remote attacker to crash the service that uses the c-ares library, impacting availabi...

3.3CVSS3.9AI score0.00188EPSS
Exploits1References5Affected Software1
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2019:1196-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.2AI score0.04101EPSS
Exploits1References24
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2018:2084-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.2AI score0.04101EPSS
Exploits1References24
Tenable Nessus
Tenable Nessus
added 2020/12/14 12:0 a.m.41 views

Fedora 33 : 1:nodejs (2020-43d5a372fc)

Update to 14.15.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...

8.8CVSS6.9AI score0.04991EPSS
Exploits1References8
RedhatCVE
RedhatCVE
added 2020/08/12 2:43 p.m.23 views

CVE-2020-14354

A possible use-after-free and double-free in c-ares lib version 1.16.0 if aresdestroy is called prior to aresgetaddrinfo completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib. The highest threat from this vulnerability is to this service availability...

2.1CVSS3.9AI score0.00188EPSS
Exploits1References6
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for mutt (EulerOS-SA-2018-1304)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.0253EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:0 a.m.33 views

NewStart CGSL MAIN 4.05 : mutt Multiple Vulnerabilities (NS-SA-2019-0140)

The remote NewStart CGSL host, running version MAIN 4.05, has mutt packages installed that are affected by multiple vulnerabilities: - An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters...

9.8CVSS8.1AI score0.0253EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:0 a.m.22 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : mutt Multiple Vulnerabilities (NS-SA-2019-0038)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has mutt packages installed that are affected by multiple vulnerabilities: - An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquot...

9.8CVSS8.1AI score0.0253EPSS
Exploits0References4
CVE
CVE
added 2019/08/10 3:7 p.m.117 views

CVE-2019-14354

Ledger Nano S/Nano X suffer a side‑channel risk from the row‑based OLED display: power consumption per display cycle correlates with illuminated pixels, enabling partial recovery of display contents (e.g., PIN or BIP39 mnemonic) if an attacker can monitor USB power while secret data is shown. Thi...

2.4CVSS3.7AI score0.00058EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder