Lucene search
+L

49 matches found

OSV
OSV
added 2020/06/15 5:15 p.m.14 views

CVE-2019-20838

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454...

7.5CVSS7.7AI score
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2020/06/15 5:15 p.m.36 views

CVE-2019-20838

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454...

7.5CVSS6.9AI score0.0277EPSS
SaveExploits0References3
OSV
OSV
added 2020/06/15 5:15 p.m.2 views

BELL-CVE-2019-20838 CVE-2019-20838 does not affect BellSoft software

Bulletin has no description...

7.5CVSS5.8AI score0.0277EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/06/15 4:50 p.m.50 views

CVE-2019-20838

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454...

6.8AI score0.0277EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2020/06/15 4:50 p.m.48 views

CVE-2019-20838

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454...

7.5CVSS6.9AI score0.0277EPSS
SaveExploits0
CVE
CVE
added 2020/06/15 4:50 p.m.311 views

CVE-2019-20838

CVE-2019-20838 is a PCRE/PCRE2 vulnerability where libpcre had a subject buffer over-read during JIT compilation in non-UTF mode when the pattern uses \X or \R with more than one fixed quantifier. Affected versions include PCRE up to 8.43; remediation is to upgrade to a patched PCRE (e.g., 8.43+;...

7.5CVSS6.7AI score0.0277EPSS
SaveExploits0References7Affected Software1
CVE
CVE
added 2019/05/13 4:04 a.m.70 views

CVE-2018-20838

Summary: CVE-2018-20838 concerns the WordPress AMP for WP plugin. The vulnerability, described as a stored XSS in the function ampforwp_save_steps_data, affects versions before 0.9.97.21. The underlying issue is lack of proper validation of client-side data in the plugin, enabling an attacker to ...

5.4CVSS5.5AI score0.01078EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2019/05/13 4:04 a.m.24 views

CVE-2018-20838

ampforwpsavestepsdata in the AMP for WP plugin before 0.9.97.21 for WordPress allows stored XSS...

5.5AI score0.01078EPSS
SaveExploits1References4
VulnCheck KEV
VulnCheck KEV
added 2018/11/20 12:00 a.m.8 views

VulnCheck KEV: CVE-2018-20838

ampforwpsavestepsdata in the AMP for WP plugin before 0.9.97.21 for WordPress allows stored XSS...

5.4CVSS6AI score0.01078EPSS
SaveExploits1References1
Rows per page
Query Builder