Lucene search
+L

32 matches found

OSV
OSV
added 2024/10/09 12:00 a.m.27 views

CVE-2024-32608

HDF5 library through 1.14.3 has memory corruption in H5Aclose resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

9.8CVSS9.7AI score
SaveExploits0References3
OpenVAS
OpenVAS
added 2024/09/07 12:00 a.m.71 views

openSUSE: Security Advisory for hdf5, netcdf, trilinos (SUSE-SU-2024:3144-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.5AI score0.02402EPSS
SaveExploits8References2
Tenable Nessus
Tenable Nessus
added 2024/06/21 12:00 a.m.33 views

SUSE SLES12: hdf5-gnu-hpc-devel / hdf5-gnu-mvapich2-hpc-devel / etc (SUSE-SU-2024:2105-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2105-1 advisory. - Fix various security issues in hdf5 bsc1224158: CVE-2024-29158, CVE-2024-29161, CVE-2024-29166, CVE-2024-32608, CVE-2024-32610,...

9.8CVSS6.8AI score0.02402EPSS
SaveExploits2References29
OSV
OSV
added 2024/06/20 8:45 a.m.38 views

SUSE-SU-2024:2105-1 Security update for hdf5

This update for hdf5 fixes the following issues: - Fix various security issues in hdf5 bsc1224158: CVE-2024-29158, CVE-2024-29161, CVE-2024-29166, CVE-2024-32608, CVE-2024-32610, CVE-2024-32614, CVE-2024-32619, CVE-2024-32620, CVE-2024-33873, CVE-2024-33874, CVE-2024-33875 - Additionally, these...

9.8CVSS7AI score0.02402EPSS
SaveExploits2References16
RedhatCVE
RedhatCVE
added 2024/05/10 8:27 p.m.24 views

CVE-2024-32608

HDF5 library contains a memory corruption issue in H5Aclose function resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

4.8CVSS9.6AI score0.00669EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/06/30 2:15 a.m.9 views

CVE-2023-32608

Directory traversal vulnerability in Pleasanter Community Edition and Enterprise Edition 1.3.39.2 and earlier versions allows a remote authenticated attacker to alter an arbitrary file on the server...

6.6AI score0.01158EPSS
SaveExploits0References2
CVE
CVE
added 2023/06/30 2:15 a.m.71 views

CVE-2023-32608

CVE-2023-32608 describes a directory traversal in Pleasanter (Community/Enterprise) versions 1.3.39.2 and earlier, allowing a remote authenticated attacker to alter arbitrary server files. The issue is confirmed across multiple sources; remediation guidance in the connected documents indicates up...

6.5CVSS6.2AI score0.01158EPSS
SaveExploits0References2Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/06/22 12:00 a.m.31 views

JVN#97818024: Multiple vulnerabilities in Pleasanter

Pleasanter provided by Implem Inc. contains multiple vulnerabilities listed below. Stored cross-site scripting vulnerability CWE-79 - CVE-2023-32607 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4 CVSS v2| AV:N/AC:M/Au:S/C:N/I:P/A:N| Base...

6.5CVSS6.5AI score0.01158EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2022/11/08 12:00 a.m.10 views

CVE-2022-32608

In jpeg, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07388753; Issue ID: ALPS07388753...

6.7AI score0.00102EPSS
SaveExploits0References1
CVE
CVE
added 2022/11/08 12:00 a.m.62 views

CVE-2022-32608

CVE-2022-32608 describes a race-condition–driven use-after-free in the jpeg component that can allow local escalation of privilege to SYSTEM. Exploitation is possible without user interaction, with local access required. Reported patch/identifier: ALPS07388753 (Issue ID: ALPS07388753). Connected ...

6.4CVSS6.6AI score0.00102EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/05/12 2:43 p.m.72 views

CVE-2021-32608

CVE-2021-32608 affects SmartStoreNET up to version 4.1.1. The root cause is that Views/Boards/Partials/_ForumPost.cshtml renders user-controlled forum post text (FormattedText) without persistent sanitization, enabling a sanitize-then-transform issue. The vulnerability is demonstrated via Cross-S...

9.8CVSS9.4AI score0.33442EPSS
SaveExploits1References2Affected Software1
Saint
Saint
added 2009/02/26 12:00 a.m.49 views

Java Runtime Environment JAR manifest Main Class buffer overflow

Added: 02/26/2009 CVE: CVE-2008-5354 BID: 32608 OSVDB: 50499 Background Java Runtime Environment JRE allows end users to run Java applications. Problem A buffer overflow vulnerability in JRE allows command execution when a user opens a JAR archive containing a manifest file with a specially craft...

9.3CVSS7.9AI score0.04798EPSS
SaveExploits5
Rows per page
Query Builder