Lucene search
+L

818 matches found

OSV
OSV
added 2020/11/25 5:15 p.m.6 views

DEBIAN-CVE-2020-26243

Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being...

7.5CVSS7AI score0.02664EPSS
SaveExploits1References1
OSV
OSV
added 2020/11/25 5:15 p.m.19 views

CVE-2020-26243

Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being...

7.5CVSS7.5AI score
SaveExploits0References4
OSV
OSV
added 2020/11/25 5:15 p.m.7 views

UBUNTU-CVE-2020-26243

Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being...

7.5CVSS6.9AI score0.02664EPSS
SaveExploits1References8
Prion
Prion
added 2020/11/25 5:15 p.m.17 views

Design/Logic Flaw

Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being...

4.3CVSS7.4AI score0.02664EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2020/11/25 4:53 p.m.31 views

GHSA-85RR-4RH9-HHWH Memory leak in Nanopb

Impact Decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being decoded contains the submessage multiple times. This is rare in normal messages, but it is a concern wh...

7.5CVSS7.5AI score0.02664EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2020/11/25 4:50 p.m.65 views

CVE-2020-26243

Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being...

7.5CVSS7.4AI score0.02664EPSS
SaveExploits1
Openbugbounty
Openbugbounty
added 2020/10/01 3:53 p.m.14 views

allianz.marketingarena.it Cross Site Scripting vulnerability OBB-1376511

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/08/04 12:00 a.m.31 views

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.8AI score0.12042EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/04 12:00 a.m.25 views

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.8AI score0.12042EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/04 12:00 a.m.24 views

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.8AI score0.12042EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/04 12:00 a.m.30 views

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.8AI score0.12042EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/04 12:00 a.m.29 views

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.8AI score0.12042EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/04 12:00 a.m.40 views

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.8AI score0.12042EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/07 12:00 a.m.24 views

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.8AI score0.05777EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/07 12:00 a.m.20 views

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.8AI score0.05777EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/07 12:00 a.m.24 views

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.6AI score0.05777EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/07 12:00 a.m.24 views

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.8AI score0.05777EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/07 12:00 a.m.24 views

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.8AI score0.05777EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/05/27 12:00 a.m.27 views

Rockwellautomation Arena Access of Resource Using Incompatible Type ('Type Confusion')

A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena...

6.8CVSS2.9AI score0.05571EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/05/27 12:00 a.m.25 views

Rockwellautomation Arena Unspecified Vulnerability

A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena...

6.8CVSS3.2AI score0.05571EPSS
SaveExploits0References3
Rows per page
Query Builder