12491 matches found
Remote Code Execution (RCE)
Microsoft ChakraCore is vulnerable to remote code execution. This is due to a buffer over-read vulnerability which would allow a remote attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2017-0224, CVE-2017-0228, CVE-2017-0229,...
Stack overflow
getToken in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service stack-based buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...
Design/Logic Flaw
opmov in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...
Heap overflow
In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...
CVE-2018-19839
In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...
CVE-2018-19839
In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...
CVE-2018-19843
opmov in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...
CVE-2018-19843
opmov in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...
CVE-2018-19839
In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...
CVE-2018-19842
getToken in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service stack-based buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...
CVE-2018-19843
opmov in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...
CVE-2018-19842
getToken in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service stack-based buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...
CVE-2018-19842
CVE-2018-19842 affects radare2, specifically the function getToken in the file libr/asm/p/asm_x86_nz.c . The issue is a stack-based buffer over-read triggered by crafted x86 assembly data, leading to a potential denial of service . Connected sources confirm the vulnerability exists in radare2 bef...
CVE-2018-19843
CVE-2018-19843 affects radare2: opmov in libr/asm/p/asm_x86_nz.c vulnerable to a buffer over-read resulting in a DoS when fed crafted x86 assembly data. Impact described as Denial of Service; exploitation demonstrated by rasm2. The vulnerability applies to radare2 builds before 3.1.0. No remediat...
CVE-2018-19839
CVE-2018-19839 affects LibSass prior to 3.5.5. The vulnerability is a heap-based buffer over-read in Sass::handle_error (sass_context.cpp) that attackers can trigger via a crafted Sass file, causing a denial-of-service. Public details in the initial document confirm the exact function and file, t...
CVE-2018-19839
In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...
CVE-2018-19839
In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...
CVE-2018-19842
getToken in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service stack-based buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...
Denial Of Service (DoS)
libexiv2.so is vulnerable to denial of service. A heap-based buffer over-read in the function Exiv2::IptcData::printStructure in src/iptc.cpp allows a remote attacker to cause a denial of service condition...
