Lucene search
+L

18249 matches found

OSV
OSV
added 2023/08/29 4:15 p.m.25 views

CVE-2021-32050

Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed. Without due care, an application may...

7.5CVSS5.8AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2023/08/29 3:24 p.m.15 views

CVE-2021-32050 Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application

Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed. Without due care, an application may...

4.2CVSS5.9AI score0.00646EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2023/08/29 3:24 p.m.45 views

CVE-2021-32050 Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application

Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed. Without due care, an application may...

4.2CVSS7.9AI score0.00646EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2023/08/29 3:24 p.m.74 views

CVE-2021-32050

Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed. Without due care, an application may...

7.5CVSS7.4AI score0.00646EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/08/29 2:15 a.m.5 views

SUSE CVE-2020-22217

Buffer overflow vulnerability in c-ares before 1161 thru 1170 via function aresparsesoareply in aresparsesoareply.c...

7.6CVSS7.3AI score0.00977EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/08/29 2:13 a.m.9 views

SUSE CVE-2021-32292

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

9.8CVSS7AI score0.01287EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2023/08/29 12:00 a.m.18 views

Ubuntu: Security Advisory (USN-6310-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.01287EPSS
SaveExploits1References2
Openbugbounty
Openbugbounty
added 2023/08/28 7:45 p.m.13 views

h-c-s.nl Cross Site Scripting vulnerability OBB-3623305

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
OSV
OSV
added 2023/08/28 7:18 p.m.12 views

USN-6310-1 json-c vulnerability

It was discovered that json-c incorrectly handled certain JSON files. An attacker could possibly use this issue to cause a crash or execute arbitrary code...

9.8CVSS7.4AI score0.01287EPSS
SaveExploits1References2
Ubuntu
Ubuntu
added 2023/08/28 7:18 p.m.65 views

USN-6310-1: json-c vulnerability

It was discovered that json-c incorrectly handled certain JSON files. An attacker could possibly use this issue to cause a crash or execute arbitrary code...

9.8CVSS7.2AI score0.01287EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2023/08/28 12:00 a.m.11 views

PT-2023-27023 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev449-g5948e4f70-master Description: The issue is related to a heap-use-after-free vulnerability via the gf bs align function at bitstream.c. This allows attackers to cause a Denial of Service DoS by supplying a crafted...

5.5CVSS5AI score0.00276EPSS
SaveExploits1References15
Tenable Nessus
Tenable Nessus
added 2023/08/28 12:00 a.m.27 views

Ubuntu 22.04 LTS : json-c vulnerability (USN-6310-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6310-1 advisory. It was discovered that json-c incorrectly handled certain JSON files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. Tenabl...

9.8CVSS7.3AI score0.01287EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/08/28 12:00 a.m.13 views

PT-2023-27678 · Virustotal · Yara

Name of the Vulnerable Software and Affected Versions: VirusTotal yara version 4.3.2 Description: The issue allows a remote attacker to execute arbitrary code via the yr execute cod function in the exe.c component. This is a Buffer Overflow vulnerability. Recommendations: For VirusTotal yara...

8.8CVSS8.9AI score0.01062EPSS
SaveExploits1References11
Openbugbounty
Openbugbounty
added 2023/08/26 12:14 p.m.17 views

c-arc.de Cross Site Scripting vulnerability OBB-3618933

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/08/26 8:08 a.m.10 views

SUSE CVE-2022-48064

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfddwarf2findnearestlinewithalt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

7.6AI score0.00609EPSS
SaveExploits1References16
Microsoft CVE
Microsoft CVE
added 2023/08/26 7:00 a.m.12 views

An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.

...

9.8CVSS6.7AI score0.01287EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2023/08/25 12:00 a.m.22 views

Ubuntu: Security Advisory (USN-6307-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS7.6AI score0.0071EPSS
SaveExploits1References2
CNVD
CNVD
added 2023/08/25 12:00 a.m.14 views

Gnu glibc denial of service vulnerability

Gnu glibc is a core component of the Linux system used to implement the C standard library, providing underlying API support for applications, following the POSIX and ISO C standards. A denial of service vulnerability exists in Gnu glibc, which stems from an endpattern in the GNU C library that...

5.5CVSS6.6AI score0.00317EPSS
SaveExploits1References1
NVD
NVD
added 2023/08/24 11:15 p.m.21 views

CVE-2023-40022

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in consumecount of src/gnuv2/cplus-dem.c. The overflow check is valid logic but, is missing the modulus if the block once compiled. The compiler sees this block...

7.8CVSS7.8AI score0.00291EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2023/08/24 10:50 p.m.27 views

CVE-2023-40022 Rizin vulnerable to Integer Overflow in C++ demangler logic

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in consumecount of src/gnuv2/cplus-dem.c. The overflow check is valid logic but, is missing the modulus if the block once compiled. The compiler sees this block...

7.8CVSS7.8AI score0.00291EPSS
SaveExploits0References5
Rows per page
Query Builder