Lucene search
+L

411 matches found

osv_ghsa
osv_ghsa
•added 2019/09/30 7:42 p.m.•37 views

GHSA-CXW4-9QV9-VX5H High severity vulnerability that affects PeterO.Cbor

Impact The CBOR library supports optional tags that enable CBOR objects to contain references to objects within them. Versions earlier than 4.0 resolved those references automatically. While this by itself doesn't cause much of a security problem, a denial of service can happen if those reference...

7.5AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2019/09/30 7:42 p.m.•46 views

High severity vulnerability that affects PeterO.Cbor

Impact The CBOR library supports optional tags that enable CBOR objects to contain references to objects within them. Versions earlier than 4.0 resolved those references automatically. While this by itself doesn't cause much of a security problem, a denial of service can happen if those reference...

0.1AI score
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2019/09/30 12:00 a.m.•5 views

PT-2019-20039

Name of the Vulnerable Software and Affected Versions CBOR library versions prior to 4.0 Description The CBOR library has a denial of service issue due to the automatic resolution of references in CBOR objects. This can cause a significant increase in memory usage when the decoded CBOR object is...

6AI score
SaveExploits0References3
osv_cve
osv_cve
•added 2019/09/27 7:15 p.m.•21 views

CVE-2019-9403

In cn-cbor, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113512324...

6.5CVSS7AI score0.00732EPSS
SaveExploits0References1
NVD
NVD
•added 2019/09/27 7:15 p.m.•31 views

CVE-2019-9403

In cn-cbor, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113512324...

6.5CVSS6.2AI score0.00732EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/09/27 6:05 p.m.•33 views

CVE-2019-9403

In cn-cbor, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113512324...

6.6AI score0.00732EPSS
SaveExploits0References1
CVE
CVE
•added 2019/09/27 6:05 p.m.•67 views

CVE-2019-9403

CVE-2019-9403: In cn-cbor, an out-of-bounds read due to improper casting could lead to remote information disclosure on Android 10. Impact is information disclosure with no privileges gained; exploitation requires user interaction. CVSS2 base 4.3 (PARTIAL confidentiality impact) and CVSS3.1 base ...

6.5CVSS6.5AI score0.00732EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/27 12:00 a.m.•7 views

CVE-2019-9403: Out-of-bounds Read

In cn-cbor, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113512324...

6.5CVSS6.8AI score0.00732EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/09/27 12:00 a.m.•4 views

PT-2019-19615

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds read in cn-cbor due to improper casting. This could lead to remote information disclosure with no additional execution privileges needed. User interaction...

6.5CVSS0.00732EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2019/05/07 12:00 a.m.•96 views

Fedora Update for jackson-jaxrs-providers FEDORA-2019-df57551f6d

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

10CVSS8.7AI score0.12679EPSS
SaveExploits1References2
Fedora
Fedora
•added 2019/02/19 2:03 p.m.•62 views

[SECURITY] Fedora 29 Update: jackson-jaxrs-providers-2.9.8-1.fc29

This is a multi-module project that contains Jackson-based JAX-RS providers for following data formats: JSON, Smile binary JSON, XML, CBOR another kind of binary JSON, YAML...

10CVSS3.2AI score0.12679EPSS
SaveExploits1
Rows per page
Query Builder