Lucene search
+L

1422 matches found

Tenable Nessus
Tenable Nessus
•added 2025/01/29 12:00 a.m.•18 views

Fedora 41 : abseil-cpp (2025-7631628ba6)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-7631628ba6 advisory. Update to 20240722.1 - Fix potential integer overflow in hash container create/resize Tenable has extracted the preceding description block directly from the...

5.7AI score
SaveExploits0References1
OSV
OSV
•added 2025/01/21 11:15 p.m.•15 views

CVE-2024-49738

In writeInplace of Parcel.cpp, there is a possible out of bounds write. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.0008EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/21 11:04 p.m.•34 views

CVE-2024-49738

In writeInplace of Parcel.cpp, there is a possible out of bounds write. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.0008EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/21 11:04 p.m.•817 views

CVE-2024-49738

Google Android is affected by an out-of-bounds write vulnerability within the writeInplace function of Parcel.cpp . This flaw arises from a failure to properly check boundaries, which could allow for local escalation of privilege without requiring additional execution privileges or user interacti...

7.8CVSS7.2AI score0.0008EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•12 views

PT-2025-2853 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fix Description: The issue is related to a possible out of bounds write in the writeInplace function of Parcel.cpp. This could lead to local escalation of privilege with no additional execution privileges needed...

7.8CVSS6.8AI score0.0008EPSS
SaveExploits0References5
CVE
CVE
•added 2025/01/02 11:58 p.m.•205 views

CVE-2024-43097

A security vulnerability exists in the SkRegion.cpp component of Google Android , Firefox ESR , and Thunderbird . The flaw is caused by an integer overflow in the resizeToAtLeast function, leading to an out-of-bounds write . This can result in local privilege escalation , allowing an attacker to ...

7.8CVSS7.2AI score0.00358EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•14 views

PT-2025-49305

Name of the Vulnerable Software and Affected Versions cpp-httplib versions prior to 0.27.0 Description The cpp-httplib library has a flaw where attacker-controlled HTTP headers can influence server metadata, logging, and authorization decisions. An attacker can inject headers such as REMOTE ADDR,...

10CVSS7.8AI score0.00333EPSS
SaveExploits2References31
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•10 views

PT-2025-49306

Name of the Vulnerable Software and Affected Versions cpp-httplib versions prior to 0.27.0 Description The software is a C++11 single-file header-only cross-platform HTTP/HTTPS library. A flaw exists where attacker-controlled HTTP headers can affect server-visible metadata, logging, and...

5.3CVSS6.3AI score0.00274EPSS
SaveExploits1References12
Mend
Mend
•added 2024/11/27 9:35 p.m.•2 views

CVE-2017-13323

In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation...

8.6CVSS0.00091EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/27 12:00 a.m.•3 views

CVE-2017-13323: Integer Overflow or Wraparound

In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS7.5AI score0.00091EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/27 12:00 a.m.•16 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by an out-of-bounds write in String16 of String16.cpp. An attacker can exploit the vulnerability to escalate privileges...

8.4CVSS7.5AI score0.00091EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/19 10:15 p.m.•15 views

CVE-2018-9421

In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00076EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/19 10:15 p.m.•32 views

CVE-2018-9412

In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation...

5.5CVSS0.00082EPSS
SaveExploits0References1
Mend
Mend
•added 2024/11/19 9:08 p.m.•1 views

CVE-2018-9412

In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation...

6.8CVSS0.00082EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•3 views

PT-2024-10676

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a possible resource exhaustion due to improper input validation in the removeUnsynchronization function of ID3.cpp. This could lea...

5.5CVSS5.9AI score0.00082EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•4 views

CVE-2018-9412: Uncontrolled Resource Consumption

In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation...

5.5CVSS8.2AI score0.00082EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/11/14 12:00 a.m.•15 views

Fedora 41 : llama-cpp (2024-89c69bb9d3)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-89c69bb9d3 advisory. Update to b3561 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

7.5CVSS5.5AI score0.00456EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2024/11/05 3:28 a.m.•6 views

libproxy: sending more than 102400 bytes in PAC without a Content-Length present could result in buffer overflow

A vulnerability was found in libproxy, where a buffer overflow can occur if a server serving a PAC file sends more than 102400 bytes without a Content-Length header, this flaw allows an attacker to trigger an overflow of PACHTTPBLOCKSIZE 512 bytes, potentially leading to application crashes or...

9.8CVSS7.5AI score0.03556EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2024/11/05 12:00 a.m.•17 views

Fedora 40 : llama-cpp (2024-b07b0b41ec)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b07b0b41ec advisory. Update to b3561 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

10CVSS5.5AI score0.02607EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2024/11/05 12:00 a.m.•19 views

Fedora: Security Advisory (FEDORA-2024-b07b0b41ec)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.2AI score0.02607EPSS
SaveExploits1References3
Rows per page
Query Builder