Lucene search
+L

1398 matches found

OSV
OSV
added 2022/01/01 12:15 a.m.11 views

AZL-8960 CVE-2021-45953 affecting package dnsmasq for versions less than 2.89-1

Dnsmasq 2.86 has a heap-based buffer overflow in extractname called from hashquestions and fuzzutil.c. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

9.8CVSS7.7AI score0.0259EPSS
SaveExploits1References1
Prion
Prion
added 2022/01/01 12:15 a.m.34 views

Heap overflow

DISPUTED Dnsmasq 2.86 has a heap-based buffer overflow in extractname called from answerauth and FuzzAuth. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge."...

7.5CVSS9.5AI score0.0259EPSS
SaveExploits3References4Affected Software1
CNNVD
CNNVD
added 2022/01/01 12:0 a.m.9 views

Dnsmasq 缓冲区错误漏洞

dnsmasq is a lightweight DNS forwarding and DHCP and TFTP server written in C. It can be used as a server to forward DNS, DHCP, and TFTP. Dnsmasq 2.86 suffers from a buffer error vulnerability that stems from a heap-based buffer overflow in extractname called from answerauth and FuzzAuth...

9.8CVSS8.5AI score0.0259EPSS
SaveExploits1References6
OSV
OSV
added 2021/12/10 12:0 a.m.7 views

OSV-2021-1658 Null-dereference READ in istio.io/istio/security/pkg/util.ExtractJwtAud

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42142 Crash type: Null-dereference READ Crash state: istio.io/istio/security/pkg/util.ExtractJwtAud...

7.2AI score
SaveExploits0References1
Prion
Prion
added 2021/11/12 3:15 p.m.15 views

Directory traversal

ServerManagement master branch as of commit 49491cc6f94980e6be7791d17be947c27071eb56 is affected by a directory traversal vulnerability. This vulnerability can be used to extract credentials which can in turn be used to execute code...

5CVSS7.6AI score0.02391EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2021/11/10 12:0 a.m.5 views

PT-2021-22372 · Octorpki · Octorpki

Name of the Vulnerable Software and Affected Versions: OctoRPKI affected versions not specified Description: The issue allows a repository to create a file that can be written to disk outside the base cache folder due to a failure to escape a URI with a filename containing "..". This could enable...

9.8CVSS7.6AI score0.04065EPSS
SaveExploits0References45
VulnCheck KEV
VulnCheck KEV
added 2021/11/03 12:0 a.m.3 views

VulnCheck KEV: CVE-2020-5847

Unraid contains a vulnerability due to the insecure use of the extract PHP function that can be abused to execute remote code as root. This CVE is chainable with CVE-2020-5849 for initial access...

10CVSS7.5AI score0.95844EPSS
SaveExploits9References1
Prion
Prion
added 2021/10/22 2:15 p.m.20 views

Code injection

The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality...

6.5CVSS8.6AI score0.00966EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
added 2021/10/22 1:23 p.m.26 views

CVE-2021-42540 Emerson WirelessHART Gateway

The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality...

8CVSS8.8AI score0.00966EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/05 9:42 p.m.4 views

CVE-2021-42540

The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality...

8.8CVSS5.8AI score0.00966EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2021/10/04 6:15 p.m.25 views

CVE-2021-38394

An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted...

6.9CVSS0.00234EPSS
SaveExploits0References1
Metasploit
Metasploit
added 2021/09/28 5:42 p.m.240 views

Safari Credential Gatherer

This module searches for Safari credentials on a Windows host. Module Options msf use post/windows/gather/credentials/safari msf postsafari show actions ...actions... msf postsafari set ACTION msf postsafari show options ...show and set options... msf postsafari run This module requires Metasploi...

7AI score
SaveExploits0
vulnersOsv
vulnersOsv
added 2021/08/25 8:52 p.m.5 views

airust (=0.1.6), font (>=0.2.0 <=0.3.2) +6 more potentially affected by CVE-2021-26953 via postscript (>=0.10.1 <=0.11.1)

postscript CARGO version =0.10.1, =0.2.0, =0.0.2, =0.1.0, =0.15.0, =0.1.0, =0.6.3 - text =0.0.4 Source cves: CVE-2021-26953 Source advisory: OSV:GHSA-FHVC-GP6C-H2WX...

7.5CVSS7.1AI score0.01489EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2021/08/18 12:0 a.m.14 views

Vulnerability of the extract_name() function (rfc1035.c): The Dnsmasq DNS server has a vulnerability related to the failure of operations beyond the buffer in memory, allowing an attacker to cause a service failure.

The vulnerability of the extractname function rfc1035.c in the Dnsmasq DNS server is related to the lack of length checking on input data. Exploiting this vulnerability allows a remote attacker to cause a service failure...

7.1CVSS6.5AI score0.86692EPSS
SaveExploits0References10Affected Software4
ATTACKERKB
ATTACKERKB
added 2021/08/11 10:15 p.m.4 views

CVE-2021-38572

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated...

9.8CVSS7.3AI score0.01117EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/07/15 12:0 a.m.14 views

Vulnerability of the extract_name() function (rfc1035.c): The Dnsmasq DNS server has a vulnerability related to the failure of operations beyond the buffer in memory, allowing an attacker to cause a service failure.

The vulnerability of the extractname function rfc1035.c in the Dnsmasq DNS server is related to the lack of length checking on input data. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.1CVSS6.5AI score0.86041EPSS
SaveExploits0References11Affected Software4
OSV
OSV
added 2021/07/08 12:1 a.m.10 views

OSV-2021-934 Heap-buffer-overflow in extract_addresses

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35865 Crash type: Heap-buffer-overflow WRITE 1 Crash state: extractaddresses FuzzExtractTheAddress fuzzrfc1035.c...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/07/06 12:0 a.m.4 views

PT-2021-7716 · Dnsmasq +2 · Dnsmasq +2

Name of the Vulnerable Software and Affected Versions: Dnsmasq affected versions not specified Description: The issue is related to a buffer overflow in the extract name function of the Dnsmasq DNS server. This could allow a remote attacker to access confidential data, compromise its integrity, a...

9.8CVSS9.6AI score0.0259EPSS
SaveExploits7References43
Positive Technologies
Positive Technologies
added 2021/07/06 12:0 a.m.6 views

PT-2021-7713 · Dnsmasq +2 · Dnsmasq +2

Name of the Vulnerable Software and Affected Versions: Dnsmasq affected versions not specified Description: The issue is related to a buffer overflow in the extract name function of the fuzz util.c component of the Dnsmasq DNS server. This could allow a remote attacker to access confidential data...

10CVSS9.6AI score0.0259EPSS
SaveExploits7References43
OSV
OSV
added 2021/07/01 3:15 a.m.5 views

DEBIAN-CVE-2017-20006

UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile...

7.8CVSS8.6AI score0.01228EPSS
SaveExploits1References1
Rows per page
Query Builder