Lucene search
K

2899 matches found

Kitploit
Kitploit
added 2019/02/04 8:58 p.m.122 views

Fnord - Pattern Extractor For Obfuscated Code

Fnord is a pattern extractor for obfuscated code Description Fnord has two main functions: 1. Extract byte sequences and create some statistics 2. Use these statistics, combine length, number of occurrences, similarity and keywords to create a YARA rule 1. Statistics Fnord processes the file with...

7.4AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2019/01/03 12:0 a.m.31 views

Fedora 28 : freedink-dfarc (2018-f2e8788852)

New upstream release Fix directory traversal in D-Mod extractor CVE-2018-0496 1584843 no answer from security team Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and form...

7.5CVSS7.2AI score0.02448EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2019/01/03 12:0 a.m.32 views

Fedora 29 : mkvtoolnix (2018-44ea020814)

Version 28.2.0 'The Awakening' 2018-10-25 Bug fixes - mkvmerge, mkvinfo, mkvextract, mkvpropedit, MKVToolNix GUI's info tool & chapter editor: fixed a case of memory being accessed after it had been freed earlier. This can be triggered by specially crafted Matroska files and lead to arbitrary cod...

7.8CVSS7.7AI score0.01522EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2018/12/25 12:0 a.m.4 views

The vulnerability of the EXTRACTOR_zip_extract_method() method in the GNU Libextractor library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the EXTRACTORzipextractmethod method zipextractor.c in the GNU Libextractor library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

9.3CVSS7.8AI score0.02646EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2018/12/24 5:29 a.m.1 views

DEBIAN-CVE-2018-20430

GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function historyextract in plugins/ole2extractor.c, related to EXTRACTORcommonconverttoutf8 in common/convert.c...

6.5CVSS6.9AI score0.02237EPSS
Exploits1References1
OSV
OSV
added 2018/12/24 5:29 a.m.4 views

CVE-2018-20431

GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function processmetadata in plugins/ole2extractor.c...

6.5CVSS6.3AI score
Exploits0References6
OSV
OSV
added 2018/12/24 5:29 a.m.3 views

UBUNTU-CVE-2018-20431

GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function processmetadata in plugins/ole2extractor.c...

6.5CVSS6.8AI score0.02236EPSS
Exploits1References7
Debian CVE
Debian CVE
added 2018/12/24 5:0 a.m.16 views

CVE-2018-20431

GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function processmetadata in plugins/ole2extractor.c...

6.5CVSS6.6AI score0.02236EPSS
Exploits1
CNVD
CNVD
added 2018/12/24 12:0 a.m.2 views

GNU Libextractor Denial of Service Vulnerability (CNVD-2019-03528)

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A null pointer back-reference vulnerability exists in the 'processmetadata' function in the plugins/ole2extractor.c file in GNU Libextractor 1.8 and earlier. An attacker could exploit this...

6.5CVSS8.6AI score0.02236EPSS
Exploits1References1
CNVD
CNVD
added 2018/12/24 12:0 a.m.0 views

GNU Libextractor Buffer Overflow Vulnerability (CNVD-2019-03527)

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A buffer overflow vulnerability exists in the 'historyextract' function in the plugins/ole2extractor.c file in GNU Libextractor 1.8 and earlier. No details of the vulnerability are provided at...

6.5CVSS9.1AI score0.02237EPSS
Exploits1References1
CNVD
CNVD
added 2018/12/07 12:0 a.m.3 views

Google Android Information Disclosure Vulnerability (CNVD-2018-26778)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in the dumpExtractors of the IMediaExtractor.cp file in Android, which can be exploited by an attacker to obtain recently accessed...

5.5CVSS5.5AI score0.00165EPSS
Exploits0References1
OSV
OSV
added 2018/12/06 2:29 p.m.1 views

CVE-2018-9554

In dumpExtractors of IMediaExtractor.cp, there is a possible disclosure of recently accessed media files due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

5.5CVSS5.9AI score
Exploits0References2
OSV
OSV
added 2018/09/04 12:29 a.m.10 views

CVE-2018-16430

GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...

8.8CVSS8.5AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2018/09/04 12:29 a.m.43 views

CVE-2018-16430

GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...

8.8CVSS7.2AI score0.02646EPSS
Exploits1References3
Prion
Prion
added 2018/09/04 12:29 a.m.12 views

Out-of-bounds

GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...

6.8CVSS8.4AI score0.02646EPSS
Exploits1References5Affected Software2
OSV
OSV
added 2018/09/04 12:29 a.m.2 views

UBUNTU-CVE-2018-16430

GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...

8.8CVSS7.2AI score0.02646EPSS
Exploits1References4
Cvelist
Cvelist
added 2018/09/04 12:0 a.m.22 views

CVE-2018-16430

GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...

8.5AI score0.02646EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2018/09/04 12:0 a.m.26 views

CVE-2018-16430

GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...

8.8CVSS8.6AI score0.02646EPSS
Exploits1
ossfuzz
ossfuzz
added 2018/07/24 3:22 p.m.15 views

llvm/llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::DataExtractor::getU32

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=4561877290975232 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

6.8AI score
Exploits0Affected Software1
CNVD
CNVD
added 2018/07/18 12:0 a.m.1 views

GNU Libextractor mpeg_extractor.c File Infinite Loop Vulnerability

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. An infinite loop vulnerability exists in the 'EXTRACTORmpegextractmethod' function mpegextractor.c file in GNU Libextractor versions prior to 1.7. An attacker can exploit this vulnerability to...

6.5CVSS7.1AI score0.01718EPSS
Exploits1References1
Rows per page
Query Builder