Lucene search
+L

1663 matches found

Packet Storm
Packet Storm
added 2016/12/30 12:0 a.m.54 views

Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass

i? Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass Vendor: Dell Inc. Product web page: https://www.sonicwall.com/products/sonicwall-gms/ Affected version: 8.1 8.0 SP1 Build 8048.1410 Flow Server Virtual Appliance Fixed in: 8.2 VR-2016-01-C1F Summary: Provide your organizatio...

4.3CVSS0.5AI score0.07689EPSS
SaveExploits5
Zero Science Lab
Zero Science Lab
added 2016/12/29 12:0 a.m.152 views

Dell SonicWALL Global Management System (GMS) 8.1 Adobe Flex SOP Bypass

Summary Provide your organization, distributed enterprise or managed service offering with an intuitive, powerful way to rapidly deploy and centrally manage SonicWall solutions, with SonicWall GMS. Get more value from your firewall, secure remote access, anti-spam, and backup and recovery solutio...

4.3CVSS5.7AI score0.07689EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2016/12/12 12:0 a.m.35 views

Fedora 23 : flex (2016-8d79ade826)

Change type for numtoread from yysizet to int. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

9.8CVSS8.3AI score0.08767EPSS
SaveExploits0References2
Fedora
Fedora
added 2016/12/10 2:52 a.m.34 views

[SECURITY] Fedora 23 Update: flex-2.6.0-2.fc23

The flex program generates scanners. Scanners are programs which can recognize lexical patterns in text. Flex takes pairs of regular expressions and C code as input and generates a C source file as output. The output file is compiled and linked with a library to produce an executable. The...

9.8CVSS1.9AI score0.08767EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2016/12/10 12:0 a.m.27 views

Fedora Update for flex FEDORA-2016-8d79ade826

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.08767EPSS
SaveExploits0References2
Mageia
Mageia
added 2016/11/23 11:11 a.m.48 views

Updated flex packages fix security vulnerability

It was found that flex incorrectly resized the numtoread variable in yygetnextbuffer. The buffer is resized if this value is less or equal to zero. With special crafted input it is possible, that the buffer is not resized if the input is larger than the default buffer size of 16k. This allows a...

9.8CVSS2.1AI score0.08767EPSS
SaveExploits0References2
OSV
OSV
added 2016/11/23 11:11 a.m.8 views

MGASA-2016-0396 Updated flex packages fix security vulnerability

It was found that flex incorrectly resized the numtoread variable in yygetnextbuffer. The buffer is resized if this value is less or equal to zero. With special crafted input it is possible, that the buffer is not resized if the input is larger than the default buffer size of 16k. This allows a...

9.8CVSS7.2AI score0.08767EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2016/10/05 12:0 a.m.34 views

openSUSE Security Update : flex / at / libbonobo / etc (openSUSE-2016-1155)

Various packages included vulnerable parsers generated by 'flex'. This update provides a fixed 'flex' package and also rebuilds of packages that might have security issues caused by the auto generated code. Flex itself was updated to fix a buffer overflow in the generated scanner bsc990856,...

9.8CVSS8.6AI score0.08767EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2016/09/28 12:0 a.m.30 views

SUSE SLED12 / SLES12 Security Update : flex, at, bogofilter, cyrus-imapd, kdelibs4, libQtWebKit4, libbonobo, mdbtools, netpbm, openslp, sgmltool, virtuoso, libqt5-qtwebkit (SUSE-SU-2016:2397-1)

Various packages included vulnerable parsers generated by 'flex'. This update provides a fixed 'flex' package and also rebuilds of packages that might have security issues caused by the auto generated code. Flex itself was updated to fix a buffer overflow in the generated scanner bsc990856,...

9.8CVSS7.9AI score0.08767EPSS
SaveExploits0References7
OSV
OSV
added 2016/09/27 1:11 p.m.10 views

SUSE-SU-2016:2397-1 Security update for flex, at, bogofilter, cyrus-imapd, kdelibs4, libQtWebKit4, libbonobo, mdbtools, netpbm, openslp, sgmltool, virtuoso, libqt5-qtwebkit

Various packages included vulnerable parsers generated by 'flex'. This update provides a fixed 'flex' package and also rebuilds of packages that might have security issues caused by the auto generated code. Flex itself was updated to fix a buffer overflow in the generated scanner bsc990856,...

9.8CVSS9.9AI score0.08767EPSS
SaveExploits0References5
NVD
NVD
added 2016/09/21 2:25 p.m.18 views

CVE-2016-6354

Heap-based buffer overflow in the yygetnextbuffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving numtoread...

9.8CVSS9.9AI score0.08767EPSS
SaveExploits0References5
OSV
OSV
added 2016/09/21 2:25 p.m.27 views

CVE-2016-6354

Heap-based buffer overflow in the yygetnextbuffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving numtoread...

9.8CVSS8.4AI score
SaveExploits0References5
OSV
OSV
added 2016/09/21 2:25 p.m.5 views

ALPINE-CVE-2016-6354

Heap-based buffer overflow in the yygetnextbuffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving numtoread...

9.8CVSS9.6AI score0.08767EPSS
SaveExploits0References1
OSV
OSV
added 2016/09/21 2:25 p.m.3 views

DEBIAN-CVE-2016-6354

Heap-based buffer overflow in the yygetnextbuffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving numtoread...

9.8CVSS9.6AI score0.08767EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2016/09/21 2:25 p.m.27 views

CVE-2016-6354

Heap-based buffer overflow in the yygetnextbuffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving numtoread...

9.8CVSS7.7AI score0.08767EPSS
SaveExploits0References2
Prion
Prion
added 2016/09/21 2:25 p.m.25 views

Heap overflow

Heap-based buffer overflow in the yygetnextbuffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving numtoread...

7.5CVSS8.7AI score0.08767EPSS
SaveExploits0References5Affected Software2
OSV
OSV
added 2016/09/21 2:25 p.m.4 views

UBUNTU-CVE-2016-6354

Heap-based buffer overflow in the yygetnextbuffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving numtoread...

9.8CVSS7.8AI score0.08767EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2016/09/21 2:0 p.m.66 views

CVE-2016-6354

Heap-based buffer overflow in the yygetnextbuffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving numtoread...

9.8CVSS10AI score0.08767EPSS
SaveExploits0
CVE
CVE
added 2016/09/21 2:0 p.m.221 views

CVE-2016-6354

CVE-2016-6354 describes a heap-based buffer overflow in the yy_get_next_buffer function of Flex, before version 2.6.1. The vulnerability could allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read. Connected advisories ...

9.8CVSS8.1AI score0.08767EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2016/09/21 2:0 p.m.28 views

CVE-2016-6354

Heap-based buffer overflow in the yygetnextbuffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving numtoread...

8.3AI score0.08767EPSS
SaveExploits0References5
Rows per page
Query Builder