Lucene search
+L

24484 matches found

OSV
OSV
added 2024/04/10 7:15 p.m.10 views

UBUNTU-CVE-2021-47216

In the Linux kernel, the following vulnerability has been resolved: scsi: advansys: Fix kernel pointer leak Pointers should be printed with %p or %px rather than cast to 'unsigned long' and printed with %lx. Change %lx to %p to print the hashed pointer...

5.5CVSS6.2AI score0.00226EPSS
SaveExploits0References11
ATTACKERKB
ATTACKERKB
added 2024/04/10 1:51 p.m.5 views

CVE-2024-23080

Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBasedLocale. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may...

9.1CVSS5.9AI score0.0083EPSS
SaveExploits0References4
Fedora
Fedora
added 2024/04/10 4:05 a.m.43 views

[SECURITY] Fedora 39 Update: python-pillow-10.3.0-1.fc39

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

6.7CVSS6.9AI score0.00997EPSS
SaveExploits0
Veracode
Veracode
added 2024/04/10 2:45 a.m.13 views

Denial Of Service (DoS)

libmojolicious-perl is vulnerable to Denial Of Service DoS. The vulnerability due to a flaw in format detection within the mojolicious module, allowing attackers to cause a denial of service condition...

4.3CVSS6.5AI score0.00549EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2024/04/10 12:00 a.m.62 views

CVE-2024-23083

Time4J Base v5.9.3 is described as containing a NullPointerException in net.time4j.format.internal.FormatUtils::useDefaultWeekmodel(Locale). The description notes this finding is disputed by third parties and that there may be insufficient evidence to determine a vulnerability. No explicit exploi...

5.3CVSS7.3AI score0.00661EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/10 12:00 a.m.12 views

PT-2024-2888 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions 20.4R1 through 20.4R3-S8 Junos OS versions 21.2 through 21.2R3-S6 Junos OS versions 21.3 through 21.3R3-S4 Junos OS versions 21.4 through 21.4R3-S4 Junos OS versions 22.1 through 22.1R3-S3 Junos OS versions 22.2 through...

8.7CVSS7.2AI score0.00571EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/04/10 12:00 a.m.6 views

PT-2024-19662

Name of the Vulnerable Software and Affected Versions Time4J Base version 5.9.3 Description A NullPointerException was discovered in Time4J Base via the component net.time4j.format.internal.FormatUtils::useDefaultWeekmodelLocale. However, the existence of this issue is disputed by multiple third...

5.3CVSS5.8AI score0.00661EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/04/10 12:00 a.m.19 views

PT-2024-19659

Name of the Vulnerable Software and Affected Versions Joda Time version 2.12.5 Description A NullPointerException was reportedly discovered in Joda Time via the component org.joda.time.format.PeriodFormat::wordBasedLocale. However, this finding is disputed by multiple third parties who question t...

9.1CVSS5.9AI score0.0083EPSS
SaveExploits0References9
OSV
OSV
added 2024/04/09 3:15 p.m.8 views

CVE-2023-48784

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6.4 all versions command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or...

6.7CVSS6AI score0.00771EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/09 3:15 p.m.26 views

CVE-2023-48784

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6.4 all versions command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or...

6.7CVSS7AI score0.00771EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/09 2:24 p.m.45 views

CVE-2023-48784

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6.4 all versions command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or...

6.7CVSS8AI score0.00771EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/09 2:24 p.m.35 views

CVE-2023-48784

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6.4 all versions command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or...

6.7CVSS7.2AI score0.00771EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/09 2:24 p.m.98 views

CVE-2023-48784

CVE-2023-48784: Fortinet FortiOS contains a use of externally-controlled format string vulnerability (CWE-134) in the CLI that may allow a local privileged attacker with super-admin/CLI access to execute arbitrary code via specially crafted requests. Affected: FortiOS 7.4.1 and below, 7.2.7 and b...

6.7CVSS7.9AI score0.00771EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/09 12:00 a.m.10 views

PT-2024-3562 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.4.1 and below FortiOS versions 7.2.7 and below FortiOS versions 7.0.14 and below FortiOS versions 6.4.15 and below Description: A use of externally-controlled format string vulnerability in FortiOS command line interface ma...

6.7CVSS7.8AI score0.00771EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2024/04/09 12:00 a.m.33 views

EulerOS 2.0 SP9 : shim (EulerOS-SA-2024-1497)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. Th...

8.3CVSS7.7AI score0.05417EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/04/09 12:00 a.m.13 views

PT-2024-5060 · Siemens · Scalance W786-1 Rj45 +22

Name of the Vulnerable Software and Affected Versions: SCALANCE W1748-1 M12 6GK5748-1GY01-0AA0 SCALANCE W1748-1 M12 6GK5748-1GY01-0TA0 SCALANCE W1788-1 M12 6GK5788-1GY01-0AA0 SCALANCE W1788-2 EEC M12 6GK5788-2GY01-0TA0 SCALANCE W1788-2 M12 6GK5788-2GY01-0AA0 SCALANCE W1788-2IA M12...

8.4CVSS6.8AI score0.00234EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/04/09 12:00 a.m.11 views

PT-2024-5059 · Siemens · Scalance W786-1 Rj45 +22

Name of the Vulnerable Software and Affected Versions: SCALANCE W1748-1 M12 6GK5748-1GY01-0AA0 SCALANCE W1748-1 M12 6GK5748-1GY01-0TA0 SCALANCE W1788-1 M12 6GK5788-1GY01-0AA0 SCALANCE W1788-2 EEC M12 6GK5788-2GY01-0TA0 SCALANCE W1788-2 M12 6GK5788-2GY01-0AA0 SCALANCE W1788-2IA M12...

6.1CVSS7.4AI score0.00196EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/04/09 12:00 a.m.13 views

The vulnerability in the file src/gif.imageio/gifinput.cpp of the OpenImageIO image processing library allows a attacker to cause a service failure.

The vulnerability in the src/gif.imageio/gifinput.cpp file of the OpenImageIO library relates to the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.4AI score0.01236EPSS
SaveExploits1References7Affected Software4
OSV
OSV
added 2024/04/08 12:15 a.m.4 views

DEBIAN-CVE-2021-47208

The Mojolicious module before 9.11 for Perl has a bug in format detection that can potentially be exploited for denial of service...

4.3CVSS6.9AI score0.00549EPSS
SaveExploits1References1
OSV
OSV
added 2024/04/08 12:15 a.m.14 views

AZL-43576 CVE-2021-47208 affecting package perl-Mojolicious 8.57-3

The Mojolicious module before 9.11 for Perl has a bug in format detection that can potentially be exploited for denial of service...

4.3CVSS5.7AI score0.00549EPSS
SaveExploits1References1
Rows per page
Query Builder