Lucene search
+L

2003 matches found

Positive Technologies
Positive Technologies
•added 2022/11/11 12:00 a.m.•13 views

PT-2022-6841

Name of the Vulnerable Software and Affected Versions protobuf-java versions prior to 3.21.7 protobuf-java versions prior to 3.20.3 protobuf-java versions prior to 3.19.6 protobuf-java versions prior to 3.16.3 Description The issue is related to insufficient input validation in the Java Protocol...

7.8CVSS7.6AI score0.00713EPSS
SaveExploits0References408
NVD
NVD
•added 2022/11/10 6:15 a.m.•31 views

CVE-2022-3867

HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2...

4.3CVSS0.0051EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2022/11/10 6:15 a.m.•46 views

UBUNTU-CVE-2022-3867

HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2...

4.3CVSS5.7AI score0.0051EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/11/10 5:45 a.m.•11 views

CVE-2022-3867 Nomad Event Stream Subscriber Using a Token with TTL Receives Updates Until Garbage Collected

HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2...

2.7CVSS4.5AI score0.0051EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/11/10 12:00 a.m.•47 views

HashiCorp Nomad 代码问题漏洞

HashiCorp Nomad is a simple and flexible scheduler and orchestrator from HashiCorp USA. for managing containerized and non-containerized applications at scale, both locally and in the cloud. A code issue vulnerability exists in HashiCorp Nomad and Nomad Enterprise versions 1.4.0 through 1.4.1,...

4.3CVSS5.1AI score0.0051EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/04 12:00 a.m.•8 views

PT-2022-36736 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash involves the gs font finalize and gs gc reclaim functions, and the ireclaim process. No...

7AI score
SaveExploits0References2
osv_clsa
osv_clsa
•added 2022/11/02 7:10 p.m.•16 views

CLSA-2022-1667416255 Fix CVE(s): CVE-2021-44879

CVE-2021-44879 - ELSCVE-3342 f2fs: fix to do sanity check on inode type during garbage collection...

5.5CVSS6.8AI score0.01482EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/11/01 6:09 p.m.•44 views

CVE-2022-3509 Parsing issue in protobuf textformat

A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes...

7.5CVSS6.7AI score
SaveExploits0References4
Mend
Mend
•added 2022/11/01 6:09 p.m.•4 views

CVE-2022-3509

A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes...

8.7CVSS0.00955EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2022/11/01 6:09 p.m.•10 views

CVE-2022-3509 Parsing issue in protobuf textformat

A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes...

7.5CVSS7.7AI score0.00955EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/11/01 6:09 p.m.•61 views

CVE-2022-3509 Parsing issue in protobuf textformat

A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes...

7.5CVSS7.7AI score0.00955EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/01 12:00 a.m.•6 views

CVE-2022-3509: Uncontrolled Resource Consumption

A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes...

7.5CVSS6.6AI score0.00955EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2022/10/26 2:23 p.m.•137 views

CVE-2022-3171

A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted...

7.5CVSS7.4AI score0.01278EPSS
SaveExploits0References4
osv_oesa
osv_oesa
•added 2022/10/21 11:05 a.m.•15 views

OESA-2022-2011 protobuf security update

Security Fixes: A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 4.21.5 for protobuf-python can...

5.7CVSS7.8AI score0.01512EPSS
SaveExploits0References3
Redos
Redos
•added 2022/10/20 12:00 a.m.•46 views

ROS-20221020-02

A vulnerability in the Java Protocol Buffers protobuf-java runtime library is related to a problem analyzing binary data. Exploitation of the vulnerability could allow an attacker acting remotely to send data containing multiple instances of non-repeating embedded messages to the application's...

7.5CVSS7.6AI score0.01278EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2022/10/18 12:00 a.m.•79 views

CVE-2022-2602

iouring UAF, Unix SCM garbage collection...

7CVSS6.3AI score0.01433EPSS
SaveExploits2References6
osv_ubuntu
osv_ubuntu
•added 2022/10/18 12:00 a.m.•13 views

UBUNTU-CVE-2022-2602

iouring UAF, Unix SCM garbage collection...

7CVSS6.3AI score0.01433EPSS
SaveExploits2References7
NVD
NVD
•added 2022/10/12 11:15 p.m.•41 views

CVE-2022-3171

A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted...

7.5CVSS0.01278EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2022/10/12 11:15 p.m.•21 views

UBUNTU-CVE-2022-3171

A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted...

7.5CVSS6.6AI score0.01278EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2022/10/12 11:15 p.m.•47 views

CVE-2022-3171

A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted...

7.5CVSS6.7AI score0.01278EPSS
SaveExploits0References2
Rows per page
Query Builder