Lucene search
+L

692 matches found

Prion
Prion
•added 2018/02/27 10:29 p.m.•23 views

Code injection

In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p...

5CVSS8.3AI score0.02591EPSS
SaveExploits0References4Affected Software5
osv_debian
osv_debian
•added 2018/02/27 10:29 p.m.•16 views

DEBIAN-CVE-2018-7549

In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p...

7.5CVSS9.1AI score0.02591EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/02/27 10:00 p.m.•59 views

CVE-2018-7549

In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p...

6.3AI score0.02591EPSS
SaveExploits0References4
Mend
Mend
•added 2018/02/27 10:00 p.m.•7 views

CVE-2018-7549

In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p...

8.7CVSS0.02591EPSS
SaveExploits0References7
CVE
CVE
•added 2018/02/27 10:00 p.m.•147 views

CVE-2018-7549

CVE-2018-7549 affects zsh (through 5.4.2): a NULL pointer dereference in params.c during a copy of an empty hash table can crash the shell, enabling denial-of-service locally. Several advisories (Red Hat RHSA-2018:3073, CentOS CESA-2018:3073, Amazon Linux ALAS2-2018-986, Fedora advisories) note t...

7.5CVSS7.1AI score0.02591EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2018/02/27 10:00 p.m.•43 views

CVE-2018-7549

In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p...

7.5CVSS0.6AI score0.02591EPSS
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2018/02/27 12:00 a.m.•17 views

UBUNTU-CVE-2018-7549

In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p...

7.5CVSS6.7AI score0.02591EPSS
SaveExploits0References3
Prion
Prion
•added 2017/12/09 6:29 a.m.•32 views

Design/Logic Flaw

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the...

9.3CVSS8.8AI score0.08512EPSS
SaveExploits0References3Affected Software4
Positive Technologies
Positive Technologies
•added 2017/11/14 12:00 a.m.•9 views

PT-2017-14424

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2017.012.20098 and earlier Adobe Acrobat and Reader versions 2017.011.30066 and earlier Adobe Acrobat and Reader versions 2015.006.30355 and earlier Adobe Acrobat and Reader versions 11.0.22 and earlier...

9.3CVSS0.08512EPSS
SaveExploits0References6
Veracode
Veracode
•added 2017/10/31 5:53 a.m.•26 views

Denial Of Service (DoS)

Apache Xerces is vulnerable to denial of service DoS attacks. Using a message sent to the XML service, attackers can cause hash table collisions, long processing time and ultimately the crashing of an application...

7.5CVSS7.3AI score0.17461EPSS
SaveExploits0References19Affected Software3
Prion
Prion
•added 2017/10/30 4:29 p.m.•35 views

Code injection

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML service, which triggers hash table collisions...

7.8CVSS6.9AI score0.17461EPSS
SaveExploits0References11Affected Software1
UbuntuCve
UbuntuCve
•added 2017/10/30 4:29 p.m.•346 views

CVE-2012-0881

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML service, which triggers hash table collisions...

7.8CVSS7.2AI score0.17461EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2017/10/30 4:29 p.m.•21 views

CVE-2012-0881

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML service, which triggers hash table collisions...

7.5CVSS7.2AI score0.17461EPSS
SaveExploits0References13
NVD
NVD
•added 2017/10/30 4:29 p.m.•24 views

CVE-2012-0881

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML service, which triggers hash table collisions...

7.8CVSS6.6AI score0.17461EPSS
SaveExploits0References11
CVE
CVE
•added 2017/10/30 4:00 p.m.•254 views

CVE-2012-0881

CVE-2012-0881 : The Apache Xerces2 Java Parser vulnerability affects the Xerces2 Java Parser before 2.12.0. A crafted XML message to an XML service can cause a denial of service via CPU consumption due to hash table collisions. Affected products include Xerces2 Java, with IBM/Red Hat advisories c...

7.8CVSS7AI score0.17461EPSS
SaveExploits0References11Affected Software1
Mend
Mend
•added 2017/10/30 4:00 p.m.•9 views

CVE-2012-0881

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML service, which triggers hash table collisions...

8.7CVSS0.17461EPSS
SaveExploits0References22
Debian CVE
Debian CVE
•added 2017/10/30 4:00 p.m.•39 views

CVE-2012-0881

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML service, which triggers hash table collisions...

7.8CVSS7.4AI score0.17461EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/30 12:00 a.m.•8 views

CVE-2012-0881: Undefined Security Weakness

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML service, which triggers hash table collisions...

7.8CVSS7.4AI score0.17461EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2017/10/23 9:19 a.m.•20 views

nodejs: Constant Hashtable Seeds vulnerability

It was found that Node.js was using a non-randomized seed when populating hash tables. An attacker, able to supply a large number of inputs, could send specially crafted entries to the Node.js application, maximizing hash collisions to trigger an excessive amount of CPU usage, resulting in a deni...

7.5CVSS7.1AI score0.05434EPSS
SaveExploits1References5
seebug.org
seebug.org
•added 2017/10/19 12:00 a.m.•50 views

Pidgin MXIT Markup Command Denial of Service Vulnerability(CVE-2016-2365)

DESCRIPTION A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could potentially result in a null pointer dereference. A malicious server or an attacker who intercepts the network traffic can send invalid data t...

4.3CVSS7.4AI score0.02411EPSS
SaveExploits1
Rows per page
Query Builder