Lucene search
+L

19785 matches found

NVD
NVD
•added 2022/01/19 6:15 p.m.•26 views

CVE-2021-33912

libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code via an unauthenticated e-mail message from anywhere on the Internet with a crafted SPF DNS record, because of incorrect sprintf usage in SPFrecordexpanddata in spfexpand.c...

9.8CVSS0.09643EPSS
SaveExploits1References4
NVD
NVD
•added 2022/01/19 6:15 p.m.•30 views

CVE-2021-33913

libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code via an unauthenticated e-mail message from anywhere on the Internet with a crafted SPF DNS record, because of SPFrecordexpanddata in spfexpand.c. The amount of overflowed data depend...

9.8CVSS0.09643EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2022/01/19 6:15 p.m.•34 views

CVE-2021-33912

libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code via an unauthenticated e-mail message from anywhere on the Internet with a crafted SPF DNS record, because of incorrect sprintf usage in SPFrecordexpanddata in spfexpand.c...

9.8CVSS7.5AI score0.09643EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2022/01/19 6:15 p.m.•31 views

CVE-2021-33913

libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code via an unauthenticated e-mail message from anywhere on the Internet with a crafted SPF DNS record, because of SPFrecordexpanddata in spfexpand.c. The amount of overflowed data depend...

9.8CVSS7.5AI score0.09643EPSS
SaveExploits1References4
Mend
Mend
•added 2022/01/19 12:00 a.m.•1 views

CVE-2021-33912

libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code via an unauthenticated e-mail message from anywhere on the Internet with a crafted SPF DNS record, because of incorrect sprintf usage in SPFrecordexpanddata in spfexpand.c...

9.8CVSS0.09643EPSS
SaveExploits1References7
Mend
Mend
•added 2022/01/19 12:00 a.m.•1 views

CVE-2021-33913

libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code via an unauthenticated e-mail message from anywhere on the Internet with a crafted SPF DNS record, because of SPFrecordexpanddata in spfexpand.c. The amount of overflowed data depend...

9.8CVSS0.09643EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/19 12:00 a.m.•5 views

CVE-2021-33913: Out-of-bounds Write

libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code via an unauthenticated e-mail message from anywhere on the Internet with a crafted SPF DNS record, because of SPFrecordexpanddata in spfexpand.c. The amount of overflowed data depend...

9.8CVSS6.6AI score0.09643EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/19 12:00 a.m.•4 views

CVE-2021-33912: Out-of-bounds Write

libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code via an unauthenticated e-mail message from anywhere on the Internet with a crafted SPF DNS record, because of incorrect sprintf usage in SPFrecordexpanddata in spfexpand.c...

9.8CVSS6.6AI score0.09643EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2022/01/19 12:00 a.m.•71 views

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2022-9029)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9029 advisory. 5.4.17-2136.302.7.2.1 - vfs: fscontext: fix up param length parsing in legacyparseparam Jamie Hill-Daniel Orabug: 33761451 CVE-2022-0185 Tenable has extract...

8.4CVSS6.9AI score0.25151EPSS
SaveExploits12References2
Tenable Nessus
Tenable Nessus
•added 2022/01/19 12:00 a.m.•47 views

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2022-9028)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9028 advisory. 5.4.17-2136.302.7.2.1 - vfs: fscontext: fix up param length parsing in legacyparseparam Jamie Hill-Daniel Orabug: 33761451 CVE-2022-0185 Tenable has extract...

8.4CVSS6.9AI score0.25151EPSS
SaveExploits12References2
Mageia
Mageia
•added 2022/01/18 7:29 p.m.•51 views

Updated vim packages fix security vulnerability

vim is vulnerable to Out-of-bounds Read CVE-2022-0128 vim is vulnerable to Use After Free CVE-2022-0156 vim is vulnerable to Heap-based Buffer Overflow CVE-2022-0158 vim is vulnerable to Heap-based Buffer Overflow CVE-2022-0213...

7.8CVSS6.6AI score0.01731EPSS
SaveExploits4References2
OSV
OSV
•added 2022/01/18 7:29 p.m.•13 views

MGASA-2022-0023 Updated vim packages fix security vulnerability

vim is vulnerable to Out-of-bounds Read CVE-2022-0128 vim is vulnerable to Use After Free CVE-2022-0156 vim is vulnerable to Heap-based Buffer Overflow CVE-2022-0158 vim is vulnerable to Heap-based Buffer Overflow CVE-2022-0213...

7.8CVSS6.6AI score0.01731EPSS
SaveExploits4References3
Mend
Mend
•added 2022/01/18 12:00 a.m.•2 views

CVE-2022-0261

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

8.5CVSS0.0168EPSS
SaveExploits1References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/18 12:00 a.m.•2 views

CVE-2022-0261: Heap-based Buffer Overflow

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

7.8CVSS7.5AI score0.0168EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/01/18 12:00 a.m.•2 views

PT-2022-1729

Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2 Description The issue is a heap-based buffer overflow in the vim repository. This overflow is caused by the block insert function in src/ops.c, which leads to a dynamic memory buffer overflow. An attacker could exploi...

7.8CVSS0.0168EPSS
SaveExploits1References353
CVE
CVE
•added 2022/01/18 12:00 a.m.•304 views

CVE-2022-0261

CVE-2022-0261 is a Vim heap-based buffer overflow affecting vim/vim prior to 8.2. Connected advisories (Astra Linux, Cloud Foundry USN, and Apple security page) confirm Vim heap-buffer issues across multiple CVEs and list Vim updates as the remediation path. For CVE-2022-0261, the vendor-provided...

7.8CVSS7.2AI score0.0168EPSS
SaveExploits1References11Affected Software1
Positive Technologies
Positive Technologies
•added 2022/01/18 12:00 a.m.•3 views

PT-2022-1725

Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2 Description The issue is related to a heap-based buffer overflow in the vim text editor, specifically in the utf head off function. This overflow can be triggered by exploiting the vulnerability, potentially allowing ...

9.8CVSS0.0203EPSS
SaveExploits1References359
Tenable Nessus
Tenable Nessus
•added 2022/01/18 12:00 a.m.•20 views

openSUSE 15 Security Update : ghostscript (openSUSE-SU-2022:0088-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0088-1 advisory. - Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampleddatasample called from sampleddatacontinue and interp...

5.5CVSS6.7AI score0.01619EPSS
SaveExploits2References7
Tenable Nessus
Tenable Nessus
•added 2022/01/18 12:00 a.m.•28 views

Debian DLA-2879-1 : ghostscript - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2879 advisory. - Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampleddatasample called from sampleddatacontinue and interp. CVE-2021-45944 - Ghostscript...

5.5CVSS6.7AI score0.01619EPSS
SaveExploits2References7
Tenable Nessus
Tenable Nessus
•added 2022/01/17 12:00 a.m.•32 views

SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2022:0088-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0088-1 advisory. - CVE-2021-45944: Fixed use-after-free in sampleddatasample bsc1194303 - CVE-2021-45949: Fixed heap-based buff...

5.5CVSS6.7AI score0.01619EPSS
SaveExploits2References7
Rows per page
Query Builder