Lucene search
+L

316 matches found

Hacker One
Hacker One
added 2023/09/22 7:22 p.m.67 views

PlayStation: Remote vulnerabilities in spp

A vulnerability was discovered in the spp PPPoE implementation on the PS4/PS5. The vulnerability could allow a malicious PPPoE server to cause a heap buffer overwrite and overread, potentially leading to denial-of-service or remote code execution in kernel context. The vulnerability was caused by...

10CVSS7.2AI score0.117EPSS
SaveExploits0
OSV
OSV
added 2023/07/18 2:15 p.m.36 views

UBUNTU-CVE-2020-23909

Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...

7.1CVSS6AI score0.003EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2023/05/09 10:3 a.m.38 views

Low: Red Hat Security Advisory: lua security update

An update for lua is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

9.1CVSS7.3AI score0.03EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2023/05/09 10:3 a.m.20 views

lua: heap buffer overread

A heap buffer-overflow vulnerability was found in Lua. The flaw occurs due to vulnerable code present in the lparser.c function of Lua that allows the execution of untrusted Lua code into a system, resulting in malicious activity...

9.1CVSS6AI score0.03EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
added 2023/05/09 12:0 a.m.34 views

Low: lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fixes: lua: heap buffer overread CVE-2022-28805 For more details about the security issues,...

9.1CVSS8.7AI score0.03EPSS
SaveExploits1References4
OSV
OSV
added 2023/05/09 12:0 a.m.36 views

ALSA-2023:2582 Low: lua security update

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fixes: lua: heap buffer overread CVE-2022-28805 For more details about the security issues,...

9.1CVSS8.4AI score0.03EPSS
SaveExploits1References4
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/14 2:32 p.m.38 views

Security Bulletin: Vulnerabilities in libxml2 affect IBM Integrated Management Module (IMM) for System x & BladeCenter

Summary IBM Integrated Management Module IMM for System x & BladeCenter has addressed the following vulnerabilities in libxml2. Vulnerability Details Summary IBM Integrated Management Module IMM for System x & BladeCenter has addressed the following vulnerabilities in libxml2. Vulnerability...

7.5CVSS8AI score0.1398EPSS
SaveExploits2
OSV
OSV
added 2023/04/10 9:15 a.m.11 views

AZL-26158 CVE-2021-45985 affecting package ntopng for versions less than 5.2.1-2

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.2AI score0.01418EPSS
SaveExploits1References1
OSV
OSV
added 2023/04/10 9:15 a.m.6 views

UBUNTU-CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS7.4AI score0.01418EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:13 a.m.3 views

SUSE CVE-2015-7696

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...

6.8CVSS5.9AI score0.07125EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 4:45 a.m.3 views

SUSE CVE-2017-9128

The quicktimevideowidth function in lqtquicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted mp4 file...

4.3CVSS6.9AI score0.03828EPSS
SaveExploits3References13
SUSE CVE
SUSE CVE
added 2023/02/15 4:36 a.m.6 views

SUSE CVE-2017-17915

In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached...

8.8CVSS7.1AI score0.01827EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:31 a.m.7 views

SUSE CVE-2018-5360

LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27...

8.8CVSS7.1AI score0.01817EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:29 a.m.5 views

SUSE CVE-2018-7439

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the function readminibiffnextrecord...

8.8CVSS7.3AI score0.02176EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:29 a.m.3 views

SUSE CVE-2018-7728

An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFFHandler.cpp mishandles a case of a zero length, leading to a heap-based buffer over-read in the MD5Update function in third-party/zuid/interfaces/MD5.cpp...

3.3CVSS7.2AI score0.01346EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:28 a.m.7 views

SUSE CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

5.9CVSS9.4AI score0.02263EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:27 a.m.4 views

SUSE CVE-2018-11503

The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

5.5CVSS6.9AI score0.01599EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:22 a.m.5 views

SUSE CVE-2018-19128

In Libav 12.3, there is a heap-based buffer over-read in decodeframe in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted avi file...

6.5CVSS6.4AI score0.01058EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:16 a.m.4 views

SUSE CVE-2019-7310

In Poppler 0.73.0, a heap-based buffer over-read due to an integer signedness error in the XRef::getEntry function in XRef.cc allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo...

5.3CVSS9.7AI score0.02196EPSS
SaveExploits1References10
SUSE CVE
SUSE CVE
added 2023/02/15 4:5 a.m.6 views

SUSE CVE-2019-20915

An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bitwriteTF in bits.c...

8.1CVSS8.2AI score0.01245EPSS
SaveExploits1References3
Rows per page
Query Builder