Lucene search
+L

7567 matches found

osv_debian
osv_debian
•added 2022/04/18 5:15 p.m.•12 views

DEBIAN-CVE-2020-28606

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

8.8CVSS9.1AI score0.02402EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2022/04/18 5:15 p.m.•9 views

DEBIAN-CVE-2020-28610

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

8.8CVSS9.1AI score0.02422EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2022/04/18 5:15 p.m.•11 views

DEBIAN-CVE-2020-28608

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

8.8CVSS9.1AI score0.02422EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2022/04/18 5:15 p.m.•12 views

DEBIAN-CVE-2020-28611

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

8.8CVSS9.1AI score0.02402EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/04/18 5:15 p.m.•18 views

UBUNTU-CVE-2020-28623

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

10CVSS7.7AI score0.02408EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2022/04/18 5:15 p.m.•16 views

UBUNTU-CVE-2020-28620

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

10CVSS7.7AI score0.02428EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2022/04/18 5:15 p.m.•17 views

UBUNTU-CVE-2020-28630

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

10CVSS7.7AI score0.0228EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2022/04/18 4:56 p.m.•57 views

CVE-2020-28615

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

10CVSS9.5AI score0.02428EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2022/04/05 12:00 a.m.•3 views

PT-2025-8246

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential memory leak was found in the Linux kernel, specifically in the r871xu drv init function. This issue occurs when r8712 init drv sw fails, causing memory allocated by r8712 all...

5.5CVSS5.4AI score0.00268EPSS
SaveExploits0
osv_cve
osv_cve
•added 2022/04/01 11:15 p.m.•15 views

CVE-2021-32976

Five buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to initiate a denial-of-service attack and execute arbitrary code...

9.8CVSS6.2AI score0.02785EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2022/03/29 1:16 p.m.•15 views

apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above thus "limited" path traversal,...

6.5CVSS6.9AI score0.10549EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/03/29 1:00 p.m.•43 views

apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above thus "limited" path traversal,...

6.5CVSS6.9AI score0.10549EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/03/29 1:00 p.m.•115 views

Moderate: Red Hat Security Advisory: Red Hat Process Automation Manager 7.12.1 security update

An update is now available for Red Hat Process Automation Manager. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

8.5CVSS7AI score0.19442EPSS
SaveExploits4References6
osv_azl
osv_azl
•added 2022/03/25 7:15 p.m.•23 views

AZL-9240 CVE-2022-0494 affecting package kernel for versions less than 5.15.37.1-2

A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege CAPSYSADMIN or CAPSYSRAWIO to create issues with confidentiality...

4.4CVSS6.7AI score0.00416EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2022/03/18 5:46 p.m.•3 views

com.digitalpebble.behemoth:behemoth-io (>=1.0, <=1.1) potentially affected by CVE-2021-23901 via org.apache.nutch:nutch (1.4)

org.apache.nutch:nutch MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nutch:nutch and may be impacted: - com.digitalpebble.behemoth:behemoth-io =1.0, =1.1 Source cves: CVE-2021-23901 Source advisory: OSV:GHSA-FXHP-WRW9-3R9...

9.1CVSS0.04359EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/03/18 5:46 p.m.•3 views

com.digitalpebble.behemoth:behemoth-io (>=1.0, <=1.1) potentially affected by CVE-2021-23901 via org.apache.nutch:nutch (1.4)

org.apache.nutch:nutch MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nutch:nutch and may be impacted: - com.digitalpebble.behemoth:behemoth-io =1.0, =1.1 Source cves: CVE-2021-23901 Source advisory: GHSA-FXHP-WRW9-3R97...

9.1CVSS0.04359EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•4 views

PT-2022-29085

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description The issue is related to the io uring functionality in the Linux Kernel. It involves adding a schedule point in the io add buffers function. The actual impact and attack plausibility have not...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•4 views

PT-2022-29136

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description The issue is related to the io uring functionality in the Linux Kernel. It involves adding a schedule point in the io add buffers function. The actual impact and potential for attack have no...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•3 views

PT-2022-29019

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.7 through v5.16.11 Description A potential security issue has been identified in the io uring component of the Linux Kernel. The issue is related to the io add buffers function. The actual impact and attack plausibilit...

5.6AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/16 3:15 p.m.•11 views

CVE-2021-39736

In prepareioentry and prepareresponse of lwisioctl.c and lwisperiodicio.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product:...

6.7CVSS6.5AI score0.00113EPSS
SaveExploits0References2
Rows per page
Query Builder