Lucene search
K

366 matches found

Cvelist
Cvelist
added 2021/05/06 4:3 a.m.22 views

CVE-2020-28019

Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA...

8.5AI score0.01574EPSS
Exploits1References1
CVE
CVE
added 2021/05/06 4:3 a.m.462 views

CVE-2020-28019

CVE-2020-28019 is an Exim 4 vulnerability: versions prior to 4.94.2 suffer from Improper Initialization that can cause recursion-based stack consumption or other consequences when a client uses BDAT instead of DATA. The issue stems from how certain getc functions are mishandled in that BDAT flow,...

7.5CVSS7.3AI score0.01574EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2021/05/06 4:3 a.m.26 views

CVE-2020-28019

Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA...

7.5CVSS8AI score0.01574EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2021/05/06 4:3 a.m.41 views

CVE-2020-28019

Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA...

7.5CVSS7.7AI score0.01574EPSS
Exploits1References1
OSV
OSV
added 2021/05/04 1:30 p.m.1 views

UBUNTU-CVE-2020-28019

Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA...

7.5CVSS7AI score0.01574EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2019:0060-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.2103EPSS
Exploits0References12
CNNVD
CNNVD
added 2021/04/07 12:0 a.m.3 views

Clam AntiVirus 缓冲区错误漏洞

Clam AntiVirus ClamAV is an anti-virus package for use on UNIX-like systems. Mainly used in mail servers, using multi-threaded background operation, you can automatically upgrade the virus database. A denial of service vulnerability exists in Clam AntiVirus versions 0.103.0 and 0.103.1. The...

7.5CVSS8.4AI score0.00502EPSS
Exploits0References11
Gitee
Gitee
added 2021/01/24 7:2 p.m.1 views

Exploit for Improper Initialization in Apple Ipados

This is a PoC exploit for CVE-2020-27950, a vulnerability in the macOS kernel that allows for a port pointer leak. The exploit targets the macOS kernel and leverages a vulnerability in the kalloc.1024 buffer to allocate a controlled buffer with a magic value. The exploit then creates an ipckmsg...

7.1CVSS7.4AI score0.43756EPSS
Exploits2
BDU FSTEC
BDU FSTEC
added 2020/12/11 12:0 a.m.1 views

The vulnerability of the PDFium browser’s PDF-content processor in Google Chrome allows a hacker to gain unauthorized access to protected information.

The vulnerability of the PDFium browser’s PDF-content processor in Google Chrome relates to an improper initialization of resources. Exploiting this vulnerability could allow attackers to gain unauthorized access to protected information...

4.3CVSS6.6AI score0.00436EPSS
Exploits0References15Affected Software6
Gitee
Gitee
added 2020/12/04 4:44 p.m.24 views

Exploit for Improper Initialization in Docker

sectoolset -- Github安全相关工具集合 主要内容: 0x00 漏洞利用实战练习&CTF安全竞赛 0x01 安全扫描器 0x02 安全防守 0x03 渗透测试 0x04 漏洞库及利用工具(POC,EXP 0x05 二进制及代码分析工具 0x06 威胁情报&蜜罐 0x07 安全文档资料 0x11 所有内容 乌云镜像 乌云镜像 乌云镜像,河蟹 近期安全热点 Nmap 7.9发布,更新Npcap,大量指纹更新 Windows Server域控 Netlogon特权提升漏洞 CVE-2020-1472 暗网中网络安全行业暴露状况研究 五眼联盟国家网络安全技术指导书...

10CVSS7.8AI score0.94469EPSS
Exploits133
OSV
OSV
added 2020/11/23 7:51 p.m.7 views

MGASA-2020-0435 Updated italc packages fix security vulnerabilities

An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact e.g., an integer overflow via specially crafted VNC packets...

9.8CVSS9.1AI score0.2103EPSS
Exploits4References4
Prion
Prion
added 2020/11/12 6:15 p.m.21 views

Input validation

Improper initialization in subsystem for IntelR CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE versions before 4.0.30 IntelR SPS versions before E305.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access...

4.6CVSS7.5AI score0.0016EPSS
Exploits0References5Affected Software3
Intel
Intel
added 2020/06/18 12:0 a.m.46 views

2020.1 IPU – Intel® CSME, SPS, TXE, AMT, ISM and DAL Advisory

Summary: Potential security vulnerabilities in Intel® Converged Security and Manageability Engine CSME, Intel® Server Platform Services SPS, Intel® Trusted Execution Engine TXE, Intel® Active Management Technology AMT, Intel® Standard Manageability ISM and Intel® Dynamic Application Loader DAL ma...

9.8CVSS9AI score0.02777EPSS
Exploits0
Prion
Prion
added 2020/06/15 2:15 p.m.16 views

Input validation

Improper initialization in subsystem for IntelR SPS versions before SPSE304.01.04.109.0 and SPSE304.08.04.070.0 may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access...

4.6CVSS7.6AI score0.00072EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2020/06/15 1:56 p.m.61 views

CVE-2020-0586

CVE-2020-0586 affects Intel Server Platform Services (SPS) subsystems prior to SPS_E3_04.01.04.109.0 and SPS_E3_04.08.04.070.0. The root cause is improper initialization in SPS, which may allow a locally authenticated user to escalate privileges and/or cause a denial of service. Public sources (I...

7.8CVSS7.6AI score0.00072EPSS
Exploits0References4Affected Software1
CNVD
CNVD
added 2020/06/11 12:0 a.m.2 views

Intel SPS Security Vulnerability

Intel Server Platform Services SPS is a server platform services program from Intel USA. A security vulnerability exists in Intel SPS versions prior to SPSE304.01.04.109.0 and SPSE304.08.04.070.0, which stems from the program not being properly initialized. A local attacker could exploit the...

7.8CVSS6.5AI score0.00072EPSS
Exploits0References1
ICS
ICS
added 2020/06/09 12:0 a.m.95 views

Siemens SINUMERIK

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SINUMERIK Vulnerabilities: Buffer Underflow, Heap-based Buffer Overflow, Improper Initialization, Out-of-bounds Read, Stack-based Buffer Overflow, Access of Memory Location After...

9.8CVSS10AI score0.054EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2020/05/08 12:0 a.m.1 views

The vulnerability of the FreeIPA server, related to improper access control, allows a perpetrator to compromise data integrity.

The vulnerability of the FreeIPA server is related to improper initialization. Exploiting this vulnerability could allow an attacker to compromise data integrity...

5.3CVSS5.5AI score
Exploits0References1
Veracode
Veracode
added 2020/04/10 12:52 a.m.26 views

Information Disclosure

kernel is vulnerable to information disclosure. An attacker is able to obtain confidential information via the eqlgmastercfg function in drivers/net/eql due to improper initialization of certain structure member...

2.1CVSS2.1AI score0.00101EPSS
Exploits1References24Affected Software1
Prion
Prion
added 2020/03/12 6:15 p.m.15 views

Input validation

Improper initialization in IntelR Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a privileged user to potentially enable a denial of service via local access...

2.1CVSS3.7AI score0.00053EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder