Lucene search
+L

12357 matches found

CVE
CVE
added 2018/03/13 3:00 p.m.234 views

CVE-2018-1000075

CVE-2018-1000075 affects RubyGems: a negative-size condition in the ruby gem package tar header can cause an infinite loop. Affected ranges include RubyGems in the 2.2, 2.3, 2.4, and 2.5 series (e.g., 2.2.9 and earlier; 2.3.6 and earlier; 2.4.3 and earlier; 2.5.0 and earlier) up to trunk revision...

7.5CVSS8.4AI score0.04647EPSS
SaveExploits0References18Affected Software1
Debian CVE
Debian CVE
added 2018/03/13 3:00 p.m.50 views

CVE-2018-1000075

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a infinite loop caused by negative size vulnerability in ruby gem package tar header that can...

7.5CVSS8.9AI score0.04647EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2018/03/13 12:00 a.m.24 views

CVE-2018-1000075

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a infinite loop caused by negative size vulnerability in ruby gem package tar header that can...

7.5CVSS6.8AI score0.04647EPSS
SaveExploits0References4
OSV
OSV
added 2018/03/13 12:00 a.m.6 views

UBUNTU-CVE-2018-1000075

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a infinite loop caused by negative size vulnerability in ruby gem package tar header that can...

7.5CVSS6.7AI score0.04647EPSS
SaveExploits0References5
OSV
OSV
added 2018/03/09 7:29 p.m.17 views

CVE-2018-8002

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

8.8CVSS7.3AI score
SaveExploits0References2
OSV
OSV
added 2018/03/09 7:29 p.m.3 views

DEBIAN-CVE-2018-8002

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

8.8CVSS7.2AI score0.08012EPSS
SaveExploits5References1
NVD
NVD
added 2018/03/09 7:29 p.m.25 views

CVE-2018-8002

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

8.8CVSS8.8AI score0.08012EPSS
SaveExploits5References2
Snyk
Snyk
added 2018/03/09 7:29 p.m.2 views

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a...

8.8CVSS7.3AI score0.08012EPSS
SaveExploits5References2
UbuntuCve
UbuntuCve
added 2018/03/09 7:29 p.m.24 views

CVE-2018-8002

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

8.8CVSS7.3AI score0.08012EPSS
SaveExploits5References3
Debian CVE
Debian CVE
added 2018/03/09 7:00 p.m.61 views

CVE-2018-8002

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

8.8CVSS8.8AI score0.08012EPSS
SaveExploits5
Cvelist
Cvelist
added 2018/03/09 7:00 p.m.37 views

CVE-2018-8002

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

8.8AI score0.08012EPSS
SaveExploits5References2
AlpineLinux
AlpineLinux
added 2018/03/09 7:00 p.m.92 views

CVE-2018-8002

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

8.8CVSS8.8AI score0.08012EPSS
SaveExploits5
OSV
OSV
added 2018/03/09 5:29 p.m.10 views

CVE-2017-17150

Timergrp module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an DoS vulnerability due to insufficient validation of the...

5.5CVSS5.8AI score0.00191EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2018/03/09 12:00 a.m.3 views

PT-2018-18372 · Podofo +4 · Podofo +4

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.5 Description: The issue is related to an infinite loop in the PdfParserObject::ParseFileComplete function, located in PdfParserObject.cpp, which may lead to a stack overflow. This could allow remote attackers to cause a...

9.8CVSS6.2AI score0.08012EPSS
SaveExploits22References76
Tenable Nessus
Tenable Nessus
added 2018/03/09 12:00 a.m.55 views

Amazon Linux AMI : GraphicsMagick (ALAS-2018-966)

Memory information disclosure in DescribeImage function in magick/describe.c GraphicsMagick is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based buffer over-read. The portion of the code containin...

9.8CVSS7.5AI score0.13679EPSS
SaveExploits6References17
Amazon
Amazon
added 2018/03/07 12:00 a.m.68 views

Important: GraphicsMagick

Issue Overview: Memory information disclosure in DescribeImage function in magick/describe.c GraphicsMagick is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based buffer over-read. The portion of th...

9.8CVSS9.1AI score0.13679EPSS
SaveExploits6
NVD
NVD
added 2018/03/05 7:29 p.m.24 views

CVE-2017-17131

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated...

6.3CVSS5.5AI score0.00825EPSS
SaveExploits0References1
OSV
OSV
added 2018/03/05 7:29 p.m.10 views

CVE-2017-17131

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated...

5.7CVSS5.8AI score0.00825EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/03/05 7:00 p.m.27 views

CVE-2017-17131

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated...

5.5AI score0.00825EPSS
SaveExploits0References1
OSV
OSV
added 2018/03/01 5:29 a.m.12 views

CVE-2017-18208

The madvisewillneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of service infinite loop by triggering use of MADVISEWILLNEED for a DAX mapping...

5.5CVSS6.5AI score
SaveExploits0References16
Rows per page
Query Builder