Lucene search
+L

7628 matches found

osv_azl
osv_azl
•added 2024/07/09 7:15 p.m.•17 views

AZL-45330 CVE-2024-38517 affecting package opencc 1.1.1-3

Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the intege...

7.8CVSS7.2AI score0.00375EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2024/07/09 7:15 p.m.•43 views

CVE-2024-38517

Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the intege...

7.8CVSS7AI score0.00375EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2024/07/09 7:15 p.m.•20 views

UBUNTU-CVE-2024-38517

Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the intege...

7.8CVSS5.7AI score0.00375EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2024/07/09 6:51 p.m.•59 views

CVE-2024-38517 Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Underflow

Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the intege...

7.8CVSS0.00375EPSS
SaveExploits0References3
CVE
CVE
•added 2024/07/09 6:51 p.m.•177 views

CVE-2024-38517

CVE-2024-38517 : Tencent RapidJSON is vulnerable to a local privilege-escalation due to an integer underflow in the GenericReader::ParseNumber() function when parsing JSON text from a stream. A crafted file opened by the victim can trigger the underflow, enabling elevation of privileges. The vuln...

7.8CVSS7.7AI score0.00375EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/07/09 6:51 p.m.•33 views

CVE-2024-38517 Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Underflow

Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the intege...

7.8CVSS7.2AI score0.00375EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/07/09 6:51 p.m.•44 views

CVE-2024-38517 Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Underflow

Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the intege...

7.8CVSS7.5AI score
SaveExploits0References6
Mend
Mend
•added 2024/07/09 6:51 p.m.•5 views

CVE-2024-38517

Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the intege...

8.5CVSS0.00375EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2024/07/09 6:51 p.m.•31 views

CVE-2024-38517

Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the intege...

7.8CVSS7.1AI score0.00375EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2024/07/09 6:51 p.m.•34 views

CVE-2024-38517

Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the intege...

7.8CVSS7.7AI score0.00375EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2024/07/09 10:02 a.m.•36 views

Important: Red Hat Security Advisory: edk2 security update

An update for edk2 is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

8.8CVSS7.1AI score0.01223EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2024/07/09 10:02 a.m.•30 views

edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message

A vulnerability has been identified in the NetworkPkg IP stack of EDK2, the open-source reference implementation of the UEFI specification. This flaw enables an unauthenticated attacker within the same network vicinity to transmit a specifically crafted DHCPv6 message. Exploiting this vulnerabili...

6.5CVSS5.7AI score0.00937EPSS
SaveExploits1References6
Snyk
Snyk
•added 2024/07/09 12:00 a.m.•11 views

Integer Underflow

Overview Affected versions of this package are vulnerable to Integer Underflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened, this triggers the integer...

8.4CVSS6.8AI score0.00375EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/09 12:00 a.m.•4 views

CVE-2024-38517: Integer Underflow (Wrap or Wraparound)

Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the intege...

7.8CVSS7.2AI score0.00375EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/09 12:00 a.m.•17 views

Tencent RapidJSON Security Vulnerability

Tencent RapidJSON is a C++ rapid JSON parser/generator with SAX/DOM style API from Tencent, China. A security vulnerability exists in Tencent RapidJSON, which stems from an integer underflow issue in the GenericReader::ParseNumber function in include/rapidjson/reader.h. An attacker could use this...

7.8CVSS6.8AI score0.00375EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/09 12:00 a.m.•4 views

CVE-2024-38050: Integer Underflow (Wrap or Wraparound)

Windows Workstation Service Elevation of Privilege Vulnerability...

7.8CVSS7.3AI score0.00713EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/09 12:00 a.m.•4 views

CVE-2024-37975: Integer Underflow (Wrap or Wraparound)

Secure Boot Security Feature Bypass Vulnerability...

8CVSS7.5AI score0.01263EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/09 12:00 a.m.•4 views

CVE-2024-37986: Integer Underflow (Wrap or Wraparound)

Secure Boot Security Feature Bypass Vulnerability...

8CVSS7.5AI score0.00983EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/09 12:00 a.m.•3 views

CVE-2024-37981: Integer Underflow (Wrap or Wraparound)

Secure Boot Security Feature Bypass Vulnerability...

8CVSS7.5AI score0.01127EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/09 12:00 a.m.•3 views

CVE-2024-37974: Integer Underflow (Wrap or Wraparound)

Secure Boot Security Feature Bypass Vulnerability...

8CVSS7.5AI score0.00983EPSS
SaveExploits0References1
Rows per page
Query Builder