Lucene search
+L

2552 matches found

RedhatCVE
RedhatCVE
added 2020/01/28 4:15 a.m.31 views

CVE-2018-6913

It was found that the pack function in the 32-bit version of the perl interpreter was vulnerable to heap buffer overflow via the packing template. An attacker, able to provide a specially crafted template, could use this flaw to crash the interpreter...

9.8CVSS5.4AI score0.10866EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/27 12:00 a.m.15 views

Fedora: Security Advisory for python3 (FEDORA-2019-297a9f4aa5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Veracode
Veracode
added 2020/01/24 1:55 a.m.23 views

Denial Of Service (DoS)

typedast is vulnerable to denial of service. An out-of-bounds read in astforarguments allow an attacker to crash the interpreter process...

7.5CVSS3.5AI score0.03283EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2020/01/15 5:15 p.m.36 views

CVE-2020-2581

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: LLVM Interpreter. The supported version that is affected is 19.3.0.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle GraalVM Enterprise Editi...

4CVSS3.4AI score0.00402EPSS
SaveExploits0References1
Prion
Prion
added 2020/01/15 5:15 p.m.29 views

Buffer overflow

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: LLVM Interpreter. The supported version that is affected is 19.3.0.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle GraalVM Enterprise Editi...

2.1CVSS4.1AI score0.00402EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2020/01/15 4:34 p.m.13 views

CVE-2020-2581

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: LLVM Interpreter. The supported version that is affected is 19.3.0.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle GraalVM Enterprise Editi...

4CVSS5.6AI score0.00402EPSS
SaveExploits0References1
CVE
CVE
added 2020/01/15 4:34 p.m.68 views

CVE-2020-2581

CVE-2020-2581 affects Oracle GraalVM Enterprise Edition, LLVM Interpreter, specifically version 19.3.0.2. The issue allows an unauthenticated user with access to the hosting infrastructure to compromise GraalVM Enterprise Edition, potentially causing partial denial of service (availability impact...

4CVSS3.4AI score0.00402EPSS
SaveExploits0References1Affected Software1
Symantec
Symantec
added 2020/01/14 12:00 a.m.34 views

Oracle GraalVM Enterprise Edition CVE-2020-2581 Local Security Vulnerability

Description Oracle GraalVM Enterprise Edition is prone to a local security vulnerability. The 'LLVM Interpreter' component is affected. This vulnerability affects the following supported versions: 19.3.0.2 Technologies Affected Oracle GraalVM Enterprise Edition 19.3.0.2 Recommendations Block...

2.1AI score0.00402EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2020/01/09 12:00 a.m.31 views

Fedora Update for scapy FEDORA-2019-20d6b8f9c4

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/09 12:00 a.m.46 views

Fedora Update for python2-docs FEDORA-2019-0d3fcae639

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.3AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/01/08 12:00 a.m.10 views

The vulnerability of the sapi/fpm/fpm/fpm_main.c component is related to the PHP-FPM interpreter, a programming language interpreter for PHP. This vulnerability allows attackers to execute arbitrary commands.

The vulnerability of the sapi/fpm/fpm/fpmmain.c component, which belongs to the PHP-FPM interpreter for PHP programming languages, is related to buffer overflow vulnerabilities. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the vulnerable server using a...

8.7CVSS7.9AI score0.9978EPSS
SaveExploits57References20Affected Software7
Debian
Debian
added 2019/12/17 9:37 a.m.150 views

[SECURITY] [DSA 4586-1] ruby2.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4586-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2019 https://www.debian.org/security/faq -...

7.8CVSS2.9AI score0.05128EPSS
SaveExploits1
Debian
Debian
added 2019/12/17 9:37 a.m.100 views

[SECURITY] [DSA 4586-1] ruby2.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4586-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2019 https://www.debian.org/security/faq -...

8.1CVSS8.3AI score0.05128EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:00 a.m.14 views

The vulnerability of the lazy_initialize function in the Ruby programming language allows a hacker to execute arbitrary code.

The vulnerability of the lazyinitialize function in the Ruby interpreter is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.3AI score0.05913EPSS
SaveExploits1References7Affected Software2
RedhatCVE
RedhatCVE
added 2019/12/12 10:31 p.m.33 views

CVE-2018-6797

A heap buffer write overflow, with control over the bytes written, was found in the way regular expressions employing Unicode rules are compiled. An attacker, with the ability to provide a specially crafted regular expression, could crash the perl interpreter, or possibly execute arbitrary code...

9.8CVSS3.6AI score0.06599EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.14 views

The vulnerability of the Lua interpreter implemented in Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) hardware network devices allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the Lua interpreter implemented in Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD hardware-based network devices relates to the execution of operations beyond the buffer memory boundaries. Exploiting this vulnerability allows a malicious acto...

9CVSS7.8AI score0.04122EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.10 views

The vulnerability of the Ruby interpreter’s methods UNIXServer.open and UNIXSocket.open allows attackers to circumvent security restrictions.

The vulnerability of the UNIXServer.open and UNIXSocket.open methods in the Ruby programming language exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...

7.8CVSS6.8AI score0.07026EPSS
SaveExploits0References14Affected Software4
Github Security Blog
Github Security Blog
added 2019/12/02 6:03 p.m.75 views

typed-ast Out-of-bounds Read

typedast 1.3.0 and 1.3.1 has an astforarguments out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source but not necessarily execute it may be able to crash the interpreter process. This could be a concern, for example, in a web-based service that pars...

7.5CVSS7.2AI score0.03283EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2019/12/02 6:03 p.m.7 views

GHSA-7XXV-WPXJ-MX5V typed-ast Out-of-bounds Read

typedast 1.3.0 and 1.3.1 has an astforarguments out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source but not necessarily execute it may be able to crash the interpreter process. This could be a concern, for example, in a web-based service that pars...

8.7CVSS7.1AI score0.03283EPSS
SaveExploits0References10
OSV
OSV
added 2019/12/02 6:02 p.m.11 views

GHSA-M3JW-62M7-JJCM typed-ast Out-of-bounds Read

typedast 1.3.0 and 1.3.1 has a handlekeywordonlyargs out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source but not necessarily execute it may be able to crash the interpreter process. This could be a concern, for example, in a web-based service that...

7.5CVSS7.1AI score0.03283EPSS
SaveExploits0References10
Rows per page
Query Builder