Lucene search
+L

13810 matches found

Snyk
Snyk
added 2023/04/02 1:07 p.m.6 views

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun. Remediation Upgrade zstd to version 1.5.4 or higher. References - GitHub Issue - GitHub PR Credit: yiyuaner...

7.5CVSS7.3AI score0.01588EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/04/02 12:00 a.m.31 views

SUSE SLES15: flatpak / flatpak-devel / flatpak-zsh-completion / libflatpak0 / etc (SUSE-SU-2023:1714-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1714-1 advisory. - CVE-2023-28101: Fixed misleading terminal output with metadata with ANSI control codes bsc1209410. - CVE-2023-28100: Fixed...

10CVSS6.6AI score0.00887EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2023/04/02 12:00 a.m.11 views

Fedora: Security Advisory for ImageMagick (FEDORA-2023-f3ced9cffd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/04/02 12:00 a.m.36 views

Fedora 36 : flatpak (2023-9fbc701e0d)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9fbc701e0d advisory. Update to 1.12.8 Fix CVE-2023-28100 and CVE-2023-28101 Tenable has extracted the preceding description block directly from the Fedora security...

10CVSS7.1AI score0.00887EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2023/04/01 7:00 a.m.9 views

A vulnerability was found in zstd v1.4.10 where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.

...

7.5CVSS6.9AI score0.01588EPSS
SaveExploits0
Fedora
Fedora
added 2023/04/01 12:17 a.m.22 views

[SECURITY] Fedora 38 Update: rubygem-railties-7.0.4.3-1.fc38

Rails internals: application bootup, plugins, generators, and rake tasks. Railties is responsible to glue all frameworks together. Overall, it: handles all the bootstrapping process for a Rails application; manages rails command line interface; provides Rails generators core;...

5.3CVSS7.6AI score0.00923EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2023/03/31 9:30 p.m.35 views

zstd vulnerable to buffer overrun

A vulnerability was found in zstd v1.4.10, where an attacker can supply an empty string as an argument to the command line tool to cause buffer overrun...

7.5CVSS7AI score0.01588EPSS
SaveExploits0References10Affected Software2
NVD
NVD
added 2023/03/31 8:15 p.m.19 views

CVE-2022-4899

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun...

7.5CVSS7.5AI score0.01588EPSS
SaveExploits0References5
OSV
OSV
added 2023/03/31 8:15 p.m.10 views

AZL-25813 CVE-2022-4899 affecting package zstd for versions less than 1.5.4-1

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun...

7.5CVSS6.8AI score0.01588EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/31 8:15 p.m.29 views

Buffer overflow

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun...

5CVSS7.4AI score0.01588EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
added 2023/03/31 8:15 p.m.81 views

CVE-2022-4899

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun...

7.5CVSS6.8AI score0.01588EPSS
SaveExploits0References2
PyPA
PyPA
added 2023/03/31 8:15 p.m.11 views

zstd vulnerable to buffer overrun

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun...

7.5CVSS7.4AI score0.01588EPSS
SaveExploits0References4Affected Software1
Openbugbounty
Openbugbounty
added 2023/03/31 7:24 a.m.12 views

line-bbs.com Cross Site Scripting vulnerability OBB-3242459

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

5.9AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/03/31 1:59 a.m.5 views

SUSE CVE-2021-33641

When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory use after free...

7.8CVSS7AI score0.0027EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/03/31 12:00 a.m.33 views

CVE-2022-4899

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun...

7.8AI score0.01588EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2023/03/31 12:00 a.m.5 views

CVE-2022-4899

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun...

7.6AI score0.01588EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2023/03/29 8:15 p.m.6 views

CVE-2022-44370

NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856...

7.8CVSS5.9AI score0.00445EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2023/03/29 8:15 p.m.29 views

CVE-2022-44370

NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856...

7.8CVSS7.3AI score0.00445EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2023/03/29 8:15 p.m.23 views

CVE-2022-44369

NASM 2.16 development is vulnerable to 476: Null Pointer Dereference via output/outaout.c...

5.5CVSS6.1AI score0.00311EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2023/03/29 8:15 p.m.21 views

CVE-2022-44368

NASM v2.16 was discovered to contain a null pointer deference in the NASM component...

5.5CVSS6.1AI score0.00311EPSS
SaveExploits1References2
Rows per page
Query Builder