Lucene search
+L

9814 matches found

Prion
Prion
•added 2018/02/13 8:29 p.m.•23 views

Buffer overflow

In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual component length, which has a resultant buffer overflow and out-of-bounds memory accesses...

7.5CVSS9.6AI score0.01534EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2018/02/13 8:00 p.m.•4 views

CVE-2018-6953

In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual component length, which has a resultant buffer overflow and out-of-bounds memory accesses...

9.8CVSS0.01534EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/02/13 8:00 p.m.•36 views

CVE-2018-6953

In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual component length, which has a resultant buffer overflow and out-of-bounds memory accesses...

9.8AI score0.01534EPSS
SaveExploits0References1
CVE
CVE
•added 2018/02/13 8:00 p.m.•51 views

CVE-2018-6953

In CCN-lite 2, the NDNTLV parser fails to verify that a component’s length field matches the actual component length, leading to a buffer overflow and out-of-bounds memory accesses. Affected component: NDNTLV parsing logic in CCN-lite 2. Root cause: mismatch between declared length and actual dat...

9.8CVSS9.7AI score0.01534EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2018/02/13 5:29 p.m.•21 views

CVE-2018-6948

In CCN-lite 2, the function ccnlprefixtostrdetailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNLMAXPREFIXSIZE; the buffer has the size CCNLMAXPREFIXSIZE. However, when NFN is enabled, additional characters are written to the buffer...

9.8CVSS9.7AI score0.01534EPSS
SaveExploits0References1
Prion
Prion
•added 2018/02/13 5:29 p.m.•20 views

Buffer overflow

In CCN-lite 2, the function ccnlprefixtostrdetailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNLMAXPREFIXSIZE; the buffer has the size CCNLMAXPREFIXSIZE. However, when NFN is enabled, additional characters are written to the buffer...

7.5CVSS9.5AI score0.01534EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2018/02/13 5:29 p.m.•17 views

CVE-2018-6948

In CCN-lite 2, the function ccnlprefixtostrdetailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNLMAXPREFIXSIZE; the buffer has the size CCNLMAXPREFIXSIZE. However, when NFN is enabled, additional characters are written to the buffer...

9.8CVSS7.5AI score
SaveExploits0References1
Mend
Mend
•added 2018/02/13 5:00 p.m.•3 views

CVE-2018-6948

In CCN-lite 2, the function ccnlprefixtostrdetailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNLMAXPREFIXSIZE; the buffer has the size CCNLMAXPREFIXSIZE. However, when NFN is enabled, additional characters are written to the buffer...

9.8CVSS0.01534EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/02/13 5:00 p.m.•37 views

CVE-2018-6948

In CCN-lite 2, the function ccnlprefixtostrdetailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNLMAXPREFIXSIZE; the buffer has the size CCNLMAXPREFIXSIZE. However, when NFN is enabled, additional characters are written to the buffer...

9.7AI score0.01534EPSS
SaveExploits0References1
CVE
CVE
•added 2018/02/13 5:00 p.m.•62 views

CVE-2018-6948

CVE-2018-6948 affects CCN-lite 2, where the function ccnl_prefix_to_str_detailed can overflow a buffer when writing a prefix to buf. The prefix maximum is CCNL_MAX_PREFIX_SIZE, but with NFN enabled, additional characters (e.g., NFN and R2C tags) are written, allowing an NFN-R2C packet with a pref...

9.8CVSS9.6AI score0.01534EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2018/02/13 12:00 a.m.•6 views

PT-2018-17836

Name of the Vulnerable Software and Affected Versions CCN-lite version 2 Description The issue arises from the Parser of NDNTLV in CCN-lite, where it fails to verify if a certain component's length field matches the actual component length. This oversight leads to a buffer overflow and...

9.8CVSS0.01534EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/13 12:00 a.m.•8 views

CVE-2018-6953: Improper Restriction of Operations within the Bounds of a Memory Buffer

In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual component length, which has a resultant buffer overflow and out-of-bounds memory accesses...

9.8CVSS8.3AI score0.01534EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/02/13 12:00 a.m.•3 views

PT-2018-17835

Name of the Vulnerable Software and Affected Versions CCN-lite version 2 Description The issue arises in the ccnl prefix to str detailed function, which can cause a buffer overflow when writing a prefix to the buffer buf. The buffer size is defined as CCNL MAX PREFIX SIZE, but when NFN is enabled...

9.8CVSS0.01534EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/13 12:00 a.m.•3 views

CVE-2018-6948: Improper Restriction of Operations within the Bounds of a Memory Buffer

In CCN-lite 2, the function ccnlprefixtostrdetailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNLMAXPREFIXSIZE; the buffer has the size CCNLMAXPREFIXSIZE. However, when NFN is enabled, additional characters are written to the buffer...

9.8CVSS8.2AI score0.01534EPSS
SaveExploits0References2
OSV
OSV
•added 2018/02/11 6:29 a.m.•19 views

CVE-2018-6891

Bookly 1 WordPress Booking Plugin Lite before 14.5 has XSS via a jQuery.ajax request to ng-paymentdetailsdialog.js...

6.1CVSS5.8AI score0.00995EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/11 12:00 a.m.•2 views

CVE-2018-6891: Improper Neutralization of Input During Web Page Generation

Bookly 1 WordPress Booking Plugin Lite before 14.5 has XSS via a jQuery.ajax request to ng-paymentdetailsdialog.js...

6.1CVSS6.3AI score0.00995EPSS
SaveExploits2References2
CNVD
CNVD
•added 2018/02/09 12:00 a.m.•13 views

CCN-lite 'cnb_parse_lev' Function Denial of Service Vulnerability

CCN-lite is a lightweight CCNx Content Centric Networking Protocol implementation of the CCN-lite project. A security vulnerability exists in the 'cnbparselev' function in CCN-lite versions prior to 2.00. An attacker could exploit this vulnerability to cause an invalid read...

9.8CVSS6.7AI score0.01783EPSS
SaveExploits0References1
NVD
NVD
•added 2018/02/08 7:29 a.m.•30 views

CVE-2018-6834

static/js/padutils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href...

6.1CVSS6AI score0.00881EPSS
SaveExploits0References2
NVD
NVD
•added 2018/02/08 7:29 a.m.•37 views

CVE-2018-6835

node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access restrictions...

9.8CVSS9.4AI score0.02286EPSS
SaveExploits1References2
OSV
OSV
•added 2018/02/08 7:29 a.m.•27 views

CVE-2018-6835

node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access restrictions...

9.8CVSS7.2AI score
SaveExploits0References2
Rows per page
Query Builder