Lucene search
+L

9859 matches found

OSV
OSV
added 2021/01/11 10:15 a.m.8 views

UBUNTU-CVE-2020-17508

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS7.1AI score0.0202EPSS
SaveExploits0References4
Prion
Prion
added 2021/01/11 10:15 a.m.20 views

Design/Logic Flaw

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

5CVSS7.3AI score0.0202EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/11 9:40 a.m.33 views

CVE-2020-17508

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.3AI score0.0202EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2021/01/11 9:40 a.m.57 views

CVE-2020-17508

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS7.3AI score0.0202EPSS
SaveExploits0
CVE
CVE
added 2021/01/11 9:40 a.m.113 views

CVE-2020-17508

The CVE-2020-17508 entry concerns Apache Traffic Server’s ATS ESI plugin, with a memory disclosure vulnerability. Affected are ATS/Plugin versions: 7.0.0–7.1.11 and 8.0.0–8.1.0. The available data state that upgrading the plugin is required; no additional exploit details, affected file paths, or ...

7.5CVSS7.2AI score0.0202EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2021/01/08 7:15 p.m.2 views

DEBIAN-CVE-2020-16042

Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS7.1AI score0.00891EPSS
SaveExploits0References1
Prion
Prion
added 2021/01/08 7:15 p.m.16 views

Design/Logic Flaw

Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

4.3CVSS6.3AI score0.00891EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/01/07 12:03 a.m.6 views

USN-4683-1 linux-oem-5.6 vulnerability

Minh Yuan discovered that the framebuffer console driver in the Linux kernel did not properly handle fonts in some conditions. A local attacker could use this to cause a denial of service system crash or possibly expose sensitive information kernel memory...

6.1CVSS6.7AI score0.00517EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/01/04 12:00 a.m.6 views

QEMU heap buffer overflow vulnerability (CNVD-2021-00892)

QEMU is a set of simulation processors written by Fabrice Bellard and distributed with source code under the GPL license, widely used on the GNU/Linux platform. A heap buffer overflow vulnerability exists in iscsiaioioctlcb in block/iscsi.c in QEMU 4.1.0. An attacker can exploit this vulnerabilit...

3.8CVSS7.9AI score0.00467EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/31 10:15 a.m.8 views

DEBIAN-CVE-2020-35861

An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys...

7.5CVSS7.3AI score0.0149EPSS
SaveExploits1References1
OSV
OSV
added 2020/12/31 1:15 a.m.3 views

DEBIAN-CVE-2020-11947

iscsiaioioctlcb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker...

3.8CVSS6.5AI score0.00467EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/31 1:15 a.m.39 views

CVE-2020-11947

iscsiaioioctlcb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker...

3.8CVSS6.7AI score
SaveExploits0References3
Prion
Prion
added 2020/12/31 1:15 a.m.33 views

Heap overflow

iscsiaioioctlcb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker...

2.1CVSS4.4AI score0.00467EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2020/12/31 1:15 a.m.8 views

UBUNTU-CVE-2020-11947

iscsiaioioctlcb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker...

3.8CVSS6.8AI score0.00467EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2020/12/31 12:13 a.m.33 views

CVE-2020-11947

iscsiaioioctlcb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker...

5.4AI score0.00467EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2020/12/31 12:00 a.m.10 views

QEMU 缓冲区错误漏洞

QEMU is a set of simulation processors written by Fabrice Bellard and distributed with source code under the GPL license, widely used on the GNU/Linux platform. A heap buffer overflow vulnerability exists in iscsiaioioctlcb in block/iscsi.c in QEMU 4.1.0. An attacker can exploit this vulnerabilit...

3.8CVSS7.2AI score0.00467EPSS
SaveExploits0References16
BDU FSTEC
BDU FSTEC
added 2020/12/24 12:00 a.m.10 views

The vulnerability of the Linux operating system’s kernel, related to the use of memory after it is freed, allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose sensitive information by using system calls such as ioctls KDGKBSENT and KDSKBSENT...

4.1CVSS6.4AI score0.00439EPSS
SaveExploits1References23Affected Software8
Apple
Apple
added 2020/12/22 5:53 a.m.199 views

About the security content of iOS 14.3 and iPadOS 14.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

8.8CVSS0.9AI score0.01725EPSS
SaveExploits0Affected Software2
Tenable Nessus
Tenable Nessus
added 2020/12/22 12:00 a.m.37 views

Virtuozzo 6 : java-1.8.0-openjdk / java-1.8.0-openjdk-debug / etc (VZLSA-2019-0416)

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

3.1CVSS6.5AI score0.03374EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/12/19 12:00 a.m.66 views

Amazon Linux AMI : libxslt (ALAS-2020-1464) (deprecated)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1464 advisory. - libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and...

9.4AI score0.0523EPSS
SaveExploits0References5
Rows per page
Query Builder