Lucene search
+L

13017 matches found

UbuntuCve
UbuntuCve
added 2020/06/01 12:00 a.m.51 views

CVE-2020-10543

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow. An application written in Perl would only be vulnerable to this flaw if it evaluates regular expressions supplied by the attacker. Evaluating regular...

8.2CVSS7AI score0.11334EPSS
SaveExploits0References5
OSV
OSV
added 2020/05/29 5:15 p.m.22 views

CVE-2020-11018

In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0...

6.5CVSS6.5AI score
SaveExploits0References3
NVD
NVD
added 2020/05/29 5:15 p.m.19 views

CVE-2020-11018

In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0...

6.5CVSS6.8AI score0.01896EPSS
SaveExploits0References3
Prion
Prion
added 2020/05/29 5:15 p.m.28 views

Design/Logic Flaw

In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0...

4CVSS6.3AI score0.01896EPSS
SaveExploits0References3Affected Software3
OSV
OSV
added 2020/05/29 5:15 p.m.6 views

UBUNTU-CVE-2020-11018

In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0...

6.5CVSS6.9AI score0.01896EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2020/05/29 5:15 p.m.32 views

CVE-2020-11018

In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0...

6.5CVSS6.7AI score0.01896EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2020/05/29 12:00 a.m.36 views

CVE-2020-11018

In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0...

6.5CVSS7AI score0.01896EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/05/29 12:00 a.m.27 views

CVE-2020-11018 Out of bound read in cliprdr_server_receive_capabilities in FreeRDP

In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0...

6.5CVSS6.8AI score0.01896EPSS
SaveExploits0References3
Veracode
Veracode
added 2020/05/26 2:22 a.m.29 views

Denial Of Service (DoS)

jpeg-js is vulnerable to denial of service DoS. The vulnerability exists as it fails to properly restrict the values of the resolution from the EXIF data, allowing a small manipulated image to cause a disproportionately large memory allocation...

5.5CVSS3.1AI score0.01077EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2020/05/13 12:00 a.m.10 views

PT-2020-3072

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a buffer overflow in the Direct IO function of the Linux kernel, which can be exploited to gain unauthorized access to protected information or cause a denial o...

9.3CVSS7.8AI score0.05176EPSS
SaveExploits11References167
RedHat Linux
RedHat Linux
added 2020/05/12 5:16 p.m.11 views

cryptacular: excessive memory allocation during a decode operation

CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...

7.5CVSS7.4AI score0.03334EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2020/05/11 8:19 p.m.18 views

cryptacular: excessive memory allocation during a decode operation

CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...

7.5CVSS7.4AI score0.03334EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2020/05/11 8:17 p.m.13 views

cryptacular: excessive memory allocation during a decode operation

CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...

7.5CVSS7.4AI score0.03334EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2020/05/11 8:15 p.m.12 views

cryptacular: excessive memory allocation during a decode operation

CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...

7.5CVSS7.4AI score0.03334EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2020/05/11 8:12 p.m.16 views

cryptacular: excessive memory allocation during a decode operation

CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...

7.5CVSS7.4AI score0.03334EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2020/05/11 7:19 p.m.35 views

CVE-2020-5833

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

4.4AI score0.00359EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/05/11 12:00 a.m.14 views

PT-2020-4630 · Php +8 · Php +8

Name of the Vulnerable Software and Affected Versions: PHP versions 7.2.x through 7.2.30 PHP versions 7.3.x through 7.3.17 PHP versions 7.4.x through 7.4.5 Description: The issue is related to an integer overflow buffer in the PHP language interpreter. Exploitation of this issue could allow a...

9.8CVSS7.8AI score0.9978EPSS
SaveExploits107References426
CNVD
CNVD
added 2020/05/11 12:00 a.m.55 views

imlib2 integer overflow vulnerability (CNVD-2021-28272)

imlib2 is a graphics library for fast file loading, saving, rendering and manipulation. An integer overflow vulnerability exists in modules/loaders/loaderico.c in imlib2 version 1.6.0. An attacker can exploit this vulnerability to cause invalid memory allocations and out-of-bounds reads via icons...

9.1CVSS6.8AI score0.01589EPSS
SaveExploits0References1
Veracode
Veracode
added 2020/05/10 11:28 p.m.22 views

Denial Of Service (DoS)

libzip is vulnerable to denial of service. A remote attacker is able to crash the application via a malicious ZIP archive due to a memory allocation failure in the zipcdirgrow function in zipdirent.c...

6.5CVSS3AI score0.032EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2020/05/10 11:27 p.m.42 views

Denial Of Service (DoS)

curl and libcurl is vulnerable to denial of service DoS. The platforms allow attackers to cause a denial of service out-of-bounds access and application crash or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library...

9.8CVSS6.4AI score0.03839EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder