Lucene search
+L

103 matches found

CNNVD
CNNVD
added 2023/04/04 12:00 a.m.10 views

Google Golang 资源管理错误漏洞

Google Golang is a static, strongly typed, compiled language from Google.The syntax of Go is close to C, but with differences in variable declarations.Go supports garbage collection.Go's parallel model is based on Tony Hall's Communicating Sequential Processes CSP, and other languages with a...

7.5CVSS6.9AI score0.01888EPSS
SaveExploits0References23
SUSE CVE
SUSE CVE
added 2023/02/15 6:13 a.m.5 views

SUSE CVE-2006-6505

Multiple heap-based buffer overflows in Mozilla Thunderbird before 1.5.0.9 and SeaMonkey before 1.0.7 allow remote attackers to execute arbitrary code via 1 external message modies with long Content-Type headers or 2 long RFC2047-encoded MIME non-ASCII headers...

6.8CVSS8.2AI score0.04239EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:10 a.m.9 views

SUSE CVE-2007-4840

PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service application crash via 1 a long string in the outcharset parameter to the iconv function; or a long string in the charset parameter to the 2 iconvmimedecodeheaders, 3 iconvmimedecode, or 4 iconvstrlen function...

5CVSS7.7AI score0.03152EPSS
SaveExploits0References5
OSV
OSV
added 2022/09/20 12:00 a.m.43 views

CVE-2022-39956 Partial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding header

The OWASP ModSecurity Core Rule Set CRS is affected by a partial rule set bypass for HTTP multipart requests by submitting a payload that uses a character encoding scheme via the Content-Type or the deprecated Content-Transfer-Encoding multipart MIME header fields that will not be decoded and...

7.3CVSS7.1AI score
SaveExploits0References9
Zero Day Initiative
Zero Day Initiative
added 2022/08/18 12:00 a.m.51 views

Microsoft Outlook MIME Header Heap Corruption Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft Outlook. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of MIME headers. Crafted MIME headers within an email messa...

7.5CVSS2.5AI score0.22441EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2020/04/28 4:08 p.m.9 views

php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers()

Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash...

9.1CVSS7.4AI score0.0313EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2019/11/01 1:03 p.m.9 views

php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers()

Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash...

9.1CVSS7.4AI score0.0313EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2019/08/19 8:42 a.m.7 views

php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers()

Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash...

9.1CVSS7.4AI score0.0313EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2019/06/26 11:21 a.m.48 views

CVE-2019-11039

Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash...

9.1CVSS2.1AI score0.0313EPSS
SaveExploits1References3
OSV
OSV
added 2019/06/19 12:15 a.m.31 views

CVE-2019-11039

Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash...

9.1CVSS6.6AI score
SaveExploits0References8
AlpineLinux
AlpineLinux
added 2019/06/18 11:28 p.m.48 views

CVE-2019-11039

Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash...

9.1CVSS7.1AI score0.0313EPSS
SaveExploits1
Cvelist
Cvelist
added 2019/06/18 11:28 p.m.40 views

CVE-2019-11039 Out-of-bounds read in iconv.c

Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash...

4.2CVSS9.2AI score0.0313EPSS
SaveExploits1References8
Debian CVE
Debian CVE
added 2019/06/18 11:28 p.m.39 views

CVE-2019-11039

Removed by vendor...

9.1CVSS5.7AI score0.0313EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2019/06/07 12:00 a.m.57 views

Ubuntu 16.04 LTS / 18.04 LTS : PHP vulnerabilities (USN-4009-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4009-1 advisory. It was discovered that PHP incorrectly handled certain exif tags in images. A remote attacker could use this issue to cause PHP to crash,...

9.1CVSS7AI score0.07031EPSS
SaveExploits2References4
Ubuntu
Ubuntu
added 2019/06/05 5:11 p.m.283 views

USN-4009-2: PHP vulnerabilities

USN-4009-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that PHP incorrectly decoding certain MIME headers. A remote attacker could possibly use this issue to cause PHP t...

9.1CVSS7.6AI score0.04068EPSS
SaveExploits2
Ubuntu
Ubuntu
added 2019/06/05 3:02 p.m.288 views

USN-4009-1: PHP vulnerabilities

It was discovered that PHP incorrectly handled certain exif tags in images. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly obtain sensitive information. CVE-2019-11036 It was discovered that PHP incorrectly decoding certain MIME headers...

9.1CVSS7AI score0.07031EPSS
SaveExploits2
UbuntuCve
UbuntuCve
added 2019/06/03 12:00 a.m.44 views

CVE-2019-11039

Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash...

9.1CVSS6.4AI score0.0313EPSS
SaveExploits1References3
OSV
OSV
added 2019/06/03 12:00 a.m.7 views

UBUNTU-CVE-2019-11039

Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash...

9.1CVSS6.3AI score0.0313EPSS
SaveExploits1References4
CNVD
CNVD
added 2017/12/04 12:00 a.m.9 views

Cisco Email Security Appliance Security Bypass Vulnerability (CNVD-2017-36396)

The Cisco Email Security Appliance ESA is an email security appliance from Cisco in the U.S. AsyncOS Software is the operating system used in it.Multipurpose Internet Mail Extensions MIME AsyncOS Software is the operating system used in it. Multipurpose Internet Mail Extensions MIME scanner is on...

5.8CVSS6.8AI score0.01638EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/06/15 12:00 a.m.11 views

Cisco Email Security Appliance Attachment Filter Bypass Vulnerability

The Cisco Email Security Appliance is a suite of email security appliances.Cisco Content Security Management is a unified email and Web security management solution. An email scanning vulnerability exists in the Cisco AsyncOS Software in the Cisco Email Security Appliance ESA appliance that stems...

7.5CVSS7.2AI score0.01957EPSS
SaveExploits0References1
Rows per page
Query Builder