Lucene search
+L

3071 matches found

Positive Technologies
Positive Technologies
added 2023/05/30 12:00 a.m.13 views

PT-2023-22382 · Solive · Solive

Name of the Vulnerable Software and Affected Versions: SoLive versions 1.6.14 through 1.6.20 Description: The issue allows an attacker to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. This can cause the application t...

7.5CVSS6.9AI score0.00781EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2023/05/17 12:00 a.m.18 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : rekor (SUSE-SU-2023:2210-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2210-1 advisory. Updated to version 1.1.1 jscSLE-23476: Functional Enhancements - Refactor Trillian client with exported...

7.5CVSS7.1AI score0.0105EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/05/16 9:04 a.m.12 views

libarchive: NULL pointer dereference in archive_write.c

A flaw was found in libarchive. A missing check of the return value of the calloc function can cause a NULL pointer dereference in an out-of-memory condition or when a memory allocation limit is reached, resulting in the program linked with libarchive to crash...

9.8CVSS7.1AI score0.02357EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/05/16 12:00 a.m.24 views

EulerOS Virtualization 2.10.1 : expat (EulerOS-SA-2023-1888)

According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCrea...

7.5CVSS7.2AI score0.02445EPSS
SaveExploits1References2
NVD
NVD
added 2023/05/12 2:15 p.m.42 views

CVE-2023-31914

Jerryscript 3.0 commit 05dbbd1 was discovered to contain out-of-memory issue in malloc...

5.5CVSS5.5AI score0.00331EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2023/05/12 2:15 p.m.37 views

CVE-2023-31914

Jerryscript 3.0 commit 05dbbd1 was discovered to contain out-of-memory issue in malloc...

5.5CVSS6.1AI score0.00331EPSS
SaveExploits1References2
Prion
Prion
added 2023/05/12 2:15 p.m.33 views

Design/Logic Flaw

Jerryscript 3.0 commit 05dbbd1 was discovered to contain out-of-memory issue in malloc...

1.9CVSS5.4AI score0.00331EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2023/05/12 2:15 p.m.12 views

UBUNTU-CVE-2023-31914

Jerryscript 3.0 commit 05dbbd1 was discovered to contain out-of-memory issue in malloc...

5.5CVSS5.8AI score0.00331EPSS
SaveExploits1References3
CVE
CVE
added 2023/05/12 12:00 a.m.69 views

CVE-2023-31914

CVE-2023-31914 affects JerryScript 3.0 (commit 05dbbd1) with an out-of-memory issue in malloc. The connected documents corroborate a memory allocation flaw, implying potential impact on runtime stability/availability, but do not provide concrete exploit details, affected versions beyond 3.0, or a...

5.5CVSS5.4AI score0.00331EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/05/12 12:00 a.m.9 views

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 3.0, which stems from an out-of-memory issue...

5.5CVSS5.6AI score0.00331EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/05/12 12:00 a.m.12 views

CVE-2023-31914

Jerryscript 3.0 commit 05dbbd1 was discovered to contain out-of-memory issue in malloc...

7.2AI score0.00331EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2023/05/12 12:00 a.m.167 views

CVE-2023-31914

Removed by vendor...

5.5CVSS5.5AI score0.00331EPSS
SaveExploits1
OSV
OSV
added 2023/05/12 12:00 a.m.17 views

CVE-2023-31914

Jerryscript 3.0 commit 05dbbd1 was discovered to contain out-of-memory issue in malloc...

5.5CVSS7.1AI score
SaveExploits0References3
Cvelist
Cvelist
added 2023/05/12 12:00 a.m.54 views

CVE-2023-31914

Jerryscript 3.0 commit 05dbbd1 was discovered to contain out-of-memory issue in malloc...

5.7AI score0.00331EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/05/12 12:00 a.m.12 views

PT-2023-23516 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0 commit 05dbbd1 Description: The issue is related to an out-of-memory problem in the malloc function. Recommendations: For Jerryscript version 3.0 commit 05dbbd1, consider restricting memory allocation to prevent...

5.5CVSS5.2AI score0.00331EPSS
SaveExploits1References7
Veracode
Veracode
added 2023/05/11 4:13 a.m.26 views

Denial Of Service (DoS)

github.com/sigstore/rekor is vulnerable to Denial Of Service DoS. The vulnerability exists because the archive metadata file size is not checked before the files are read to memory which can lead to out of memory conditions resulting in an application crash...

7.5CVSS7.2AI score0.0105EPSS
SaveExploits0References4Affected Software2
SUSE CVE
SUSE CVE
added 2023/05/10 1:56 a.m.6 views

SUSE CVE-2023-30551

Rekor is an open source software supply chain transparency log. Rekor prior to version 1.1.1 may crash due to out of memory OOM conditions caused by reading archive metadata files into memory without checking their sizes first. Verification of a JAR file submitted to Rekor can cause an out of...

7.5CVSS6.9AI score0.0105EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2023/05/10 12:00 a.m.33 views

CVE-2023-32209

A maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox 113...

7.5CVSS7.1AI score0.00761EPSS
SaveExploits0References3
OSV
OSV
added 2023/05/09 4:24 p.m.11 views

SUSE-SU-2023:2153-1 Security update for docker-distribution

This update for docker-distribution fixes the following issues: - CVE-2023-2253: Catalog Endpoint can lead to OOM by user input bsc1207705...

6.5CVSS6.3AI score0.00938EPSS
SaveExploits0References3
NVD
NVD
added 2023/05/08 4:15 p.m.27 views

CVE-2023-30551

Rekor is an open source software supply chain transparency log. Rekor prior to version 1.1.1 may crash due to out of memory OOM conditions caused by reading archive metadata files into memory without checking their sizes first. Verification of a JAR file submitted to Rekor can cause an out of...

7.5CVSS7.5AI score0.0105EPSS
SaveExploits0References3
Rows per page
Query Builder