Lucene search
+L

3096 matches found

Github Security Blog
Github Security Blog
added 2019/04/02 3:46 p.m.37 views

Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client

In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive...

7.5CVSS4.5AI score0.12033EPSS
SaveExploits0References23Affected Software1
NVD
NVD
added 2019/03/29 2:29 p.m.30 views

CVE-2017-18111

The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 before version 5.2.6 used an XML document builder that was vulnerable to XXE when consuming a client OAuth request. This allowed malicious oauth application linked...

8.7CVSS8.4AI score0.01633EPSS
SaveExploits0References1
Prion
Prion
added 2019/03/29 2:29 p.m.25 views

Xxe

The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 before version 5.2.6 used an XML document builder that was vulnerable to XXE when consuming a client OAuth request. This allowed malicious oauth application linked...

5.5CVSS8.3AI score0.01633EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/03/29 2:04 p.m.31 views

CVE-2017-18111

The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 before version 5.2.6 used an XML document builder that was vulnerable to XXE when consuming a client OAuth request. This allowed malicious oauth application linked...

8.4AI score0.01633EPSS
SaveExploits0References1
Prion
Prion
added 2019/03/28 10:29 p.m.24 views

Code injection

In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive...

5CVSS7.5AI score0.12033EPSS
SaveExploits0References19Affected Software7
OSV
OSV
added 2019/03/28 10:29 p.m.9 views

UBUNTU-CVE-2019-0222

In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive...

7.5CVSS6.8AI score0.12033EPSS
SaveExploits0References12
OSV
OSV
added 2019/03/28 10:29 p.m.12 views

CVE-2019-0222

In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive...

7.5CVSS7.4AI score
SaveExploits0References19
NVD
NVD
added 2019/03/28 10:29 p.m.20 views

CVE-2019-0222

In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive...

7.5CVSS7.5AI score0.12033EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
added 2019/03/28 10:29 p.m.32 views

CVE-2019-0222

In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive...

7.5CVSS6.8AI score0.12033EPSS
SaveExploits0References11
CVE
CVE
added 2019/03/28 9:16 p.m.252 views

CVE-2019-0222

CVE-2019-0222 affects Apache ActiveMQ 5.0.0–5.15.8. Description: unmarshalling of a corrupt MQTT frame can cause a broker Out of Memory, rendering the broker unresponsive. Enterprise/Nessus entries in the connected docs classify this as an unpatched/vulnerable issue with no vendor patch available...

7.5CVSS7.4AI score0.12033EPSS
SaveExploits0References19Affected Software1
EUVD
EUVD
added 2019/03/28 9:16 p.m.4 views

EUVD-2019-0423

In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive...

7.5CVSS6.5AI score0.12033EPSS
SaveExploits0References36
Debian CVE
Debian CVE
added 2019/03/28 9:16 p.m.27 views

CVE-2019-0222

In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive...

7.5CVSS6.8AI score0.12033EPSS
SaveExploits0
Cvelist
Cvelist
added 2019/03/28 9:16 p.m.33 views

CVE-2019-0222

In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive...

7.5AI score0.12033EPSS
SaveExploits0References19
Positive Technologies
Positive Technologies
added 2019/03/28 12:00 a.m.8 views

PT-2019-5289 · Apache +2 · Apache Activemq +2

Name of the Vulnerable Software and Affected Versions: Apache ActiveMQ versions 5.0.0 through 5.15.8 Description: The issue is related to the incorrect handling of code generation in the implementation of the MQTT protocol in Apache ActiveMQ. This can lead to a broker Out of Memory exception,...

7.8CVSS6.2AI score0.22854EPSS
SaveExploits0References60
Tenable Nessus
Tenable Nessus
added 2019/03/27 12:00 a.m.36 views

openSUSE Security Update : apache-pdfbox (openSUSE-2019-670)

This update for apache-pdfbox fixes the following issues : Security issue fixed : - CVE-2018-8036: Fix infinite loop while parsing files that leads to an out of memory issue bsc1099721. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network...

6.5CVSS6.5AI score0.04834EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2019/03/27 12:00 a.m.26 views

openSUSE Security Update : libopenmpt (openSUSE-2019-524)

This update for libopenmpt to version 0.3.9 fixes the following issues : These security issues were fixed : - CVE-2018-11710: Prevent write near address 0 in out-of-memory situations when reading AMS files bsc1095644 - CVE-2018-10017: Preven out-of-bounds memory read with IT/ITP/MO3 files...

8.8CVSS7.1AI score0.02155EPSS
SaveExploits0References4
CNVD
CNVD
added 2019/02/25 12:00 a.m.11 views

libvterm Denial of Service Vulnerability

libvterm is a C99 library that implements the VT220 or xterm terminal emulator. A denial of service vulnerability exists in libvterm 0+bzr726 and earlier versions for Vim and other devices, where the vulnerable program fails to properly handle out-of-memory conditions and can be exploited by an...

7.5CVSS6.8AI score0.02972EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2019/02/24 2:29 p.m.28 views

CVE-2018-20786

libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service application crash, related to screen.c, state.c, and vterm.c...

7.5CVSS7.1AI score0.02972EPSS
SaveExploits1References2
OSV
OSV
added 2019/02/24 2:29 p.m.5 views

DEBIAN-CVE-2018-20786

libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service application crash, related to screen.c, state.c, and vterm.c...

7.5CVSS7.5AI score0.02972EPSS
SaveExploits1References1
OSV
OSV
added 2019/02/24 2:29 p.m.31 views

CVE-2018-20786

libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service application crash, related to screen.c, state.c, and vterm.c...

7.5CVSS6.6AI score
SaveExploits0References3
Rows per page
Query Builder