Lucene search
+L

9296 matches found

OSV
OSV
added 2023/12/21 6:40 p.m.10 views

CLSA-2023-1703184036 squid34: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.1AI score0.88818EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/21 6:30 p.m.9 views

CLSA-2023-1703183411 squid: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.1AI score0.88818EPSS
SaveExploits0References1
CloudLinux
CloudLinux
added 2023/12/21 6:30 p.m.34 views

squid: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.3AI score0.88818EPSS
SaveExploits0
CloudLinux
CloudLinux
added 2023/12/21 6:27 p.m.38 views

squid34: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.3AI score0.88818EPSS
SaveExploits0
OSV
OSV
added 2023/12/21 6:27 p.m.9 views

CLSA-2023-1703183242 squid34: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.1AI score0.88818EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/21 6:16 p.m.12 views

CLSA-2023-1703182573 squid: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.1AI score0.88818EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/21 5:58 p.m.11 views

CLSA-2023-1703181485 squid: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.2AI score0.88818EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/21 12:0 a.m.13 views

PT-2023-31862 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this issue, where the target must...

7.8CVSS7.2AI score0.00525EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/12/20 12:0 a.m.5 views

PT-2023-31849 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this, where the target...

3.3CVSS5.5AI score0.00391EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/12/20 12:0 a.m.3 views

PT-2023-31855 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this, where the target...

3.3CVSS5.5AI score0.00397EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/12/20 12:0 a.m.6 views

PT-2023-31848 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a...

3.3CVSS5.7AI score0.00391EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2023/12/18 9:17 a.m.36 views

CVE-2023-32726 Possible buffer overread from reading DNS responses

The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server...

3.9CVSS8.4AI score0.00673EPSS
SaveExploits0References4
OSV
OSV
added 2023/12/15 11:6 a.m.6 views

OESA-2023-1932 squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buff...

8.6CVSS6.9AI score0.88818EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/12/15 12:0 a.m.41 views

SUSE SLES15 Security Update : squid (SUSE-SU-2023:4825-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4825-1 advisory. - CVE-2023-49285: Fixed buffer over read bug on HTTP Message processing flow bsc1217813 - CVE-2023-49286: Fixed Denial of Service...

8.6CVSS7.4AI score0.88818EPSS
SaveExploits0References8
OSV
OSV
added 2023/12/13 7:17 p.m.11 views

CLSA-2023-1702495051 perl: Fix of CVE-2023-47100

CVE-2023-47100: fix read/write past buffer end...

6.8AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/12/13 12:0 a.m.50 views

SUSE SLES12 Security Update : squid (SUSE-SU-2023:4724-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4724-1 advisory. - CVE-2023-49285: Fixed buffer over read bug on HTTP Message processing flow bsc1217813 - CVE-2023-49286: Fixed Denial of Service...

8.6CVSS7.4AI score0.88818EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2023/12/06 2:4 a.m.6 views

SUSE CVE-2023-49285

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds fo...

8.6CVSS8.3AI score0.88818EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.12 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.8AI score0.00397EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.12 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.8AI score0.00397EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.15 views

The vulnerability of the IRQ Handler component in the Xen hypervisor allows a hacker to disclose protected information.

The vulnerability of the IRQ Handler component in the Xen hypervisor is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that should be protected...

5.1CVSS5.7AI score0.0025EPSS
SaveExploits0References5Affected Software10
Rows per page
Query Builder