Lucene search
+L

9177 matches found

Veracode
Veracode
added 2019/05/02 6:45 a.m.44 views

Denial Of Service (DoS)

Apache httpd is vulnerable to denial of serviceDoS attacks. A remote user could send a specially crafted sequence of request headers to trigger a buffer overread error in apfindtoken and cause a segmentation fault which leads application to a crash...

7.5CVSS8.2AI score0.57472EPSS
SaveExploits1References57Affected Software2
Veracode
Veracode
added 2019/05/02 6:45 a.m.80 views

Denial Of Service (DoS)

Apache httpd is vulnerable to denial of serviceDoS attacks. This occurs in modmime when sending a specially crafted Content-Type response header which leads to buffer overread , resulting in a potentially exploitable crash...

9.8CVSS9AI score0.39341EPSS
SaveExploits3References60Affected Software6
Veracode
Veracode
added 2019/05/02 5:12 a.m.32 views

Denial Of Service (DoS)

krb5 is vulnerable to denial of service DoS. The vulnerability exists through a buffer overread issue when injected with invalid tokens into the GSSAPI application session...

5CVSS5.9AI score0.06523EPSS
SaveExploits0References20Affected Software1
OSV
OSV
added 2019/04/30 7:29 p.m.5 views

DEBIAN-CVE-2019-10131

An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program...

7.1CVSS7.5AI score0.01254EPSS
SaveExploits0References1
OSV
OSV
added 2019/04/30 12:0 a.m.9 views

UBUNTU-CVE-2019-10131

An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program...

7.1CVSS6.9AI score0.01254EPSS
SaveExploits0References4
OSV
OSV
added 2019/04/29 4:29 p.m.4 views

DEBIAN-CVE-2019-11598

In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c...

8.1CVSS9AI score0.04057EPSS
SaveExploits1References1
OSV
OSV
added 2019/04/29 4:29 p.m.1 views

DEBIAN-CVE-2019-11597

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file...

8.1CVSS9AI score0.03708EPSS
SaveExploits1References1
OSV
OSV
added 2019/04/29 4:29 p.m.4 views

ALPINE-CVE-2019-11597

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file...

8.1CVSS6.8AI score0.03708EPSS
SaveExploits1References1
OSV
OSV
added 2019/04/29 4:29 p.m.3 views

ALPINE-CVE-2019-11598

In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c...

8.1CVSS6.8AI score0.04057EPSS
SaveExploits1References1
OSV
OSV
added 2019/04/29 12:0 a.m.2 views

UBUNTU-CVE-2019-11598

In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c...

8.1CVSS7AI score0.04057EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2019/04/29 12:0 a.m.9 views

PT-2019-5355 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick versions 7.0.8-40 Q16 Description: The issue is related to a heap-based buffer over-read in the WritePNMImage function of coders/pnm.c, which can be exploited by an attacker to cause a denial of service or possibly disclose...

9.8CVSS6.7AI score0.49324EPSS
SaveExploits83References521
Positive Technologies
Positive Technologies
added 2019/04/29 12:0 a.m.6 views

PT-2019-5875 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-43 Q16 Description: The issue is related to a heap-based buffer over-read in the WriteTIFFImage function of coders/tiff.c. This allows an attacker to cause a denial of service or possibly information disclosure via a...

9.8CVSS7.2AI score0.49324EPSS
SaveExploits87References529
OSV
OSV
added 2019/04/29 12:0 a.m.2 views

UBUNTU-CVE-2019-11597

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file...

8.1CVSS7AI score0.03708EPSS
SaveExploits1References4
Snyk
Snyk
added 2019/04/28 8:5 a.m.5 views

Buffer Over-read

Overview mqtt-packet is an Encoder and Decoder for MQTT. Affected versions of this package are vulnerable to Buffer Over-read. An attacker could trigger an out of range read on a buffer which throws a RangeError. MQTT Brokers using this module could be forced to crash by sending a specifically...

7.5CVSS7AI score0.01586EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.16 views

The vulnerability of the xmlrpc_decode() function, a part of the XMLRPC interpreter for the PHP programming language, relates to the reading of data beyond the buffer memory boundary, allowing attackers to gain access to confidential data.

The vulnerability of the xmlrpcDecode function in the PHP programming language is related to an error that causes memory access beyond the allocated range. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

7.5CVSS6.9AI score0.0712EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.8 views

The vulnerability of the `check_group` function in the elflint.c library of the ELF file modification and analysis utility Elfutils, related to the occurrence of operations outside the buffer’s boundaries, allows a malicious actor to trigger a service failure.

The vulnerability of the checkgroup function in the elflint.c library of the ELF file modification and analysis utility Elfutils relates to the execution of a read operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to cause a service failure through...

5.5CVSS6.2AI score0.01753EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.16 views

The vulnerability of the rdesktop RDP client file, related to reading beyond the buffer boundary, allows a hacker to cause a service failure.

The vulnerability of the RDP client rdesktop mcs.c is related to reading data beyond the buffer boundary. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.5CVSS7.7AI score0.04304EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.15 views

The vulnerability of the PHP interpreter’s read function, related to reading beyond the boundaries of memory buffers, allows attackers to cause service failures, violate data confidentiality, and compromise the integrity of protected data.

The vulnerability of the PHP language interpreter’s read function is related to the rereading of buffers based on queues. Exploiting this vulnerability can allow attackers to cause service failures, violate the confidentiality and integrity of protected data by reading memory allocated to specifi...

9.8CVSS6.7AI score0.10059EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.15 views

The vulnerability of the ui_clip_handle_data function in the RDP client rdesktop software, related to reading data beyond the buffer boundary, allows attackers to access confidential data.

The vulnerability of the uicliphandledata function in the RDP client rdesktop is related to reading data beyond the buffer boundary. Exploiting this vulnerability could allow an attacker to gain access to confidential data remotely...

5.3CVSS7.6AI score0.03512EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.20 views

The vulnerability of the process_demand_active function in the RDP client rdesktop, related to reading beyond the buffer limit, allows a hacker to cause service failure.

The vulnerability of the processdemandactive function in the RDP client rdesktop is related to reading data beyond the buffer boundary. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS7.6AI score0.04342EPSS
SaveExploits1References5Affected Software2
Rows per page
Query Builder