Lucene search
+L

4289 matches found

OSV
OSV
added 2023/04/04 11:15 p.m.5 views

UBUNTU-CVE-2023-29323

asciiloadsockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit f748277, can abort upon a connection from a local, scoped IPv6 address...

7.8CVSS5.8AI score0.00279EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/04/04 12:0 a.m.6 views

PT-2023-22230 · Unknown +2 · Opensmtpd Portable +2

Name of the Vulnerable Software and Affected Versions: OpenBSD versions prior to 7.1 errata 024 OpenBSD versions prior to 7.2 errata 020 OpenSMTPD Portable versions prior to 7.0.0-portable commit f748277 Description: The issue can cause ascii load sockaddr in smtpd to abort upon a connection from...

7.8CVSS7.8AI score0.00279EPSS
SaveExploits0References22
OSV
OSV
added 2023/04/04 12:0 a.m.20 views

CVE-2023-29323

asciiloadsockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit f748277, can abort upon a connection from a local, scoped IPv6 address...

7.8CVSS7.8AI score0.00279EPSS
SaveExploits0References12
Debian CVE
Debian CVE
added 2023/04/04 12:0 a.m.58 views

CVE-2023-29323

asciiloadsockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit f748277, can abort upon a connection from a local, scoped IPv6 address...

7.8CVSS7.5AI score0.00279EPSS
SaveExploits0
OSV
OSV
added 2023/03/29 7:15 p.m.12 views

CVE-2022-43615

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

5.5CVSS4.9AI score0.00828EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/29 1:48 a.m.82 views

Security Bulletin: Vulnerabilities in Network Security Services (NSS) and Netscape Portable Runtime (NSPR) affect IBM SAN Volume Controller and Storwize Family (CVE-2013-1740, CVE-2014-1490, CVE-2014-1491, CVE-2014-1492, CVE-2014-1544, CVE-2014-1545)

Summary Security Bulletin: Vulnerabilities in Network Security Services NSS and Netscape Portable Runtime NSPR affect IBM SAN Volume Controller and Storwize Family CVE-2013-1740, CVE-2014-1490, CVE-2014-1491, CVE-2014-1492, CVE-2014-1544, CVE-2014-1545 Vulnerability Details Security Bulletin ---...

10CVSS8.9AI score0.06329EPSS
SaveExploits5
CNNVD
CNNVD
added 2023/03/29 12:0 a.m.9 views

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor, which is caused by a buffer overflow problem in the parsing of PDF files...

7.8CVSS7.6AI score0.0077EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/28 9:15 p.m.6 views

CVE-2023-24304

Improper input validation in the PDF.dll plugin of IrfanView v4.60 allows attackers to execute arbitrary code via opening a crafted PDF file...

7.8CVSS7.4AI score0.00372EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/28 9:15 p.m.5 views

CVE-2023-24308

A potential memory vulnerability due to insufficient input validation in PDFXEditCore.x64.dll in PDF-XChange Editor version 9.3 by Tracker Software may allow attackers to execute code when a user opens a crafted PDF file. The issue occurs when handling a large number of objects in a PDF file...

7.8CVSS7.2AI score0.0023EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/03/28 12:0 a.m.6 views

IrfanView 输入验证错误漏洞

IrfanView is an image viewer by the individual developer Irfan Skiljan in Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A security vulnerability exists in IrfanView version v4.60, which stems from incorrect input validation. The...

7.8CVSS7.9AI score0.00372EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/03/28 12:0 a.m.12 views

PT-2023-19520 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView version 4.60 Description: The issue is related to improper input validation in the PDF.dll plugin, which allows attackers to execute arbitrary code when a crafted PDF file is opened. Recommendations: For IrfanView version 4.60,...

7.8CVSS8.2AI score0.00372EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/03/27 12:0 a.m.5 views

PT-2023-4206 · Apple · Webkit +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 iOS versions prior to 16.4 iPadOS versions prior to 16.4 Description: The issue is related to a type confusion problem in the WebKit PDF module, which can be exploited by a remote attacker to execute arbitrary cod...

9CVSS7.8AI score0.00589EPSS
SaveExploits0References13
BDU FSTEC
BDU FSTEC
added 2023/03/23 12:0 a.m.13 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS7.6AI score0.03925EPSS
SaveExploits0References3Affected Software2
Kitploit
Kitploit
added 2023/03/22 11:30 a.m.51 views

PortexAnalyzerGUI - Graphical Interface For PortEx, A Portable Executable And Malware Analysis Library

Graphical interface for PortEx, a Portable Executable and Malware Analysis Library Download Releases page Features Header information from: MSDOS Header, Rich Header, COFF File Header, Optional Header, Section Table PE Structures: Import Section, Resource Section, Export Section, Debug Section...

7AI score
SaveExploits0References4
Amazon
Amazon
added 2023/03/22 12:0 a.m.6 views

Medium: apr-util

Issue Overview: 2023-05-23: The severity level was changed from Critical to Medium. Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime...

6.5CVSS6.4AI score0.01417EPSS
SaveExploits0
Amazon
Amazon
added 2023/03/22 12:0 a.m.11 views

Critical: apr

Issue Overview: An out-of-bounds array read in the aprtimeexp functions was fixed in the Apache Portable Runtime 1.6.3 release CVE-2017-12613. The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 and is vulnerable to the same...

9.8CVSS6.9AI score0.01749EPSS
SaveExploits0
CNNVD
CNNVD
added 2023/03/21 12:0 a.m.7 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google USA. A security vulnerability exists in versions prior to Google Chrome 111.0.5563.110, which stems from the presence of post-release reuse in Chrome pdf, allowing remote attackers to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.0082EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2023/03/21 12:0 a.m.37 views

Amazon Linux 2023 : apr-util, apr-util-devel, apr-util-ldap (ALAS2023-2023-066)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-066 advisory. Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable...

6.5CVSS6.3AI score0.01417EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/03/21 12:0 a.m.55 views

Amazon Linux 2023 : apr, apr-devel (ALAS2023-2023-016)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-016 advisory. An out-of-bounds array read in the aprtimeexp functions was fixed in the Apache Portable Runtime 1.6.3 release CVE-2017-12613. The fix for this issue was not carried forward to the APR 1.7.x...

9.8CVSS6.5AI score0.01749EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/03/20 12:0 a.m.5 views

PDFio 安全漏洞

PDFio is a simple C library for reading and writing PDF files. A security vulnerability exists in PDFio 1.1.0 and earlier versions, which stems from the presence of a denial of service vulnerability. An attacker could exploit this vulnerability to create PDF files to trigger a denial of service...

6.2CVSS5.3AI score0.00221EPSS
SaveExploits0References3
Rows per page
Query Builder