Lucene search
+L

20336 matches found

CNVD
CNVD
added 2023/11/13 12:00 a.m.19 views

Apache Arrow Deserialization Vulnerability

Apache Arrow is a cross-language development platform for in-memory data processing from the U.S. Apache Apache Foundation. The platform supports programming languages such as C, C++, C, Go and Java, and provides features such as inter-process communication. A deserialization vulnerability exists...

9.8CVSS7AI score0.14414EPSS
SaveExploits0References1
Fedora
Fedora
added 2023/11/12 1:43 a.m.38 views

[SECURITY] Fedora 38 Update: python-pillow-9.5.0-1.fc38

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

7.5CVSS7.8AI score0.01131EPSS
SaveExploits0
Mageia
Mageia
added 2023/11/12 12:44 a.m.71 views

Updated quictls packages fix a security vulnerability

The updated packages fix a security vulnerability: Incorrect cipher key & IV length processing. CVE-2023-5363...

7.5CVSS6.8AI score0.03332EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/12 12:44 a.m.29 views

MGASA-2023-0317 Updated quictls packages fix a security vulnerability

The updated packages fix a security vulnerability: Incorrect cipher key & IV length processing. CVE-2023-5363...

7.5CVSS7.5AI score0.03332EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/11/12 12:00 a.m.17 views

Fedora: Security Advisory for python-pillow (FEDORA-2023-1a120657f9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01131EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.12 views

The vulnerability of the PDF processing library PyPDF2, related to algorithmic complexity, allows attackers to trigger a service denial.

The vulnerability of the PyPDF2 library for processing PDF files is related to algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS6.5AI score0.00625EPSS
SaveExploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.10 views

The vulnerability of the H5O_dtypeDecodeHelper() function in the H5Odtype.c component of the HDF5 processing library allows a attacker to cause a service failure.

The vulnerability of the H5OdtypeDecodeHelper in the H5Odtype.c component of the HDF file processing library HDF5 is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause service interruptions by using a...

7.8CVSS7AI score0.01332EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.19 views

The vulnerability of Python libraries for working with PDF files, such as PyPDF and PyPDF2, relates to the execution of loops with an unreachable exit condition. This allows attackers to cause service failures.

The vulnerability of Python libraries for working with PDF files, such as PyPDF and PyPDF2, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.00352EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.15 views

The vulnerability of the PyPDF2 library for processing PDF files, related to the execution of a loop with an unreachable exit condition, allows a hacker to cause a service failure.

The vulnerability of the PyPDF2 library for processing PDF files relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS6.7AI score0.00573EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/11/10 12:00 a.m.11 views

The vulnerability of the microprogrammed software of IP cameras Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 arises from buffer overflows in the stack. This allows intruders to execute arbitrary code.

The vulnerability of the microprogrammed software for IP cameras Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 arises due to buffer overflows in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code upon...

10CVSS8.5AI score0.40396EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/11/10 12:00 a.m.14 views

The vulnerability of the microprogrammed software of IP cameras Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 arises from buffer overflows in the stack. This allows intruders to execute arbitrary code.

The vulnerability of the microprogrammed software of IP cameras Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 arises due to buffer overflows in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code during the...

10CVSS8.5AI score0.0126EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/11/10 12:00 a.m.12 views

The vulnerability of the compiler for processing Markdown Marked, related to incorrect handling of regular expressions, allows a hacker to trigger a service failure.

The vulnerability of the compiler for processing Markdown marked text is related to incorrect handling of regular expressions. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.01758EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/10 12:00 a.m.14 views

The vulnerability of the microprogrammed software of IP cameras Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 arises from buffer overflows in the stack. This allows intruders to execute arbitrary code.

The vulnerability of the microprogrammed software of IP cameras Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 arises due to buffer overflows in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code during the...

10CVSS8.5AI score0.0126EPSS
SaveExploits0References4
OSV
OSV
added 2023/11/09 12:55 p.m.31 views

MGASA-2023-0313 Updated openssl packages fix a security vulnerability

The updated packages fix a security vulnerability: Incorrect cipher key & IV length processing. CVE-2023-5363...

7.5CVSS7.5AI score0.03332EPSS
SaveExploits0References2
Redos
Redos
added 2023/11/09 12:00 a.m.48 views

ROS-20231109-01

Go programming language vulnerability is related to insecure external control of critical state data state when processing the setuid and setgid attributes. Exploitation of the vulnerability could allow an attacker, acting remotely, escalate their privileges and gain access to read, modify, or...

9.8CVSS8.3AI score0.03332EPSS
SaveExploits0
OSV
OSV
added 2023/11/08 11:15 p.m.11 views

CVE-2023-3959

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While processing XML elements from incoming network requests, the product does not sufficiently...

9.8CVSS6.3AI score0.40396EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/07 4:15 p.m.8 views

CVE-2023-4272

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory...

5.5CVSS5.8AI score0.0034EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/07 4:15 p.m.25 views

CVE-2023-4272

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory...

5.5CVSS0.0034EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/07 4:15 p.m.28 views

CVE-2023-22719

Improper Neutralization of Formula Elements in a CSV File vulnerability in GiveWP.This issue affects GiveWP: from n/a through 2.25.1...

9.8CVSS0.00629EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/07 4:15 p.m.29 views

Design/Logic Flaw

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory...

1.7CVSS6.8AI score0.0034EPSS
SaveExploits0References1Affected Software4
Rows per page
Query Builder