Lucene search
K

948 matches found

CNVD
CNVD
added 2023/08/03 12:0 a.m.20 views

Mozilla Firefox and Firefox ESR Competitive Conditions Issue Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox ESR is Firefox Enterprise Edition. Mozilla Firefox and Mozilla Firefox ESR suffer from a Competitive Condition Issue vulnerability that stems from a competitive condition in reference counting co...

5.9CVSS7.3AI score0.00229EPSS
Exploits0References1
CNVD
CNVD
added 2023/07/30 12:0 a.m.0 views

GNU gdb Reuse After Release Vulnerability

GNU gdb is a program debugging tool developed by the GNU open source organization that supports C, C++, Go, Fortran and many other programming languages. GNU gdb suffers from a post-release reuse vulnerability that originates from a confusion in the instruction responsible for freeing memory in t...

5.5CVSS6.8AI score0.0002EPSS
Exploits0References1
CNVD
CNVD
added 2023/07/07 12:0 a.m.6 views

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2023-59027)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox, which originates from a mix-up in the instructions responsible for freeing memory in LoadingSessionHistoryEntry. The vulnerability can be exploited b...

8.8CVSS7.1AI score0.00248EPSS
Exploits0References1
OSV
OSV
added 2023/07/06 1:15 p.m.1 views

CVE-2023-37239

Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to crash the program...

7.5CVSS5.8AI score0.00043EPSS
Exploits0References2
CVE
CVE
added 2023/07/06 12:27 p.m.44 views

CVE-2023-37239

The CVE-2023-37239 entry describes a format-string vulnerability in the distributed file system of Huawei/HarmonyOS. Multiple connected sources (Red Hat, NVD, PRION, CVE lists, CNNVD, and others) corroborate a vulnerability where exploitation (by bypassing SELinux) can crash the target program, i...

7.5CVSS7.5AI score0.00043EPSS
Exploits0References2Affected Software2
CNNVD
CNNVD
added 2023/07/05 12:0 a.m.3 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that originates from a formatted string vulnerability in the distributed file system. An attacker coul...

7.5CVSS7.4AI score0.00043EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2023/07/04 12:0 a.m.17 views

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-2274)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.5AI score0.00124EPSS
Exploits13References2
CNVD
CNVD
added 2023/06/21 12:0 a.m.7 views

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2023-59029)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox, which originates from a confusing instruction in libaudio that is responsible for freeing memory. An attacker can exploit this vulnerability to cause...

7.5CVSS7.1AI score0.00246EPSS
Exploits0References1
CNVD
CNVD
added 2023/06/21 12:0 a.m.12 views

Linux kernel cedrus.c resource management error vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 6.3.2, which originates from a garbled instruction to free memory in dm1105remove in cedrusremove in...

7CVSS7AI score0.00021EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/06/19 12:0 a.m.2 views

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox, which originates from a confusing instruction in libaudio that is responsible for freeing memory. An attacker can exploit this vulnerability to cause...

7.5CVSS7AI score0.00246EPSS
Exploits0References3
CNVD
CNVD
added 2023/06/14 12:0 a.m.33 views

Linux kernel resource management error vulnerability (CNVD-2023-51381)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux Kernel that originates from a confusion in the instructions responsible for freeing memory in driver/firewire in the...

6.7CVSS6.9AI score0.00014EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2023/06/12 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-2207)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS7.5AI score0.24988EPSS
Exploits4References2
CNVD
CNVD
added 2023/06/07 12:0 a.m.11 views

Linux kernel memory misreference vulnerability (CNVD-2023-51383)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a memory misreference vulnerability that originates from a mix-up in the instructions responsible for freeing memory in the preparetorelocate...

7.8CVSS7AI score0.00014EPSS
Exploits0References1
CNVD
CNVD
added 2023/05/23 12:0 a.m.22 views

Linux kernel resource management error vulnerability (CNVD-2023-48542)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in Linux kernel version 6.3, which arises from a confusion in the program's instructions responsible for freeing memory. An...

4.4CVSS6.9AI score0.00033EPSS
Exploits0References1
CNVD
CNVD
added 2023/05/19 12:0 a.m.17 views

LibTIFF Denial of Service Vulnerability (CNVD-2023-43231)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A denial of service vulnerability exists in LibTIFF, which stems from a NULL pointer dereference issue found in the LZWDecode function, and c...

5.5CVSS6.7AI score0.00013EPSS
Exploits1References1
NVD
NVD
added 2023/05/17 10:15 p.m.14 views

CVE-2023-2731

A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or...

5.5CVSS5.7AI score0.00013EPSS
Exploits1References5
OSV
OSV
added 2023/05/17 10:15 p.m.24 views

CVE-2023-2731

A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or...

5.5CVSS6.7AI score0.00013EPSS
Exploits1References5
Prion
Prion
added 2023/05/17 10:15 p.m.13 views

Null pointer dereference

A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or...

1.9CVSS5.2AI score0.00013EPSS
Exploits1References5Affected Software3
UbuntuCve
UbuntuCve
added 2023/05/17 12:0 a.m.25 views

CVE-2023-2731

A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or...

5.5CVSS6.8AI score0.00013EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2023/05/17 12:0 a.m.21 views

CVE-2023-2731

A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or...

5.5CVSS6.8AI score0.00013EPSS
Exploits1
Rows per page
Query Builder