Lucene search
+L

1040 matches found

CNVD
CNVD
•added 2023/03/28 12:00 a.m.•13 views

Linux Kernel Denial of Service Vulnerability (CNVD-2023-34469)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A denial of service vulnerability exists in Linux Kernel, which stems from the presence of a null pointer dereference in iofilebitmapget. An attacker could exploit this...

5.5CVSS6.3AI score0.00211EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/03/06 12:00 a.m.•46 views

Mozilla Thunderbird and Firefox Denial of Service Vulnerability

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A denial of service vulnerability exists in WebGL in Mozilla Thunderbird, Firefox, and...

8.8CVSS6.4AI score0.00742EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2023/02/17 12:00 a.m.•65 views

CVE-2020-19824

An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the aoc parameter...

7CVSS7.2AI score0.00242EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2023/02/15 4:48 a.m.•10 views

SUSE CVE-2017-7209

The dumpsectionasbytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash...

5.5CVSS6.8AI score0.01217EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2023/02/15 4:48 a.m.•10 views

SUSE CVE-2017-7223

GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow of size 1 while attempting to unget an EOF character from the input stream, potentially leading to a program crash...

7.5CVSS7.3AI score0.01956EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2023/02/15 4:48 a.m.•12 views

SUSE CVE-2017-7224

The findnearestline function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write of size 1 while disassembling a corrupt binary that contains an empty function name, leading to a program crash...

5.5CVSS6.9AI score0.01154EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2023/02/15 4:36 a.m.•10 views

SUSE CVE-2017-17850

An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older. A select set of SIP messages create a dialog in Asterisk. Those SIP messages must contain a contact header. For those messages, if the header was not present and the PJSIP channel...

7.5CVSS8.9AI score0.75351EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 3:44 a.m.•12 views

SUSE CVE-2021-26927

A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2decode in jp2dec.c may lead to program crash and denial of service...

4CVSS8.7AI score0.0109EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
•added 2023/02/15 3:26 a.m.•8 views

SUSE CVE-2022-30067

GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash...

5.5CVSS6.9AI score0.0076EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2023/02/07 12:00 a.m.•8 views

OpenSSL 安全漏洞

OpenSSL is an open source capable general-purpose cryptographic library from the OpenSSL team that implements the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. It supports a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, secure...

7.4CVSS7.6AI score0.59501EPSS
SaveExploits0References39
CNNVD
CNNVD
•added 2023/02/07 12:00 a.m.•7 views

OpenSSL 代码问题漏洞

OpenSSL is an open source capable general-purpose cryptographic library from the OpenSSL team that implements the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. It supports a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, secure...

7.5CVSS7.4AI score0.01846EPSS
SaveExploits0References14
CNNVD
CNNVD
•added 2023/02/07 12:00 a.m.•7 views

OpenSSL 代码问题漏洞

OpenSSL is an open source capable general-purpose cryptographic library from the OpenSSL team that implements the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. It supports a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, secure...

7.5CVSS7.4AI score0.01846EPSS
SaveExploits0References14
Redos
Redos
•added 2023/02/03 12:00 a.m.•44 views

ROS-20230203-02

Vim text editor vulnerability is related to division by zero error in 'smoothscroll' function at small window size. window size. Exploitation of the vulnerability could allow an attacker acting remotely to cause the program to crash. program crash...

7.8CVSS7.5AI score0.0049EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2023/01/12 12:00 a.m.•32 views

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-1163)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6AI score0.0033EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/12/27 9:13 p.m.•7 views

CVE-2013-10005 Infinite loop in github.com/btcsuite/go-socks

The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow...

7.5AI score0.00803EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/12/13 12:00 a.m.•6 views

Mozilla Thunderbird 缓冲区错误漏洞

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A denial of service vulnerability exists in WebGL in Mozilla Thunderbird, Firefox, and...

8.8CVSS8.6AI score0.00742EPSS
SaveExploits0References13
Vulnrichment
Vulnrichment
•added 2022/12/08 9:19 p.m.•4 views

CVE-2022-23496 A crafted list can trigger a ArrayIndexOutOfBoundsException in Yauaa

Yet Another UserAgent Analyzer Yauaa is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an...

7.5CVSS7.5AI score0.00801EPSS
SaveExploits0References2
Mend
Mend
•added 2022/12/08 9:19 p.m.•2 views

CVE-2022-23496

Yet Another UserAgent Analyzer Yauaa is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an...

8.7CVSS0.00801EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/08 12:00 a.m.•3 views

CVE-2022-23496: Improper Handling of Exceptional Conditions

Yet Another UserAgent Analyzer Yauaa is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an...

7.5CVSS5.8AI score0.00801EPSS
SaveExploits0References2
OSV
OSV
•added 2022/12/01 12:00 a.m.•23 views

ASB-A-253344080

Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code...

5.5CVSS6.1AI score0.0012EPSS
SaveExploits0References1
Rows per page
Query Builder