Lucene search
+L

2209 matches found

OSV
OSV
added 2023/10/17 10:15 p.m.11 views

UBUNTU-CVE-2023-22070

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

4.9CVSS6.6AI score0.00871EPSS
SaveExploits0References4
OSV
OSV
added 2023/10/16 9:15 p.m.1 views

DEBIAN-CVE-2023-42459

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free could...

7.5CVSS7.1AI score0.00826EPSS
SaveExploits1References1
Prion
Prion
added 2023/10/16 9:15 p.m.22 views

Double free

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free could...

5CVSS7.5AI score0.00826EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2023/10/16 9:15 p.m.3 views

UBUNTU-CVE-2023-42459

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free could...

8.6CVSS5.7AI score0.00826EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2023/10/16 8:56 p.m.30 views

CVE-2023-42459 Malformed DATA submessage leads to bad-free error in Fast-DDS

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free could...

8.6CVSS8.7AI score0.00826EPSS
SaveExploits1References4
CVE
CVE
added 2023/10/16 8:56 p.m.81 views

CVE-2023-42459

CVE-2023-42459 affects Fast DDS (C++ implementation of DDS). A flaw in handling specific DATA submessages to a discovery locator can trigger a free() error, remotely crashing a Fast-DDS process and potentially leaving a freed pointer under attacker control, enabling a double-free scenario. Remedi...

8.6CVSS7.9AI score0.00826EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
added 2023/10/16 8:56 p.m.65 views

CVE-2023-42459

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free could...

8.6CVSS7.7AI score0.00826EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2023/10/16 12:0 a.m.3 views

PT-2023-7345 · Fastdds · Fastdds

Name of the Vulnerable Software and Affected Versions: Fast DDS versions prior to 2.12.0 Fast DDS versions prior to 2.11.3 Fast DDS versions prior to 2.10.3 Fast DDS versions prior to 2.6.7 Description: Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Obje...

9CVSS7.5AI score0.00826EPSS
SaveExploits1References22
OSV
OSV
added 2023/10/05 7:15 p.m.10 views

UBUNTU-CVE-2023-40745

LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service application crash or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...

6.5CVSS7.6AI score0.01121EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/20 2:7 p.m.5 views

USN-6390-1 bind9 vulnerabilities

It was discovered that Bind incorrectly handled certain control channel messages. A remote attacker with access to the control channel could possibly use this issue to cause Bind to crash, resulting in a denial of service. CVE-2023-3341 Robert Story discovered that Bind incorrectly handled certai...

7.5CVSS5.8AI score0.02647EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2023/09/18 7:15 a.m.8 views

CVE-2023-42523

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security fo...

7.5CVSS7.1AI score0.00515EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/09/18 7:15 a.m.4 views

CVE-2023-42521

Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client...

7.5CVSS7.1AI score0.00515EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/18 7:15 a.m.9 views

CVE-2023-42523

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security fo...

7.5CVSS5.6AI score0.00515EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/18 7:15 a.m.28 views

CVE-2023-42522

Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecu...

7.5CVSS7.5AI score0.00515EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/18 7:15 a.m.9 views

CVE-2023-42522

Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecu...

7.5CVSS7.4AI score0.00515EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/18 7:15 a.m.16 views

CVE-2023-42523

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security fo...

7.5CVSS7.5AI score0.00515EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/18 7:15 a.m.19 views

CVE-2023-42521

Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client...

7.5CVSS7.5AI score0.00515EPSS
SaveExploits0References1
Prion
Prion
added 2023/09/18 7:15 a.m.18 views

Code injection

Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client...

5CVSS7.5AI score0.00515EPSS
SaveExploits0References1Affected Software7
Prion
Prion
added 2023/09/18 7:15 a.m.17 views

Code injection

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security fo...

5CVSS7.5AI score0.00515EPSS
SaveExploits0References1Affected Software7
Prion
Prion
added 2023/09/18 7:15 a.m.18 views

Code injection

Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecu...

5CVSS7.5AI score0.00515EPSS
SaveExploits0References1Affected Software7
Rows per page
Query Builder