Lucene search
+L

6539 matches found

OSV
OSV
added 2020/07/27 11:15 p.m.5 views

DEBIAN-CVE-2020-12460

OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarcxmlparse that can result in a one-byte heap overflow in opendmarcxml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a '\0' byte...

9.8CVSS8.7AI score0.03684EPSS
SaveExploits1References1
OSV
OSV
added 2020/07/27 11:15 p.m.7 views

UBUNTU-CVE-2020-12460

OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarcxmlparse that can result in a one-byte heap overflow in opendmarcxml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a '\0' byte...

9.8CVSS7.4AI score0.03684EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2020/07/27 10:52 p.m.47 views

CVE-2020-12460

OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarcxmlparse that can result in a one-byte heap overflow in opendmarcxml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a '\0' byte...

9.7AI score0.03684EPSS
SaveExploits1References7
CNVD
CNVD
added 2020/07/20 12:00 a.m.4 views

Multiple Apple Products WebKit Component Use After Release Vulnerability (CNVD-2020-51500)

Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart televisions. webKit is a component of the one of the web browser engine...

9.8CVSS9.5AI score0.04491EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/20 12:00 a.m.6 views

Multiple Apple Products WebKit Component Use After Release Vulnerability

Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart televisions. webKit is a component of the one of the web browser engine...

8.8CVSS9.6AI score0.02949EPSS
SaveExploits0References1
Veracode
Veracode
added 2020/07/15 6:26 a.m.33 views

Denial Of Service (DoS)

freewvs is vulnerable to denial of service. An attacker is able to terminate the scan process by creating a large file that would potentially cause an application crash upon parsing...

3.3CVSS3.8AI score0.00337EPSS
SaveExploits0References2Affected Software1
Apple
Apple
added 2020/07/15 12:00 a.m.160 views

About the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra

About the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra This document describes the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. About Apple security updates F...

10CVSS9.7AI score0.08036EPSS
SaveExploits13References1Affected Software3
PyPA
PyPA
added 2020/07/14 8:15 p.m.13 views

PYSEC-2020-232

In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, which will terminate a scan process. This has been patched in 0.1.1...

3.3CVSS6.8AI score0.00337EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/07/14 8:15 p.m.34 views

PYSEC-2020-232

In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, which will terminate a scan process. This has been patched in 0.1.1...

3.3CVSS1.1AI score0.00337EPSS
SaveExploits0References2
CVE
CVE
added 2020/07/14 7:15 p.m.54 views

CVE-2020-15100

The CVE affects freewvs prior to 0.1.1 where a user can craft a large file that freewvs reads, causing the scan process to terminate. Root cause: uncontrolled reading of large input leading to process termination. Impact: denial of service on the scanning process (partial availability impact per ...

3.3CVSS3.5AI score0.00337EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:00 a.m.19 views

The vulnerability in the cross-platform library LibVNCServer’s component libvncclient/sockets.c allows a attacker to cause a service failure.

The vulnerability in the libvncclient/sockets.c component of the cross-platform library LibVNCServer relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failure due to incorrect termination of the TCP...

7.8CVSS7.6AI score0.02756EPSS
SaveExploits0References7Affected Software4
Tenable Nessus
Tenable Nessus
added 2020/07/01 12:00 a.m.60 views

EulerOS Virtualization 3.0.6.0 : samba (EulerOS-SA-2020-1746)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U MS-SFU Kerbero...

7.5CVSS6.7AI score0.03151EPSS
SaveExploits0References7
Apple
Apple
added 2020/06/25 7:44 a.m.92 views

About the security content of iOS 12.4 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.8CVSS0.1AI score0.13806EPSS
SaveExploits27Affected Software1
Apple
Apple
added 2020/06/22 4:31 a.m.67 views

About the security content of watchOS 6.1.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.3CVSS1.3AI score0.16111EPSS
SaveExploits2Affected Software1
NVD
NVD
added 2020/06/17 11:15 a.m.17 views

CVE-2020-11908

The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP...

4.3CVSS0.01899EPSS
SaveExploits1References9
OSV
OSV
added 2020/06/17 11:15 a.m.8 views

CVE-2020-11908

The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP...

4.3CVSS5.8AI score0.01899EPSS
SaveExploits1References9
Prion
Prion
added 2020/06/17 11:15 a.m.15 views

Design/Logic Flaw

The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP...

3.3CVSS6.5AI score0.01899EPSS
SaveExploits1References9Affected Software1
Cvelist
Cvelist
added 2020/06/17 10:49 a.m.32 views

CVE-2020-11908

The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP...

6.6AI score0.01899EPSS
SaveExploits1References9
CNVD
CNVD
added 2020/06/17 12:00 a.m.13 views

Unspecified vulnerability in KUKA controller KR C4

The KUKA controller KR C4 is a robot control system from the German company KUKA. A security vulnerability exists in KUKA controller KR C4. An attacker can exploit the vulnerability to stop the manipulator from running by terminating critical services from the Windows Task Manager...

6.1CVSS6.8AI score0.00312EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/06/17 12:00 a.m.36 views

openSUSE: Security Advisory for varnish (openSUSE-SU-2020:0808-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.02159EPSS
SaveExploits0References2
Rows per page
Query Builder