Lucene search
+L

1568 matches found

CVE
CVE
added 2020/01/24 4:59 p.m.93 views

CVE-2015-4041

CVE-2015-4041 affects GNU Coreutils (sort, sort.c, keycompare_mb) on 64-bit platforms. The vulnerability arises from a size calculation in keycompare_mb that does not account for the number of bytes occupied by multibyte UTF-8 characters, enabling a heap-based overflow under long UTF-8 strings an...

7.8CVSS9AI score0.00522EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2020/01/24 4:59 p.m.74 views

CVE-2015-4041

The keycomparemb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a size calculation without considering the number of bytes occupied by multibyte characters, which allows attackers to cause a denial of service heap-based buffer overflow and application crash ...

7.8CVSS8.3AI score0.00522EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.28 views

Huawei EulerOS: Security Advisory for icu (EulerOS-SA-2019-1969)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.9AI score0.07514EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.41 views

Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2018-1415)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.20599EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.28 views

Huawei EulerOS: Security Advisory for less (EulerOS-SA-2019-2475)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.5AI score0.04017EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.35 views

Huawei EulerOS: Security Advisory for dovecot (EulerOS-SA-2019-1644)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.9AI score0.028EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.42 views

Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2018-1385)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.20599EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for less (EulerOS-SA-2019-2164)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.5AI score0.04017EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.29 views

Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2019-1864)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02553EPSS
SaveExploits0References2
Mageia
Mageia
added 2020/01/11 11:52 p.m.24 views

Updated libtomcrypt packages fix security vulnerability

Updated libtomcrypt packages fix security vulnerability: Improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data CVE-2019-17362...

9.1CVSS2.6AI score0.03108EPSS
SaveExploits1References2
OSV
OSV
added 2020/01/11 11:52 p.m.12 views

MGASA-2020-0028 Updated libtomcrypt packages fix security vulnerability

Updated libtomcrypt packages fix security vulnerability: Improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data CVE-2019-17362...

9.1CVSS8.8AI score0.03108EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2019/12/18 12:0 a.m.37 views

EulerOS 2.0 SP3 : less (EulerOS-SA-2019-2602)

According to the version of the less package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers...

10CVSS5.7AI score0.04017EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/12/10 12:0 a.m.41 views

EulerOS 2.0 SP2 : libidn (EulerOS-SA-2019-2392)

According to the versions of the libidn package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an...

7.5CVSS7.4AI score0.06721EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2019/12/04 12:0 a.m.31 views

EulerOS 2.0 SP2 : less (EulerOS-SA-2019-2475)

According to the version of the less package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers...

10CVSS5.7AI score0.04017EPSS
SaveExploits0References2
NVD
NVD
added 2019/11/29 9:15 p.m.18 views

CVE-2015-2060

cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash...

5.3CVSS5.2AI score0.02308EPSS
SaveExploits1References7
OSV
OSV
added 2019/11/29 9:15 p.m.10 views

CVE-2015-2060

cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash...

5.3CVSS5.3AI score
SaveExploits0References17
Prion
Prion
added 2019/11/29 9:15 p.m.16 views

Directory traversal

cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash...

5CVSS7AI score0.02308EPSS
SaveExploits1References7Affected Software1
UbuntuCve
UbuntuCve
added 2019/11/29 9:15 p.m.20 views

CVE-2015-2060

cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash...

5.3CVSS6.1AI score0.02308EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2019/11/29 8:55 p.m.32 views

CVE-2015-2060

cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash...

5.1AI score0.02308EPSS
SaveExploits1References7
Debian CVE
Debian CVE
added 2019/11/29 8:55 p.m.47 views

CVE-2015-2060

cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash...

5.3CVSS5.2AI score0.02308EPSS
SaveExploits1
Rows per page
Query Builder