Lucene search
+L

1566 matches found

securityvulns
securityvulns
added 2015/06/02 12:0 a.m.22 views

Apple iOS memory corruption

A combination of UTF-8 characters leads to memory corruption...

3.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/05/20 12:0 a.m.27 views

Fedora 21 : dovecot-2.2.16-2.fc21 (2015-7089)

fixes CVE-2015-3420: SSL/TLS handshake failures leading to a crash of the login process - dovecot updated to 2.2.16 - auth: Don't crash if master user login is attempted without any configured master=yes passdbs - Parsing UTF-8 text for mails could have caused broken results sometimes if bufferin...

5.9CVSS5.8AI score0.02842EPSS
SaveExploits0References3
NVD
NVD
added 2015/05/08 2:59 p.m.25 views

CVE-2015-3013

ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files via a file path with UTF-8 encoding, as demonstrated by uploading a .htaccess file...

6CVSS6.2AI score0.01339EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2015/05/08 2:59 p.m.24 views

CVE-2015-3013

ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files via a file path with UTF-8 encoding, as demonstrated by uploading a .htaccess file...

6CVSS5.9AI score0.01339EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2015/05/08 2:0 p.m.35 views

CVE-2015-3013

ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files via a file path with UTF-8 encoding, as demonstrated by uploading a .htaccess file...

6.2AI score0.01339EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2015/05/04 12:0 a.m.27 views

Fedora 22 : dovecot-2.2.16-2.fc22 (2015-7156)

fixes CVE-2015-3420: SSL/TLS handshake failures leading to a crash of the login process - dovecot updated to 2.2.16 - auth: Don't crash if master user login is attempted without any configured master=yes passdbs - Parsing UTF-8 text for mails could have caused broken results sometimes if bufferin...

5.9CVSS5.8AI score0.02842EPSS
SaveExploits0References3
securityvulns
securityvulns
added 2015/04/17 12:0 a.m.54 views

[ MDVSA-2015:199 ] less

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:199 http://www.mandriva.com/en/support/security/ Package : less Date : April 10, 2015 Affected: Business Server 1.0, Business Server 2.0 Problem Description: Updated less package fixes security vulnerability...

10CVSS6AI score0.04017EPSS
SaveExploits0
NVD
NVD
added 2015/04/14 6:59 p.m.12 views

CVE-2014-9488

The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read...

10CVSS6.7AI score0.04017EPSS
SaveExploits0References5
OSV
OSV
added 2015/04/14 6:59 p.m.3 views

CVE-2014-9488

The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read...

6.7AI score
SaveExploits0References5
OSV
OSV
added 2015/04/14 6:59 p.m.5 views

DEBIAN-CVE-2014-9488

The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read...

10CVSS7.4AI score0.04017EPSS
SaveExploits0References1
Prion
Prion
added 2015/04/14 6:59 p.m.19 views

Out-of-bounds

The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read...

10CVSS7.3AI score0.04017EPSS
SaveExploits0References5Affected Software2
UbuntuCve
UbuntuCve
added 2015/04/14 6:59 p.m.40 views

CVE-2014-9488

The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read...

10CVSS5.9AI score0.04017EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2015/04/14 6:0 p.m.18 views

CVE-2014-9488

The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read...

6.6AI score0.04017EPSS
SaveExploits0References5
CVE
CVE
added 2015/04/14 6:0 p.m.101 views

CVE-2014-9488

CVE-2014-9488 affects the is_utf8_well_formed() function in GNU less up to version 475, enabling an out-of-bounds read via malformed UTF-8 data. Connected advisories report this as a fixed issue in various distributions (e.g., SUSE/SUSE-SU-2020:2687-1; Mageia MGASA-2015-0139; openSUSE updates; Eu...

10CVSS6.7AI score0.04017EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
added 2015/04/14 6:0 p.m.29 views

CVE-2014-9488

The isutf8wellformed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read...

10CVSS6.7AI score0.04017EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/04/10 12:0 a.m.30 views

Mandriva Linux Security Advisory : less (MDVSA-2015:199)

Updated less package fixes security vulnerability : Malformed UTF-8 data could have caused an out of bounds read in the UTF-8 decoding routines, causing an invalid read access CVE-2014-9488. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

10CVSS5.3AI score0.04017EPSS
SaveExploits0References2
OSV
OSV
added 2015/04/09 10:44 p.m.5 views

MGASA-2015-0139 Updated less packages fix CVE-2014-9488

Updated less package fixes security vulnerability: Malformed UTF-8 data could have caused an out of bounds read in the UTF-8 decoding routines, causing an invalid read access CVE-2014-9488...

10CVSS6.2AI score0.04017EPSS
SaveExploits0References3
Mageia
Mageia
added 2015/04/09 10:44 p.m.35 views

Updated less packages fix CVE-2014-9488

Updated less package fixes security vulnerability: Malformed UTF-8 data could have caused an out of bounds read in the UTF-8 decoding routines, causing an invalid read access CVE-2014-9488...

10CVSS6.2AI score0.04017EPSS
SaveExploits0References2
NVD
NVD
added 2015/03/30 2:59 p.m.28 views

CVE-2015-1609

MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service via a crafted UTF-8 string in a BSON request...

5CVSS6.3AI score0.0278EPSS
SaveExploits0References6
Prion
Prion
added 2015/03/30 2:59 p.m.15 views

Cross site request forgery (csrf)

MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service via a crafted UTF-8 string in a BSON request...

5CVSS6.9AI score0.0278EPSS
SaveExploits0References6Affected Software2
Rows per page
Query Builder