Lucene search
+L

5652 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/20 12:00 a.m.•6 views

CVE-2024-1556: Improper Check for Unusual or Exceptional Conditions

The incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only affects the application when the profiler is running. This vulnerability affects Firefox 123...

6.5CVSS5.8AI score0.00474EPSS
SaveExploits0References2
Amazon
Amazon
•added 2024/02/19 12:00 a.m.•12 views

Medium: expat

Issue Overview: libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time. CVE-2023-52426 Affected Packages: expat Issue Correction: Run dnf update expat --releasever 2023.3.20240219 or dnf update --advisory ALAS2023-2024-524 --releasever 2023.3.20240219 ...

5.5CVSS9.3AI score0.00391EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/02/07 12:00 a.m.•5 views

PT-2024-9914

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a buffer overflow error in the dcn301 stream encoder create function, which is part of the Direct Rendering Manager DRM subsystem in the Linux kernel. The error...

7CVSS6.2AI score0.00266EPSS
SaveExploits0
OSV
OSV
•added 2024/02/04 8:15 p.m.•13 views

AZL-34208 CVE-2023-52426 affecting package expat for versions less than 2.6.2-2

libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...

5.5CVSS6.8AI score0.00391EPSS
SaveExploits0References1
osv-debian
osv-debian
•added 2024/02/04 8:15 p.m.•5 views

DEBIAN-CVE-2023-52426

libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...

5.5CVSS6.3AI score0.00391EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/02/04 12:00 a.m.•6 views

libexpat Security Vulnerabilities

libexpat is a streaming XML parser written in C. It has a vulnerability that can lead to recursive XML entity extensions if the XMLDTD is not defined at compile time. A security vulnerability exists in libexpat version 2.5.0 and earlier versions, which stems from a vulnerability that could result...

5.5CVSS6.8AI score0.00391EPSS
SaveExploits0References6
CNVD
CNVD
•added 2024/02/04 12:00 a.m.•25 views

glibc buffer overflow vulnerability (CNVD-2024-10464)

glibc GNU C Library is the C standard library implemented by the GNU Project. A security vulnerability exists in glibc 2.37 and earlier versions, which stems from the presence of an integer overflow that can be exploited by an attacker to cause the size of the buffer in which a message is stored ...

5.3CVSS6.8AI score0.02689EPSS
SaveExploits2References1
osv-ghsa
osv-ghsa
•added 2024/02/02 8:59 p.m.•23 views

GHSA-Q669-2VFG-CXCG Nervos CKB Unaligned Pointer Dereference

via [email protected] There are multiple type conversions in ckb that unsafely cast between byte pointers and other types of pointers. This results in unaligned pointers, which are not allowed by the Rust language, and are considered undefined behavior, meaning that the compiler is free to do...

7.5AI score
SaveExploits0References2
Mend
Mend
•added 2024/02/01 4:10 p.m.•9 views

CVE-2024-24754

Bref enable serverless PHP on AWS Lambda. When Bref is used with the Event-Driven Function runtime and the handler is a "RequestHandlerInterface", then the Lambda event is converted to a PSR7 object. During the conversion process, if the request is a MultiPart, each part is parsed and its content...

9.8CVSS0.00618EPSS
SaveExploits1References6
OSV
OSV
•added 2024/01/31 2:15 p.m.•18 views

AZL-34737 CVE-2023-6780 affecting package glibc for versions less than 2.38-6

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

5.3CVSS7.1AI score0.02689EPSS
SaveExploits2References1
NVD
NVD
•added 2024/01/31 2:15 p.m.•25 views

CVE-2023-6780

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

5.3CVSS6.8AI score0.02689EPSS
SaveExploits2References11
OSV
OSV
•added 2024/01/31 2:15 p.m.•11 views

DEBIAN-CVE-2023-6780

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

5.3CVSS6.8AI score0.02689EPSS
SaveExploits2References1
OSV
OSV
•added 2024/01/31 2:08 p.m.•51 views

CVE-2023-6780 Glibc: integer overflow in __vsyslog_internal()

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

5.3CVSS7.1AI score
SaveExploits0References15
Mend
Mend
•added 2024/01/31 2:08 p.m.•2 views

CVE-2023-6780

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

6.9CVSS0.02689EPSS
SaveExploits2References16
Vulnrichment
Vulnrichment
•added 2024/01/31 2:08 p.m.•10 views

CVE-2023-6780 Glibc: integer overflow in __vsyslog_internal()

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

5.3CVSS6.8AI score0.02689EPSS
SaveExploits2References9
Debian CVE
Debian CVE
•added 2024/01/31 2:08 p.m.•137 views

CVE-2023-6780

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

5.3CVSS5.8AI score0.02689EPSS
SaveExploits2
Cvelist
Cvelist
•added 2024/01/31 2:08 p.m.•81 views

CVE-2023-6780 Glibc: integer overflow in __vsyslog_internal()

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

5.3CVSS7AI score0.02689EPSS
SaveExploits2References9
RedhatCVE
RedhatCVE
•added 2024/01/31 2:07 p.m.•67 views

CVE-2023-6780

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

5.3CVSS7.6AI score0.04794EPSS
SaveExploits8References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/31 12:00 a.m.•3 views

CVE-2023-6780: Incorrect Calculation of Buffer Size

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

5.3CVSS6AI score0.02689EPSS
SaveExploits2References3
UbuntuCve
UbuntuCve
•added 2024/01/31 12:00 a.m.•53 views

CVE-2023-6780

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

5.3CVSS6.8AI score0.02689EPSS
SaveExploits2References3
Rows per page
Query Builder