Lucene search
+L

2361 matches found

Zero Day Initiative
Zero Day Initiative
•added 2019/04/04 12:00 a.m.•31 views

Microsoft Windows VBScript Array Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft VBScript. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

7.5CVSS3.4AI score0.3126EPSS
SaveExploits2References1
OSV
OSV
•added 2019/04/01 3:29 p.m.•6 views

ALPINE-CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS7AI score0.03401EPSS
SaveExploits1References1
OSV
OSV
•added 2019/04/01 3:29 p.m.•8 views

DEBIAN-CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS7.8AI score0.03401EPSS
SaveExploits1References1
NVD
NVD
•added 2019/04/01 3:29 p.m.•25 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS6.5AI score0.03401EPSS
SaveExploits1References8
OSV
OSV
•added 2019/04/01 3:29 p.m.•27 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS7.1AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2019/04/01 2:16 p.m.•41 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

5.9CVSS6.3AI score0.03401EPSS
SaveExploits1References8
Debian CVE
Debian CVE
•added 2019/04/01 2:16 p.m.•37 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS6.8AI score0.03401EPSS
SaveExploits1
CVE
CVE
•added 2019/04/01 2:16 p.m.•225 views

CVE-2019-3836

GNUTLS CVE-2019-3836: uninitialized/invalid pointer access in post-handshake message handling (TLS1.3 async messages) on versions prior to 3.6.7. Remote attacker can cause crash/Denial of Service; may enable arbitrary code execution per related advisories. Remediation: upgrade to GNUTLS 3.6.7 or ...

7.5CVSS6.2AI score0.03401EPSS
SaveExploits1References8Affected Software1
AlpineLinux
AlpineLinux
•added 2019/04/01 2:16 p.m.•61 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS6.5AI score0.03401EPSS
SaveExploits1
UbuntuCve
UbuntuCve
•added 2019/04/01 12:00 a.m.•41 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS6.8AI score0.03401EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2019/03/22 12:00 a.m.•7 views

PT-2019-6286 · Poppler +7 · Poppler +7

Name of the Vulnerable Software and Affected Versions: Poppler affected versions not specified Description: A flaw was found in the way certain PDF files were converted into HTML, allowing a remote attacker to exploit this flaw by providing a malicious PDF file that, when processed by the...

9.8CVSS6.2AI score0.03518EPSS
SaveExploits20References169
OSV
OSV
•added 2019/02/12 10:29 p.m.•12 views

CVE-2018-19018

An access of uninitialized pointer vulnerability in CX-Supervisor Versions 3.42 and prior could lead to type confusion when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

7.3CVSS5.9AI score0.0116EPSS
SaveExploits0References1
Prion
Prion
•added 2019/02/12 10:29 p.m.•18 views

Type confusion

An access of uninitialized pointer vulnerability in CX-Supervisor Versions 3.42 and prior could lead to type confusion when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

6CVSS7.3AI score0.0116EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/02/12 10:00 p.m.•29 views

CVE-2018-19018

An access of uninitialized pointer vulnerability in CX-Supervisor Versions 3.42 and prior could lead to type confusion when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

7.3AI score0.0116EPSS
SaveExploits0References1
CVE
CVE
•added 2019/02/12 10:00 p.m.•67 views

CVE-2018-19018

CVE-2018-19018 affects Omron CX-Supervisor (versions 3.42 and earlier). The vulnerability is an access of an uninitialized pointer that can cause a type confusion when processing project files , enabling an attacker to craft a project file to execute code with the application’s privileges. The is...

7.3CVSS7.2AI score0.0116EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2019/02/05 5:29 p.m.•16 views

DEBIAN-CVE-2018-11803

Subversion's moddavsvn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a recursive directory listing operation...

7.5CVSS6.4AI score0.58452EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2019/02/05 5:00 p.m.•70 views

CVE-2018-11803

Subversion's moddavsvn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a recursive directory listing operation...

7.5CVSS6.3AI score0.58452EPSS
SaveExploits0
Cvelist
Cvelist
•added 2019/02/05 5:00 p.m.•36 views

CVE-2018-11803

Subversion's moddavsvn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a recursive directory listing operation...

7.4AI score0.58452EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2019/02/05 5:00 p.m.•91 views

CVE-2018-11803

Subversion's moddavsvn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a recursive directory listing operation...

7.5CVSS7.5AI score0.58452EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2019/01/23 12:00 a.m.•19 views

The vulnerability of the JunOS operating system allows a hacker to execute arbitrary code and cause service interruptions.

The vulnerability of the JunOS operating system arises from an uninitialized function pointer in the Packet Forwarding Engine manager fxpc. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and trigger a service failure using a specially crafted HTTP packet...

10CVSS8.2AI score0.05263EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder