Lucene search
+L

6008 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/02 12:00 a.m.•11 views

CVE-2020-17482: Use of Uninitialized Resource

An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory...

4.3CVSS7AI score0.02592EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/10/02 12:00 a.m.•4 views

PT-2020-19950

Name of the Vulnerable Software and Affected Versions Bitdefender Engines versions prior to 7.84897 Description A vulnerability has been discovered in the ceva emu.cvd module due to a lack of proper validation of user-supplied data. This can result in a pointer being fetched from uninitialized...

7.5CVSS0.00919EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2020/10/01 3:00 p.m.•11 views

CVE-2020-8110

A vulnerability has been discovered in the cevaemu.cvd module that results from a lack of proper validation of user-supplied data, which can result in a pointer that is fetched from uninitialized memory. This can lead to denial-of-service. This issue affects: Bitdefender Engines version 7.84897 a...

7.5CVSS7.2AI score0.00919EPSS
SaveExploits0References2
Veracode
Veracode
•added 2020/10/01 3:51 a.m.•33 views

Denial Of Service (DoS)

libexif is vulnerable to denial of service DoS. The vulnerability exists through the use of uninitialized memory in EXIF Makernote handling,...

8.2CVSS2.7AI score0.01934EPSS
SaveExploits0References8Affected Software1
osv_debian
osv_debian
•added 2020/09/30 6:15 p.m.•11 views

DEBIAN-CVE-2020-26148

mdpushblockbytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service e.g., assertion failure via a malformed Markdown document...

7.5CVSS7.3AI score0.01423EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2020/09/30 6:15 p.m.•25 views

CVE-2020-26148

mdpushblockbytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service e.g., assertion failure via a malformed Markdown document...

7.5CVSS6.7AI score
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2020/09/30 6:15 p.m.•52 views

UBUNTU-CVE-2020-26148

mdpushblockbytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service e.g., assertion failure via a malformed Markdown document...

7.5CVSS5.8AI score0.01423EPSS
SaveExploits1References4
CNVD
CNVD
•added 2020/09/30 12:00 a.m.•24 views

md4c denial of service vulnerability (CNVD-2020-58044)

md4c Markdown for C is a personal developer's implementation of the Markdown parser in C. It is a parser that can be used in a variety of languages. A denial of service vulnerability exists in mdpushblockbytes in md4c.c in md4c 0.4.5. An attacker can trigger the use of uninitialized memory via a...

7.5CVSS6.8AI score0.01423EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2020/09/29 8:17 p.m.•148 views

libexif: use of uninitialized memory in EXIF Makernote handling can lead to crashes and use-after-free

An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions...

8.2CVSS7.4AI score0.01934EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/09/29 7:26 p.m.•17 views

httpd: mod_proxy_ftp use of uninitialized value

A flaw was found in Apache's HTTP server httpd .The modproxyftp module may use uninitialized memory with proxying to a malicious FTP server. The highest threat from this vulnerability is to data confidentiality...

5.3CVSS7.1AI score0.51951EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2020/09/29 6:48 p.m.•46 views

CVE-2020-26148

mdpushblockbytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service e.g., assertion failure via a malformed Markdown document...

7.3AI score0.01423EPSS
SaveExploits1References1
Mend
Mend
•added 2020/09/29 6:48 p.m.•8 views

CVE-2020-26148

mdpushblockbytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service e.g., assertion failure via a malformed Markdown document...

8.7CVSS0.01423EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2020/09/29 6:48 p.m.•79 views

CVE-2020-26148

mdpushblockbytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service e.g., assertion failure via a malformed Markdown document...

7.5CVSS7.3AI score0.01423EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2020/09/29 12:00 a.m.•40 views

RHEL 7 : libexif (RHSA-2020:4040)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4040 advisory. The libexif packages provide a library for extracting extra information from image files. The following packages have been upgraded to a lat...

8.8CVSS6.9AI score0.04059EPSS
SaveExploits0References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/29 12:00 a.m.•8 views

CVE-2020-26148: Use of Uninitialized Resource

mdpushblockbytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service e.g., assertion failure via a malformed Markdown document...

7.5CVSS5.8AI score0.01423EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/09/29 12:00 a.m.•10 views

PT-2020-16310

Name of the Vulnerable Software and Affected Versions md4c version 0.4.5 Description The issue allows attackers to trigger the use of uninitialized memory and cause a denial of service, such as an assertion failure, via a malformed Markdown document. This is due to a problem in the md push block...

7.5CVSS0.01423EPSS
SaveExploits1References9
OpenVAS
OpenVAS
•added 2020/09/29 12:00 a.m.•33 views

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2020-2021)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.03506EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/09/28 12:00 a.m.•20 views

Google TensorFlow code issue vulnerability (CNVD-2020-54781)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A security vulnerability exists in Tensorflow versions prior to 2.2.1, and in version 2.3.1, which stems from the pybind11 bonding code that assumes that the arguments are tensors, which can be...

7.1CVSS7AI score0.0083EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2020/09/28 12:00 a.m.•59 views

EulerOS 2.0 SP3 : libexif (EulerOS-SA-2020-2142)

According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.CVE-2020-12767 - An issue was discovered in libexif before 0.6.22...

9.1CVSS7.4AI score0.02752EPSS
SaveExploits0References5
RustSec
RustSec
•added 2020/09/26 12:00 p.m.•34 views

array_queue pop_back() may cause a use-after-free

arrayqueue implements a circular queue that wraps around an array. However, it fails to properly index into the array in the popback function allowing the reading of previously dropped or uninitialized memory...

5.5CVSS3.3AI score0.00431EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder