Lucene search
+L

791 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/18 12:00 a.m.•1 views

CVE-2024-31172: Out-of-bounds Read

Out-of-bounds Read vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::of10::StatsReplyTable::unpack. This issue affects libfluid: 0.1.0...

7.5CVSS5.8AI score0.00486EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/18 12:00 a.m.•0 views

CVE-2024-31165: Unchecked Return Value to NULL Pointer Dereference

Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::of13::SetFieldAction::unpack. This issue affects libfluid: 0.1.0...

7.5CVSS5.7AI score0.00546EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/18 12:00 a.m.•1 views

CVE-2024-31190: Out-of-bounds Read

Out-of-bounds Read vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::of13::MultipartReplyMeterConfig::unpack. This issue affects libfluid: 0.1.0...

7.5CVSS5.8AI score0.00371EPSS
SaveExploits0References1
OSV
OSV
•added 2024/08/21 3:29 p.m.•37 views

GO-2022-0921 Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd...

6.8CVSS6AI score0.01595EPSS
SaveExploits2References9
Positive Technologies
Positive Technologies
•added 2024/08/14 12:00 a.m.•18 views

PT-2024-30537 · Webcrack · Webcrack

Name of the Vulnerable Software and Affected Versions: webcrack versions prior to 2.14.1 Description: An arbitrary file write vulnerability exists in the webcrack module when processing specifically crafted malicious code on Windows systems. This vulnerability is triggered when using the unpack...

7.8CVSS7.8AI score0.00447EPSS
SaveExploits1References14
Microsoft CVE
Microsoft CVE
•added 2024/07/23 7:00 a.m.•10 views

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp postprocessing/mem_image.cpp and utils/thumb_utils.cpp. For example malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs without validating T.tlength.

...

7.5CVSS6.7AI score0.03672EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/05/30 12:00 a.m.•12 views

The vulnerability of the aa_unpack() function in the AppArmor security module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the aaunpack function in the security/apparmor/policyunpack.c file of the AppArmor security module in the Linux operating system is related to a potential memory overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.9CVSS5.6AI score
SaveExploits0References1Affected Software2
Fedora
Fedora
•added 2024/03/07 10:33 p.m.•27 views

[SECURITY] Fedora 40 Update: maven-dependency-plugin-3.6.1-3.fc40

The dependency plugin provides the capability to manipulate artifacts. It can copy and/or unpack artifacts from local or remote repositories to a specified location...

8.8CVSS6.8AI score0.02578EPSS
SaveExploits3
Packet Storm
Packet Storm
•added 2024/02/27 12:00 a.m.•288 views

perl2exe 30.10C Arbitrary Code Execution

Exploit Title: Executables Created with perl2exe safe.pl user@testing:/example$ ./perl2exe-Linux-x64-5.30.1/perl2exe safe.pl Perl2Exe V30.10C 2020-12-11 Copyright c 1997-2020 IndigoSTAR Software ... Generating safe user@testing:/example$ user@testing:/example$ Check that the program executes as...

7.4AI score
SaveExploits0
OSV
OSV
•added 2024/02/22 5:15 p.m.•13 views

UBUNTU-CVE-2023-52443

In the Linux kernel, the following vulnerability has been resolved: apparmor: avoid crash when parsed profile name is empty When processing a packed profile in unpackprofile described like "profile :ns::samba-dcerpcd /usr/lib/samba/,samba/samba-dcerpcd ..." a string ":samba-dcerpcd" is unpacked a...

5.5CVSS6.1AI score0.0024EPSS
SaveExploits0References27
Debian CVE
Debian CVE
•added 2024/02/22 4:13 p.m.•71 views

CVE-2023-52443

In the Linux kernel, the following vulnerability has been resolved: apparmor: avoid crash when parsed profile name is empty When processing a packed profile in unpackprofile described like "profile :ns::samba-dcerpcd /usr/lib/samba/,samba/samba-dcerpcd ..." a string ":samba-dcerpcd" is unpacked a...

5.5CVSS6.2AI score0.0024EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2024/02/22 12:00 a.m.•48 views

CVE-2023-52443

In the Linux kernel, the following vulnerability has been resolved: apparmor: avoid crash when parsed profile name is empty When processing a packed profile in unpackprofile described like "profile :ns::samba-dcerpcd /usr/lib/samba/,samba/samba-dcerpcd ..." a string ":samba-dcerpcd" is unpacked a...

5.5CVSS6AI score0.0024EPSS
SaveExploits0References26
BDU FSTEC
BDU FSTEC
•added 2024/02/16 12:00 a.m.•12 views

The vulnerabilities of the functions PKCS12_parse(), PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes(), and PKCS12_newpass() in the OpenSSL library allow a attacker to cause a service failure.

The vulnerabilities of the functions PKCS12parse, PKCS12unpackp7data, PKCS12unpackp7encdata, PKCS12unpackauthsafes, and PKCS12newpass in the OpenSSL library are related to pointer arithmetic errors. Exploiting these vulnerabilities could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.03187EPSS
SaveExploits0References23Affected Software8
RedHat Linux
RedHat Linux
•added 2024/01/25 8:03 a.m.•13 views

python: DoS when processing malformed Apple Property List files in binary format

A vulnerability was found in the Python core plistlib library within the readints function in the plistlib.py file. In malformed input, the implementation can be manipulated to create an argument for struct.unpack. This issue can lead to excessive CPU and memory consumption, resulting in a...

6.5CVSS6.7AI score0.01651EPSS
SaveExploits1References6
NVD
NVD
•added 2024/01/03 9:15 a.m.•21 views

CVE-2023-52307

Stack overflow in paddle.linalg.luunpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage...

9.8CVSS8.8AI score0.00534EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/01/03 12:00 a.m.•13 views

PT-2024-14514 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is a stack overflow in paddle.linalg.lu unpack that can lead to a denial of service or potentially more severe consequences. Recommendations: For versions prior to 2.6.0, update to...

9.8CVSS9.3AI score0.00534EPSS
SaveExploits0References11
attackerkb
attackerkb
•added 2023/11/27 12:15 a.m.•6 views

CVE-2023-49322

Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 a...

7.5CVSS5.8AI score0.00701EPSS
SaveExploits0References3
NVD
NVD
•added 2023/11/27 12:15 a.m.•25 views

CVE-2023-49322

Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 a...

7.5CVSS0.00701EPSS
SaveExploits0References1
OSV
OSV
•added 2023/11/27 12:15 a.m.•14 views

CVE-2023-49322

Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 a...

7.5CVSS7.3AI score0.00701EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/27 12:15 a.m.•37 views

Code injection

Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 a...

5CVSS7.1AI score0.00701EPSS
SaveExploits0References1Affected Software7
Rows per page
Query Builder