Lucene search
+L

72 matches found

Veracode
Veracode
added 2022/11/08 7:11 a.m.42 views

Out-of-bound Write

Apache Commons BCEL is vulnerable to Out-of-bound Write. The vulnerability is due to ConstantPool.java and ConstantPoolGen.java improperly handing MAXCPENTRIES which allows an attacker to pass data to specific APIs and control the resulting bytecode causing out-of-bound writes...

9.8CVSS8.9AI score0.02836EPSS
SaveExploits0References14Affected Software1
Github Security Blog
Github Security Blog
added 2022/11/07 7:0 p.m.70 views

Apache Commons BCEL vulnerable to out-of-bounds write

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS9AI score0.02836EPSS
SaveExploits0References13Affected Software1
OSV
OSV
added 2022/11/07 7:0 p.m.246 views

GHSA-97XG-PHPR-RG8Q Apache Commons BCEL vulnerable to out-of-bounds write

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS9.6AI score0.02836EPSS
SaveExploits0References13
NVD
NVD
added 2022/11/07 1:15 p.m.30 views

CVE-2022-42920

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS0.02836EPSS
SaveExploits0References6
OSV
OSV
added 2022/11/07 1:15 p.m.1 views

DEBIAN-CVE-2022-42920

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS7.5AI score0.02836EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/07 1:15 p.m.48 views

Out-of-bounds

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

7.5CVSS9.3AI score0.02836EPSS
SaveExploits0References6Affected Software2
CVE
CVE
added 2022/11/07 12:0 a.m.346 views

CVE-2022-42920

The CVE-2022-42920 issue affects Apache Commons BCEL. The vulnerability arises from an out-of-bounds write in multiple BCEL APIs that modify class characteristics, allowing attacker-controlled data to produce arbitrary bytecode. This could enable an attacker to gain higher control over the genera...

9.8CVSS9AI score0.02836EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2022/11/07 12:0 a.m.29 views

CVE-2022-42920 Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.7AI score0.02836EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/11/07 12:0 a.m.4 views

Apache Commons BCEL 缓冲区错误漏洞

Apache Commons BCEL is the United States Apache Apache Foundation of a byte code engineering library . It is designed to provide users with a convenient way to analyze, create and manipulate binary Java classes. A buffer error vulnerability exists in Apache Commons BCEL, which stems from an...

9.8CVSS7.7AI score0.02836EPSS
SaveExploits0References18
UbuntuCve
UbuntuCve
added 2022/11/07 12:0 a.m.63 views

CVE-2022-42920

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS6.9AI score0.02836EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2022/11/07 12:0 a.m.52 views

CVE-2022-42920

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS7.4AI score0.02836EPSS
SaveExploits0
OSV
OSV
added 2022/11/07 12:0 a.m.42 views

CVE-2022-42920 Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS6.9AI score0.02836EPSS
SaveExploits0References8
Rows per page
Query Builder