Lucene search
+L

11 matches found

NVD
NVD
•added 2026/10/02 12:16 a.m.•8 views

CVE-2026-103764

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

9.8CVSS0.00636EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2022-3310

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.08125EPSS
SaveExploits1References19
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•30 views

Mageia: Security Advisory (MGASA-2014-0286)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.7AI score0.08125EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
•added 2014/06/26 12:00 a.m.•48 views

CVE-2014-4616

Array index error in the scanstring function in the json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the rawdecode function...

5.9CVSS6.8AI score0.08125EPSS
SaveExploits1References2
Hacker One
Hacker One
•added 2014/05/16 11:14 p.m.•69 views

Internet Bug Bounty: Python vulnerability: reading arbitrary process memory

Python 2 and 3 are susceptible to arbitrary process memory reading by a user or adversary due to a bug in the json module caused by insufficient bounds checking. The sole prerequisites of this attack are that the attacker is able to control or influence the two parameters of the default scanstrin...

4.3CVSS6.8AI score0.08125EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/02/14 12:00 a.m.•4 views

CVE-2012-0012: Improper Initialization

Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to read data from arbitrary process-memory locations via a crafted web site, aka "Null Byte Information Disclosure Vulnerability."...

4.3CVSS6AI score0.16028EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2008/06/16 7:41 p.m.•30 views

CVE-2008-1379

Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height...

6.8CVSS7.3AI score0.01387EPSS
SaveExploits0References2
OSV
OSV
•added 2008/06/16 7:41 p.m.•15 views

CVE-2008-1379

Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height...

6.6AI score
SaveExploits0References52
NVD
NVD
•added 2008/06/16 7:41 p.m.•32 views

CVE-2008-1379

Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height...

6.8CVSS7.5AI score0.01387EPSS
SaveExploits0References52
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/06/16 12:00 a.m.•4 views

CVE-2008-1379: Undefined Security Weakness

Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height...

6.8CVSS6.1AI score0.01387EPSS
SaveExploits0References2
Exploit DB
Exploit DB
•added 2004/11/05 12:00 a.m.•26 views

Monolith Lithtech Game Engine - Multiple Remote Format String Vulnerabilities

// source: https://www.securityfocus.com/bid/11610/info Lithtech game engine is prone to multiple remote format-string vulnerabilities because of incorrect usage of 'printf'-type functions. Format specifiers can be supplied directly to vulnerable functions from external data. A denial-of-service...

2.1CVSS5.8AI score0.01882EPSS
SaveExploits1
Rows per page
Query Builder