Lucene search
K

44 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.4 views

The vulnerability of the tinyexr::SaveEXR component in the OpenEXR Tinyexr image processing library allows a attacker to cause a service failure.

The vulnerability of the tinyexr::SaveEXR component in the OpenEXR Tinyexr processing library is related to an error in the array indexing mechanism. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.01233EPSS
Exploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.6 views

The vulnerability in the tinyexr::DecodeEXRImage component of the OpenEXR Tinyexr processing library allows a attacker to cause a service failure.

The vulnerability of the tinyexr::DecodeEXRImage component in the OpenEXR Tinyexr processing library is related to an error in the array indexing mechanism. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.5CVSS7.2AI score0.01267EPSS
Exploits1References6Affected Software2
CNVD
CNVD
added 2021/07/27 12:0 a.m.17 views

tinyexr Denial of Service Vulnerability (CNVD-2021-94957)

tinyexr is a small library for loading and saving OpenEXR .exr images. tinyexr version 0.9.5 suffers from a denial-of-service vulnerability. The vulnerability stems from an array indexing error in the tinyexr::SaveEXR component. An attacker could exploit this vulnerability to cause a denial of...

7.5CVSS4.2AI score0.01233EPSS
Exploits1References1
CNVD
CNVD
added 2021/07/27 12:0 a.m.22 views

tinyexr denial of service vulnerability

tinyexr is a small library for loading and saving OpenEXR .exr images. tinyexr version 0.9.5 suffers from a denial-of-service vulnerability. The vulnerability stems from an array indexing error in the tinyexr::DecodeEXRImage component. An attacker could exploit this vulnerability to cause a denia...

7.5CVSS4.2AI score0.01267EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/07/26 12:0 a.m.5 views

tinyexr commit 输入验证错误漏洞

tinyexr is a small library for loading and saving OpenEXR .exr images. tinyexr version 0.9.5 suffers from a denial-of-service vulnerability. The vulnerability stems from an array indexing error in the tinyexr::SaveEXR component. An attacker could exploit this vulnerability to cause a denial of...

7.5CVSS5.7AI score0.01233EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.2 views

The vulnerability of Linux software’s kernel graphics processor drivers from Qualcomm, related to array indexing errors, allows attackers to execute arbitrary code.

The vulnerability of the graphics processor driver of the Linux operating system software developed by Qualcomm is related to array indexing errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00247EPSS
Exploits0References2
Veracode
Veracode
added 2020/04/10 12:31 a.m.26 views

Arbitrary Code Execution

gstreamer-plugins-good is vulnerable to arbitrary code execution. The vulnerability exists through multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mo...

9.3CVSS3.4AI score0.07147EPSS
Exploits1References24Affected Software1
Veracode
Veracode
added 2020/04/10 12:31 a.m.24 views

Arbitrary Code Execution

gstreamer-plugins-good is vulnerable to arbitrary code execution. The vulnerability exists as multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mov fil...

9.3CVSS3.4AI score0.07147EPSS
Exploits1References20Affected Software1
Veracode
Veracode
added 2020/04/10 12:31 a.m.24 views

Arbitrary Code Execution

gstreamer-plugins-good is vulnerable to arbitrary code execution. The vulnerability exists as multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mov fil...

9.3CVSS3.4AI score0.06483EPSS
Exploits1References20Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:0 a.m.5 views

The vulnerability of the IGMPv3 protocol in real-time operating systems like Wind River VxWorks allows a attacker to trigger a service failure.

The vulnerability of IGMPv3 protocols in real-time operating systems like Wind River VxWorks is related to an array indexing error. Exploiting this vulnerability could allow a malicious actor to cause service failure by renaming “NULL” as IGMP...

7.5CVSS7.8AI score0.15882EPSS
Exploits0References7Affected Software3
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.28 views

Huawei EulerOS: Security Advisory for libpng12 (EulerOS-SA-2019-1391)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8AI score0.10339EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2019/07/26 12:0 a.m.26 views

Foxit PhantomPDF < 8.3.11 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 8.3.11. It is, therefore affected by multiple vulnerabilities: - An uninitialized pointer flaw exists when calling xfa.event.rest XFA JavaScript that can cause the...

7.8CVSS7.6AI score0.07711EPSS
Exploits0References23
Tenable Nessus
Tenable Nessus
added 2019/05/14 12:0 a.m.31 views

EulerOS Virtualization for ARM 64 3.0.1.0 : libpng12 (EulerOS-SA-2019-1391)

According to the versions of the libpng12 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An array-indexing error was discovered in the pngconverttorfc1123 function of libpng. An attacker could possibly use...

7.5CVSS8.3AI score0.10339EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2019/03/12 12:0 a.m.4 views

The vulnerability of the SNMP NAT module in Linux operating systems allows attackers to increase their privileges or cause service failures.

The vulnerability of the SNMP NAT module net/ipv4/netfilter/nfnatsnmpbasicmain.c in the Linux operating system is due to indexing errors in the array. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures...

7.8CVSS6.5AI score0.01092EPSS
Exploits2References6Affected Software1
Veracode
Veracode
added 2019/01/15 9:9 a.m.27 views

Information Disclosure

libpng is vulnerable to information disclosure. An array-indexing error was discovered in the pngconverttorfc1123 function. An attacker could possibly use this flaw to cause an out-of-bounds read by tricking an unsuspecting user into processing a specially crafted PNG image...

5CVSS7.6AI score0.06534EPSS
Exploits1References23Affected Software3
Tenable Nessus
Tenable Nessus
added 2016/09/07 12:0 a.m.35 views

Symantec Protection Engine 7.0.x < 7.0.5 HF01 / 7.5.x < 7.5.3 HF03 / 7.8.x < 7.8.0 HF01 Multiple Vulnerabilities (SYM16-010) (*nix check)

The version of Symantec Protection Engine installed on the remote host is 7.0.x prior to 7.0.5 HF01, 7.5.x prior to 7.5.3 HF03, or 7.8.x prior to 7.8.0 HF01. It is, therefore, affected by multiple vulnerabilities : - An array indexing error exists in the Unpack::ShortLZ function within file...

10CVSS7.7AI score0.53402EPSS
Exploits6References8
Tenable Nessus
Tenable Nessus
added 2016/09/07 12:0 a.m.57 views

Symantec Protection Engine 7.0.x < 7.0.5 HF01 / 7.5.x < 7.5.3 HF03 / 7.8.x < 7.8.0 HF01 Multiple Vulnerabilities (SYM16-010)

The version of Symantec Protection Engine installed on the remote host is 7.0.x prior to 7.0.5 HF01, 7.5.x prior to 7.5.3 HF03, or 7.8.x prior to 7.8.0 HF01. It is, therefore, affected by multiple vulnerabilities : - An array indexing error exists in the Unpack::ShortLZ function within file...

10CVSS7.7AI score0.53402EPSS
Exploits6References8
RedHat Linux
RedHat Linux
added 2016/07/18 1:51 p.m.3 views

libpng: Out-of-bounds read in png_convert_to_rfc1123

An array-indexing error was discovered in the pngconverttorfc1123 function of libpng. An attacker could possibly use this flaw to cause an out-of-bounds read by tricking an unsuspecting user into processing a specially crafted PNG image...

5CVSS7.4AI score0.06534EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2016/07/01 12:0 a.m.46 views

Symantec Mail Security for Exchange / Domino Decomposer Engine Multiple Vulnerabilities (SYM16-010)

The version of Symantec Mail Security for Exchange or Domino installed on the remote Windows host is affected by multiple vulnerabilities in the decomposer engine : - An array indexing error exists in the UnRAR component in the Unpack::ShortLZ function in unpack15.cpp that is triggered when...

10CVSS8.4AI score0.53402EPSS
Exploits6References9
OpenVAS
OpenVAS
added 2015/12/15 12:0 a.m.25 views

Amazon Linux: Security Advisory (ALAS-2015-615)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.06534EPSS
Exploits1References2
Rows per page
Query Builder