Lucene search
+L

84 matches found

RedhatCVE
RedhatCVE
•added 2024/01/25 5:18 p.m.•49 views

CVE-2023-40551

A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase...

5.1CVSS6.2AI score0.00397EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2024/01/23 12:00 a.m.•65 views

CVE-2023-40551

A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase...

5.1CVSS6.9AI score0.00397EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/01/23 12:00 a.m.•8 views

PT-2024-2765

Name of the Vulnerable Software and Affected Versions Shim affected versions not specified Description A flaw was found in the MZ binary format in Shim, which is related to an out-of-bounds read. This issue may cause a crash or potentially expose sensitive data during the system's boot phase...

5.5CVSS6.7AI score0.00397EPSS
SaveExploits0References100
The Hacker News
The Hacker News
•added 2024/01/22 3:40 a.m.•112 views

Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell Attacks

Cybersecurity researchers are warning of a "notable increase" in threat actor activity actively exploiting a now-patched flaw in Apache ActiveMQ to deliver the Godzilla web shell on compromised hosts. "The web shells are concealed within an unknown binary format and are designed to evade security...

10CVSS8AI score0.99891EPSS
SaveExploits33
Tenable Nessus
Tenable Nessus
•added 2024/01/10 12:00 a.m.•57 views

RHEL 8 : python3 (RHSA-2024:0114)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0114 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

7.5CVSS7.5AI score0.01771EPSS
SaveExploits2References8
NVD
NVD
•added 2023/08/22 7:16 p.m.•41 views

CVE-2022-48564

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

6.5CVSS6.6AI score0.01651EPSS
SaveExploits1References3
Prion
Prion
•added 2023/08/22 7:16 p.m.•142 views

Format string

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

4.3CVSS6AI score0.01651EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
•added 2023/08/22 7:16 p.m.•39 views

CVE-2022-48564

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

6.5CVSS6.9AI score0.01651EPSS
SaveExploits1References8
OSV
OSV
•added 2023/08/22 12:00 a.m.•56 views

CVE-2022-48564

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

6.6AI score
SaveExploits0References5
Debian CVE
Debian CVE
•added 2023/08/22 12:00 a.m.•61 views

CVE-2022-48564

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

6.5CVSS7.6AI score0.01651EPSS
SaveExploits1
Cvelist
Cvelist
•added 2023/08/22 12:00 a.m.•51 views

CVE-2022-48564

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

6.5AI score0.01651EPSS
SaveExploits1References3
OSV
OSV
•added 2023/08/22 12:00 a.m.•38 views

PSF-2023-10 DoS when reading malformed Apple Property List files in binary format

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

6.5CVSS6.5AI score0.01651EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/03/24 12:00 a.m.•16 views

UPX 安全漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX, which stems from function PackLinuxElf32::invertptdynamic in plxelf.cpp:1688 that causes the "bucket" variable to point to an inaccessible address...

7.5CVSS7.2AI score0.00817EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2023/03/17 12:00 a.m.•13 views

The vulnerability of the fill_files_note() function (fs/binfmt_elf.c) in the Linux kernel’s file system support subsystem, which allows a attacker to cause a service failure

The vulnerability of the fillfilesnote function fs/binfmtelf.c in the Linux kernel’s file system support subsystem is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.3CVSS6.7AI score0.00325EPSS
SaveExploits0References13Affected Software4
SUSE CVE
SUSE CVE
•added 2023/02/15 5:49 a.m.•11 views

SUSE CVE-2012-0213

The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service OutOfMemoryError exception and possibly JVM destabilization via a crafted length value in a Channel Definition Format CDF or Compound Fi...

5CVSS6.9AI score0.07503EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/02 12:00 a.m.•9 views

PT-2025-40731

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the binfmt misc module related to a shift-out-of-bounds condition in the check special flags function. This condition was identified by UBSAN...

7.1CVSS6.2AI score0.00203EPSS
SaveExploits0References477
Veracode
Veracode
•added 2022/10/06 4:00 a.m.•41 views

Denial Of Service (DoS)

protobuf-java is vulnerable to denial of service. The vulnerability exists in the parsing procedure for binary and text format data because the input streams contain multiple instances of non-repeated embedded messages with repeated or unknown fields, resulting in potentially long garbage...

7.5CVSS7.4AI score0.01143EPSS
SaveExploits0References15Affected Software2
Snyk
Snyk
•added 2022/10/04 10:17 p.m.•4 views

Denial of Service (DoS)

Overview google-protobuf is a Google's data interchange format. Affected versions of this package are vulnerable to Denial of Service DoS via the parsing procedure for binary and text format data. Input streams containing multiple instances of non-repeated embedded messages with repeated or unkno...

7.5CVSS7.1AI score0.01143EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2022/05/04 12:28 a.m.•42 views

Denial of Service in Apache POI

The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service OutOfMemoryError exception and possibly JVM destabilization via a crafted length value in a Channel Definition Format CDF or Compound Fi...

5CVSS5.5AI score0.07503EPSS
SaveExploits0References8Affected Software2
OSV
OSV
•added 2022/05/04 12:28 a.m.•67 views

GHSA-JQX5-H2HW-5Q4F Denial of Service in Apache POI

The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service OutOfMemoryError exception and possibly JVM destabilization via a crafted length value in a Channel Definition Format CDF or Compound Fi...

5CVSS5.5AI score0.07503EPSS
SaveExploits0References8
Rows per page
Query Builder