Lucene search
+L

32883 matches found

Vulnrichment
Vulnrichment
•added 2022/09/02 12:15 p.m.•8 views

CVE-2022-36078 Slice Memory Allocation with Excessive Size Value in binary

Binary provides encoding/decoding in Borsh and other formats. The vulnerability is a memory allocation vulnerability that can be exploited to allocate slices in memory with arbitrary excessive size value, which can either exhaust available memory or crash the whole program. When using...

8.8CVSS8.8AI score0.01181EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/09/02 12:15 p.m.•48 views

CVE-2022-36078 Slice Memory Allocation with Excessive Size Value in binary

Binary provides encoding/decoding in Borsh and other formats. The vulnerability is a memory allocation vulnerability that can be exploited to allocate slices in memory with arbitrary excessive size value, which can either exhaust available memory or crash the whole program. When using...

8.8CVSS8.3AI score0.01181EPSS
SaveExploits1References3
OSV
OSV
•added 2022/09/02 12:15 p.m.•36 views

CVE-2022-36078 Slice Memory Allocation with Excessive Size Value in binary

Binary provides encoding/decoding in Borsh and other formats. The vulnerability is a memory allocation vulnerability that can be exploited to allocate slices in memory with arbitrary excessive size value, which can either exhaust available memory or crash the whole program. When using...

8.8CVSS7.8AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2022/09/02 12:00 a.m.•22 views

Google Chrome < 105.0.5195.102 Vulnerability

Binary data 701420.pasl...

9.6CVSS9.7AI score0.05759EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/09/02 12:00 a.m.•19 views

Delta DOPSoft Installed (Windows)

Binary data deltadopsoftwininstalled.nbin...

7.3AI score
SaveExploits0References1
CNNVD
CNNVD
•added 2022/09/02 12:00 a.m.•30 views

Binary 资源管理错误漏洞

Binary is a library by the individual developers of gagliardetto. It is used for encoding/decoding Borsh and other formats. A security vulnerability exists in Binary versions prior to 0.7.1. An attacker exploited the vulnerability to allocate slices in memory with arbitrarily oversized values,...

8.8CVSS7.5AI score0.01181EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/09/02 12:00 a.m.•13 views

PT-2022-23166 · Unknown · Github.Com/Gagliardetto/Binary

Name of the Vulnerable Software and Affected Versions: github.com/gagliardetto/binary versions prior to v0.7.1 Description: The issue is a memory allocation vulnerability that can be exploited to allocate slices in memory with excessive size values, potentially exhausting available memory or...

8.8CVSS7.4AI score0.01181EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2022/09/02 12:00 a.m.•18 views

PT-2022-4709

Name of the Vulnerable Software and Affected Versions Python affected versions not specified Description A flaw was found in Python related to errors in converting data types between int and str. This issue is associated with algorithms that have quadratic time complexity and use non-binary bases...

9.8CVSS8.4AI score0.78483EPSS
SaveExploits57References630
zdt
zdt
•added 2022/09/02 12:00 a.m.•371 views

Zyxel Firewall SUID Binary Privilege Escalation Exploit

This Metasploit module exploits CVE-2022-30526, a local privilege escalation vulnerability that allows a low privileged user e.g. nobody escalate to root. The issue stems from a suid binary that allows all users to copy files as root. This module overwrites the firewall's crontab to execute an...

9.8CVSS9.2AI score0.99944EPSS
SaveExploits28
RedHat Linux
RedHat Linux
•added 2022/09/01 2:21 p.m.•16 views

mariadb: use-after-poison in Binary_string::free_buffer

A flaw was found in the MariaDB Server. It contains a use-after-free via the component,Binarystring::freebuffer at /sql/sqlstring.h, affecting availability...

7.5CVSS7.3AI score0.02246EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/08/31 12:00 a.m.•12 views

Zephyr 缓冲区错误漏洞

The Zephyr Project is a collaborative project hosted by the Linux Foundation, an open source collaboration. zepher Project zephyr suffers from a binary vulnerability that can be exploited by attackers to cause a denial of service attack...

7.2CVSS6.4AI score0.00573EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2022/08/31 12:00 a.m.•362 views

Zyxel Firewall SUID Binary Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Zyxel Firewall SUID Binary Privilege Escalation', 'Description' = %q This module exploits CVE-2022-30526, a local privilege escalation...

10CVSS0.8AI score0.99944EPSS
SaveExploits28
Gentoo Linux
Gentoo Linux
•added 2022/08/31 12:00 a.m.•46 views

Mozilla Firefox: Multiple Vulnerabilities

Background Mozilla Firefox is a popular open-source web browser from the Mozilla project. Description Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

8.8CVSS3AI score0.00905EPSS
SaveExploits0
OSV
OSV
•added 2022/08/30 9:15 p.m.•12 views

CVE-2022-37173

An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe...

7.8CVSS6.1AI score0.00412EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/08/30 9:15 p.m.•7 views

CVE-2022-37173

An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe...

7.8CVSS7.5AI score0.00412EPSS
SaveExploits0References2
NVD
NVD
•added 2022/08/30 9:15 p.m.•40 views

CVE-2022-37173

An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe...

7.8CVSS0.00412EPSS
SaveExploits0References1
Prion
Prion
•added 2022/08/30 9:15 p.m.•27 views

Code injection

An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe...

4.3CVSS7.8AI score0.00412EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/08/30 8:05 p.m.•46 views

CVE-2022-37173

An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe...

8AI score0.00412EPSS
SaveExploits0References1
CVE
CVE
•added 2022/08/30 8:05 p.m.•83 views

CVE-2022-37173

The CVE-2022-37173 entry describes a vulnerability in the gvim 9.0.0000 installer that allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe. Affected component: the installer. Root cause: binary hijacking during installation. Impact: remote arbi...

7.8CVSS7.7AI score0.00412EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2022/08/30 12:00 a.m.•22 views

Google Chrome < 105.0.5195.52 Multiple Vulnerabilities

Binary data 701419.pasl...

8.8CVSS9.6AI score0.24738EPSS
SaveExploits1References2
Rows per page
Query Builder