Lucene search
+L

1108 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/30 12:00 a.m.•5 views

CVE-2021-31872: Integer Overflow or Wraparound

An issue was discovered in klibc before 2.0.9. Multiple possible integer overflows in the cpio command on 32-bit systems may result in a buffer overflow or other security impact...

9.8CVSS6.1AI score0.02076EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/30 12:00 a.m.•6 views

CVE-2021-31871: Integer Overflow or Wraparound

An issue was discovered in klibc before 2.0.9. An integer overflow in the cpio command may result in a NULL pointer dereference on 64-bit systems...

7.5CVSS5.7AI score0.01875EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/04/28 12:00 a.m.•6 views

PT-2021-4586

Name of the Vulnerable Software and Affected Versions klibc versions prior to 2.0.9 Description An issue in the cpio command on 32-bit systems may result in a buffer overflow or other security impact due to multiple possible integer overflows. This could allow a remote attacker to access...

9.8CVSS0.02165EPSS
SaveExploits0References25
osv_mgasa
osv_mgasa
•added 2021/03/27 2:27 p.m.•32 views

MGASA-2021-0155 Updated redis packages fix security vulnerability

It was discovered that there were a number of integer overflow issues in Redis. It is currently believed that the issues only affect 32-bit based systems CVE-2021-21309...

8.8CVSS8.8AI score0.0479EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2021/03/23 12:00 a.m.•59 views

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-4751-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4751-1 advisory. It was discovered that the console keyboard driver in the Linux kernel contained a race condition. A local attacker could use this to expose sensitive...

8.8CVSS7.2AI score0.0112EPSS
SaveExploits10References19
CNNVD
CNNVD
•added 2021/03/09 12:00 a.m.•39 views

Microsoft Office ClickToRun security vulnerability

Microsoft Office ClickToRun is a component of Microsoft Corporation USA for downloading and installing Microsoft Office products. A security vulnerability exists in Microsoft Office ClickToRun. The following products and versions are affected: Microsoft 365 Apps for Enterprise for 32-bit Systems,...

9.3CVSS7.2AI score0.0354EPSS
SaveExploits0References3
Veracode
Veracode
•added 2021/02/26 2:11 a.m.•32 views

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists through the syscall implementation on 32-bit systems...

5.5CVSS1.6AI score0.011EPSS
SaveExploits1References2Affected Software3
RedhatCVE
RedhatCVE
•added 2021/02/25 6:35 p.m.•46 views

CVE-2020-28588

A flaw read uninitialized values in the Linux kernel syscall implementation on 32 bit-systems was found in the way user reading /proc/self/syscall. A local user could use this flaw to read three 64 bits uninitialized values, but cannot control which values. The highest threat from this...

5.5CVSS0.8AI score0.011EPSS
SaveExploits1References4
FreeBSD
FreeBSD
•added 2021/02/22 12:00 a.m.•36 views

redis -- Integer overflow on 32-bit systems

Redis Development team reports: Redis 4.0 or newer uses a configurable limit for the maximum supported bulk input size. By default, it is 512MB which is a safe value for all platforms. If the limit is significantly increased, receiving a large request from a client may trigger several integer...

8.8CVSS1.2AI score0.0479EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2021/02/10 12:00 a.m.•64 views

Microsoft Windows Multiple Vulnerabilities (KB4601319)

This host is missing a critical security update according to Microsoft KB4601319 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.9AI score0.78376EPSS
SaveExploits29References3
CNNVD
CNNVD
•added 2021/02/09 12:00 a.m.•24 views

Microsoft Windows Installer Security Feature Issue Vulnerability

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security feature vulnerability exists in Microsoft Windows Installer. The following products and editions are affected: Windows 10...

7.8CVSS7.1AI score0.00756EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/01/13 12:00 a.m.•63 views

Microsoft Windows Multiple Vulnerabilities (KB4598231)

This host is missing a critical security update according to Microsoft KB4598231 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.4AI score0.10031EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2020/12/08 12:00 a.m.•31 views

Microsoft Windows GDI+ Information Disclosure Vulnerability

Microsoft Windows GDI+ is a graphical device interface for the Windows operating system from Microsoft USA. The software is part of the .NET Framework and is responsible for drawing graphical images and displaying information on screens and printers. An information disclosure vulnerability exists...

5.5CVSS6AI score0.01402EPSS
SaveExploits0References4
Microsoft KB
Microsoft KB
•added 2020/07/14 7:00 a.m.•266 views

Servicing stack update for Windows 10, version 1607: July 14, 2020

None None...

7.8CVSS7AI score0.00771EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2020/06/17 12:00 a.m.•40 views

EulerOS 2.0 SP2 : libpng (EulerOS-SA-2020-1661)

According to the versions of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow in the pngcombinerow function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might...

10CVSS7.7AI score0.10339EPSS
SaveExploits2References4
Microsoft KB
Microsoft KB
•added 2020/06/09 12:00 a.m.•73 views

Servicing stack update for Windows 10, version 1803: June 9, 2020

None None...

6.1AI score
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2020/06/01 12:00 a.m.•25 views

UBUNTU-CVE-2020-10543

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow. An application written in Perl would only be vulnerable to this flaw if it evaluates regular expressions supplied by the attacker. Evaluating regular...

8.2CVSS7.1AI score0.11334EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2020/05/13 12:00 a.m.•112 views

Microsoft Windows Multiple Vulnerabilities (KB4556826)

This host is missing a critical security update according to Microsoft KB4556826 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS6.9AI score0.53878EPSS
SaveExploits17References3
OpenVAS
OpenVAS
•added 2020/04/15 12:00 a.m.•100 views

Microsoft Windows Multiple Vulnerabilities (KB4550922)

This host is missing a critical security update according to Microsoft KB4550922 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.3AI score0.6895EPSS
SaveExploits4References3
Veracode
Veracode
•added 2020/04/10 12:39 a.m.•41 views

Denial Of Service (DoS)

The gzip package is vulnerable to Denial Of Service DoS. An integer underflow flaw, leading to an array index error, was found in the way gzip expanded archive files compressed with the Lempel-Ziv-Welch LZW compression algorithm. If a victim expanded a specially-crafted archive, it could cause gz...

6.8CVSS4.2AI score0.04774EPSS
SaveExploits0References34Affected Software1
Rows per page
Query Builder