Lucene search
+L

13014 matches found

attackerkb
attackerkb
added 2021/02/15 5:15 p.m.7 views

CVE-2021-27218

An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If gbytearraynewtake was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 232, causing unintended length truncation...

7.5CVSS7.1AI score0.0408EPSS
SaveExploits0References16
UbuntuCve
UbuntuCve
added 2021/02/15 5:15 p.m.57 views

CVE-2021-27219

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function gbytesnew has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption...

7.5CVSS7.1AI score0.02993EPSS
SaveExploits1References2
OSV
OSV
added 2021/02/15 5:15 p.m.10 views

UBUNTU-CVE-2021-27218

An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If gbytearraynewtake was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 232, causing unintended length truncation...

7.5CVSS7.1AI score0.0408EPSS
SaveExploits0References3
attackerkb
attackerkb
added 2021/02/15 5:15 p.m.7 views

CVE-2021-27219

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function gbytesnew has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption...

7.5CVSS7.4AI score0.02993EPSS
SaveExploits1References11
OSV
OSV
added 2021/02/15 5:15 p.m.9 views

UBUNTU-CVE-2021-27219

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function gbytesnew has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption...

7.5CVSS7.2AI score0.02993EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
added 2021/02/15 4:27 p.m.96 views

CVE-2021-27219

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function gbytesnew has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption...

7.5CVSS8AI score0.02993EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2021/02/15 4:27 p.m.42 views

CVE-2021-27219

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function gbytesnew has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption...

7.5CVSS8AI score0.02993EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2021/02/15 12:00 a.m.15 views

PT-2021-17326

Name of the Vulnerable Software and Affected Versions: steghide version 0.5.1 Description: The issue relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data. Recommendations: For steghide version 0.5.1, at the moment, there is no information about a newer...

7.5CVSS7.3AI score0.03253EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2021/02/15 12:00 a.m.12 views

GNOME Glib Security Vulnerability

GNOME Glib is a set of multi-platform toolkits for creating graphical user interfaces, and is the underlying core library that underlies GTK+ and GNOME projects. A security vulnerability exists in GNOME GLib, which stems from an integer overflow in the function gbytesnew on 64-bit platforms due t...

7.5CVSS7.2AI score0.02993EPSS
SaveExploits1References54
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/12 1:59 p.m.38 views

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM DataQuant for Workstation (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects IBM DataQuant for Workstation. Vulnerability Details CVEID: CVE-2015-4000 The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the failure to properly convey...

4.3CVSS0.7AI score0.9986EPSS
SaveExploits1Affected Software1
CNNVD
CNNVD
added 2021/02/11 12:00 a.m.16 views

FNET software Security Feature Issue Vulnerability

FNET is a soft armor from the FNET organization that provides dual TCP / IPv4 and IPv6 stack support for 32-bit MCUs. A security signature issue vulnerability exists in the FNET software that allows an attacker to spoof or corrupt a TCP connection...

9.1CVSS7.3AI score0.00871EPSS
SaveExploits0References5
OSV
OSV
added 2021/02/10 10:15 p.m.22 views

CVE-2021-27186

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

7.5CVSS6.9AI score
SaveExploits0References3
NVD
NVD
added 2021/02/10 10:15 p.m.28 views

CVE-2021-27186

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

7.5CVSS0.01987EPSS
SaveExploits1References3
Prion
Prion
added 2021/02/10 10:15 p.m.27 views

Null pointer dereference

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

5CVSS7.6AI score0.01987EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
added 2021/02/10 10:15 p.m.8 views

CVE-2021-27186

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

7.5CVSS7.3AI score0.01987EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2021/02/10 9:24 p.m.41 views

CVE-2021-27186

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

7.7AI score0.01987EPSS
SaveExploits1References3
CVE
CVE
added 2021/02/10 9:24 p.m.74 views

CVE-2021-27186

Fluent Bit 1.6.10 is affected by CVE-2021-27186 due to a NULL pointer dereference caused by an unvalidated flb_malloc return in flb_avro.c or in the HTTP server endpoint at http_server/api/v1/metrics.c. This vulnerability can lead to a crash; exploitation details or active exploit status are not ...

7.5CVSS7.5AI score0.01987EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2021/02/10 12:00 a.m.14 views

PT-2021-17305 · Unknown · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: Fluent Bit version 1.6.10 Description: The issue is related to a NULL pointer dereference that occurs when the return value of flb malloc is not validated by flb avro.c or http server/api/v1/metrics.c. This can lead to a crash or potentially...

7.5CVSS7.6AI score0.01987EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2021/02/10 12:00 a.m.16 views

Fluent Bit 代码问题漏洞

Fluent Bit is an open source log processing and analysis system written in C. A code issue vulnerability exists in Fluent Bit that arises from improper design or implementation during code development of a networked system or product. No detailed vulnerability details are provided at this time...

7.5CVSS7.2AI score0.01987EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2021/02/10 12:00 a.m.61 views

Microsoft Windows Multiple Vulnerabilities (KB4601319)

This host is missing a critical security update according to Microsoft KB4601319 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.5AI score0.78376EPSS
SaveExploits29References3
Rows per page
Query Builder