Lucene search
+L

12248 matches found

Veracode
Veracode
added 2018/06/07 4:56 a.m.31 views

Denial Of Service (DoS)

libjasper.so is vulnerableto denial of service DoS. The vulnerability exists because an attacker can send a malicious file to the jasimageishomosamp function in libjasper/base/jasimage.c, leading to heap-based buffer over-read and crash the application...

6.5CVSS6.7AI score0.02225EPSS
SaveExploits1References10Affected Software1
Amazon
Amazon
added 2018/06/07 12:00 a.m.35 views

Important: curl

Issue Overview: Curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command...

9.8CVSS9.8AI score0.05927EPSS
SaveExploits0
NVD
NVD
added 2018/06/06 9:29 p.m.25 views

CVE-2018-3562

Buffer over -read can occur while processing a FILS authentication frame in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

7.1CVSS4.9AI score0.00321EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/06/06 9:00 p.m.35 views

CVE-2018-3562

Buffer over -read can occur while processing a FILS authentication frame in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

5.5AI score0.00321EPSS
SaveExploits0References1
Debian
Debian
added 2018/06/06 6:52 p.m.122 views

[SECURITY] [DSA 4218-1] memcached security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4218-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 06, 2018 https://www.debian.org/security/faq -...

7.5CVSS0.9AI score0.88114EPSS
SaveExploits8
OpenVAS
OpenVAS
added 2018/06/05 12:00 a.m.59 views

Debian: Security Advisory (DSA-4218-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.4AI score0.88114EPSS
SaveExploits6References4
Veracode
Veracode
added 2018/06/01 6:26 a.m.21 views

Denial Of Service (DoS)

freexl is susceptible to denial of serviceDoS. The attack can launched by sending a malicious file to destroycell function, leading to heap-based buffer over-read...

8.8CVSS8.4AI score0.02135EPSS
SaveExploits1References9Affected Software1
android
android
added 2018/06/01 12:00 a.m.34 views

CVE-2018-3569

A buffer over-read can occur during a fast initial link setup FILS connection in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

7.2CVSS3.7AI score0.00199EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2018/05/31 10:18 p.m.32 views

CVE-2018-11625

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

8.8CVSS4.5AI score0.02272EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2018/05/31 8:48 p.m.29 views

CVE-2018-11439

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file...

6.5CVSS5AI score0.02847EPSS
SaveExploits1References2
NVD
NVD
added 2018/05/31 4:29 p.m.35 views

CVE-2018-11625

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

8.8CVSS8.4AI score0.02272EPSS
SaveExploits1References2
OSV
OSV
added 2018/05/31 4:29 p.m.7 views

CVE-2018-11625

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

8.8CVSS8.3AI score
SaveExploits0References2
Prion
Prion
added 2018/05/31 4:29 p.m.29 views

Heap overflow

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

6.8CVSS8.2AI score0.02272EPSS
SaveExploits1References2Affected Software2
NVD
NVD
added 2018/05/31 12:29 a.m.24 views

CVE-2018-11576

ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor...

9.8CVSS9.6AI score0.01444EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/05/31 12:00 a.m.35 views

CVE-2018-11576

ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor...

9.6AI score0.01444EPSS
SaveExploits0References2
CVE
CVE
added 2018/05/31 12:00 a.m.58 views

CVE-2018-11576

CVE-2018-11576 affects MiniUPnP ngiflib 0.4, where a heap-based buffer over-read occurs in GifIndexToTrueColor within ngiflib.c. Multiple sources (NVD, CNVD, OSV, PRION) report this as a high-severity vulnerability with a network attack vector and no authentication required; CVSSv3 base score 9.8...

9.8CVSS9.5AI score0.01444EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/05/31 12:00 a.m.141 views

SUSE SLES11 Security Update : curl (SUSE-SU-2018:1478-1)

This update for curl fixes the following issues : - CVE-2018-1000301: Fixed a buffer over-read caused by bad RTSP headers bsc1092098 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

9.1CVSS7.8AI score0.05927EPSS
SaveExploits0References4
Prion
Prion
added 2018/05/30 1:29 p.m.20 views

Heap overflow

The mobigetkf8boundaryseqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

4.3CVSS6.2AI score0.01434EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2018/05/30 1:29 p.m.17 views

CVE-2018-11439

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file...

6.5CVSS6.4AI score0.02847EPSS
SaveExploits1References3
NVD
NVD
added 2018/05/30 1:29 p.m.22 views

CVE-2018-11434

The bufferfill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

6.5CVSS6.3AI score0.01434EPSS
SaveExploits1References1
Rows per page
Query Builder