Lucene search
K

5807 matches found

OSV
OSV
added 2023/12/21 6:40 p.m.2 views

CLSA-2023-1703184036 squid34: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.1AI score0.88818EPSS
Exploits0References1
CloudLinux
CloudLinux
added 2023/12/21 6:30 p.m.30 views

squid: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.3AI score0.88818EPSS
Exploits0
OSV
OSV
added 2023/12/21 6:30 p.m.3 views

CLSA-2023-1703183411 squid: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.1AI score0.88818EPSS
Exploits0References1
CloudLinux
CloudLinux
added 2023/12/21 6:27 p.m.33 views

squid34: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.3AI score0.88818EPSS
Exploits0
OSV
OSV
added 2023/12/21 6:27 p.m.3 views

CLSA-2023-1703183242 squid34: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.1AI score0.88818EPSS
Exploits0References1
OSV
OSV
added 2023/12/21 6:16 p.m.4 views

CLSA-2023-1703182573 squid: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.1AI score0.88818EPSS
Exploits0References1
OSV
OSV
added 2023/12/21 5:58 p.m.5 views

CLSA-2023-1703181485 squid: Fix of 2 CVEs

CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead - CVE-2023-49286: Fix DoS attack against Helper process management...

8.6CVSS7.2AI score0.88818EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/12/21 12:0 a.m.3 views

PT-2023-31862 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this issue, where the target must...

7.8CVSS7.2AI score0.00525EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/12/20 12:0 a.m.2 views

PT-2023-31848 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a...

3.3CVSS5.7AI score0.00391EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2023/12/20 12:0 a.m.2 views

PT-2023-31855 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this, where the target...

3.3CVSS5.5AI score0.00397EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/12/20 12:0 a.m.2 views

PT-2023-31849 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this, where the target...

3.3CVSS5.5AI score0.00391EPSS
Exploits0References7
Cvelist
Cvelist
added 2023/12/18 9:17 a.m.22 views

CVE-2023-32726 Possible buffer overread from reading DNS responses

The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server...

3.9CVSS8.4AI score0.00673EPSS
Exploits0References4
OSV
OSV
added 2023/12/15 11:6 a.m.3 views

OESA-2023-1932 squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buff...

8.6CVSS6.9AI score0.88818EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2023/12/15 12:0 a.m.38 views

SUSE SLES15 Security Update : squid (SUSE-SU-2023:4825-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4825-1 advisory. - Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a...

8.6CVSS7.8AI score0.88818EPSS
Exploits0References8
OSV
OSV
added 2023/12/13 7:17 p.m.3 views

CLSA-2023-1702495051 perl: Fix of CVE-2023-47100

CVE-2023-47100: fix read/write past buffer end...

6.8AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/12/13 12:0 a.m.47 views

SUSE SLES12 Security Update : squid (SUSE-SU-2023:4724-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4724-1 advisory. - Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a...

8.6CVSS7.8AI score0.88818EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2023/12/06 2:4 a.m.2 views

SUSE CVE-2023-49285

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds fo...

8.6CVSS8.3AI score0.88818EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.3 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created malicious file...

4.9CVSS5.7AI score0.00401EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.3 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.8AI score0.00397EPSS
Exploits0References2Affected Software1
Veracode
Veracode
added 2023/12/05 6:23 a.m.36 views

Denial Of Service (DoS)

libsquid.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to a buffer overread bug in the library. This allows an attacker to cause an application crash during HTTP message processing...

8.6CVSS6.9AI score0.88818EPSS
Exploits0References9Affected Software2
Rows per page
Query Builder