Lucene search
+L

6353 matches found

AlpineLinux
AlpineLinux
added 2024/06/27 10:30 a.m.198 views

CVE-2024-5535

Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such as unexpected application beahviour or ...

9.1CVSS8AI score0.05582EPSS
SaveExploits1
OSV
OSV
added 2024/06/27 10:30 a.m.42 views

CVE-2024-5535 SSL_select_next_proto buffer overread

Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such as unexpected application beahviour or ...

9.1CVSS7AI score
SaveExploits0References23
Tenable Nessus
Tenable Nessus
added 2024/06/27 12:00 a.m.235 views

OpenSSL 3.1.0 < 3.1.7 Vulnerability

The version of OpenSSL installed on the remote host is prior to 3.1.7. It is, therefore, affected by a vulnerability as referenced in the 3.1.7 advisory. - Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or memor...

9.1CVSS7.6AI score0.05582EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2024/06/27 12:00 a.m.56 views

OpenSSL Buffer Overread Vulnerability (20240627) - Windows

OpenSSL is prone to a buffer overread vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

9.1CVSS9.6AI score0.05582EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2024/06/27 12:00 a.m.30 views

OpenSSL Buffer Overread Vulnerability (20240627) - Linux

OpenSSL is prone to a buffer overread vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

9.1CVSS9.6AI score0.05582EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2024/06/27 12:00 a.m.508 views

CVE-2024-5535

Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such as unexpected application beahviour or ...

9.1CVSS7AI score0.05582EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/06/27 12:00 a.m.12 views

PT-2024-36813

Name of the Vulnerable Software and Affected Versions CPython versions 3.9 and earlier Description The issue arises from configuring an empty list for SSLContext.set npn protocols, which is an invalid value for the underlying OpenSSL API, resulting in a buffer over-read when NPN is used. This is...

6.5CVSS8AI score0.00744EPSS
SaveExploits1References93
Tenable Nessus
Tenable Nessus
added 2024/06/27 12:00 a.m.649 views

OpenSSL 1.1.1 < 1.1.1za Vulnerability

The version of OpenSSL installed on the remote host is prior to 1.1.1za. It is, therefore, affected by a vulnerability as referenced in the 1.1.1za advisory. - Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or...

9.1CVSS7.6AI score0.05582EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/06/27 12:00 a.m.470 views

OpenSSL 3.0.0 < 3.0.15 Vulnerability

The version of OpenSSL installed on the remote host is prior to 3.0.15. It is, therefore, affected by a vulnerability as referenced in the 3.0.15 advisory. - Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or...

9.1CVSS7.6AI score0.05582EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/06/26 12:00 a.m.3 views

PT-2024-6694 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this issue, where the...

7.1CVSS7.6AI score0.00423EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/06/26 12:00 a.m.7 views

PT-2024-6610 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this, where the targ...

5.5CVSS6.8AI score0.00371EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/06/24 12:00 a.m.9 views

FreeRTOS-Plus-TCP Security Vulnerability

FreeRTOS-Plus-TCP is an extensible open source and thread-safe TCP/IP stack for FreeRTOS. A security vulnerability exists in FreeRTOS-Plus-TCP versions prior to 4.1.1 that stems from a buffer over-read in the DNS response parser...

9.6CVSS7AI score0.00615EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/06/20 12:00 a.m.9 views

The vulnerability in the web interface of microprogramming software for devices that control lighting and energy consumption from a distance—Schneider Electric Sage—allows a perpetrator to trigger a service failure.

The vulnerability of the web interface of microprogramming software for devices for remote control of lighting and energy consumption in Schneider Electric Sage is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service...

5.3CVSS5.7AI score0.00894EPSS
SaveExploits0References2
OSV
OSV
added 2024/06/14 2:00 p.m.25 views

RLSA-2024:3668 Moderate: ruby:3.1 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby 3.1. Rocky Linux-35449 Security Fixes: ruby: Buffer overread...

6.6CVSS7.9AI score0.02364EPSS
SaveExploits0References4
Rockylinux
Rockylinux
added 2024/06/14 2:00 p.m.42 views

ruby:3.3 security, bug fix, and enhancement update

An update is available for rubygem-pg, module.rubygem-mysql2, rubygem-mysql2, module.rubygem-pg. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is an...

9.8CVSS7AI score0.02364EPSS
SaveExploits0
OSV
OSV
added 2024/06/14 2:00 p.m.31 views

RLSA-2024:3671 Moderate: ruby:3.3 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby 3.3. Rocky Linux-37697 Security Fixes: ruby: Buffer overread...

6.6CVSS7.9AI score0.02364EPSS
SaveExploits0References4
Rockylinux
Rockylinux
added 2024/06/14 1:59 p.m.29 views

xorg-x11-server-Xwayland security update

An update is available for xorg-x11-server-Xwayland. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Xwayland is an X server for running X clients under Wayland...

7.8CVSS7.9AI score0.01859EPSS
SaveExploits0
Rockylinux
Rockylinux
added 2024/06/14 1:59 p.m.33 views

ruby:3.3 security, bug fix, and enhancement update

An update is available for module.rubygem-abrt, rubygem-mysql2, module.rubygem-pg, ruby, module.rubygem-mysql2, rubygem-abrt, module.ruby, rubygem-pg. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.8CVSS7AI score0.02364EPSS
SaveExploits0
OSV
OSV
added 2024/06/14 1:59 p.m.37 views

RLSA-2024:3670 Moderate: ruby:3.3 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby 3.3. Rocky Linux-37446 Security Fixes: ruby: Buffer overread...

9.8CVSS7.9AI score0.02364EPSS
SaveExploits0References4
OSV
OSV
added 2024/06/14 1:59 p.m.17 views

RLSA-2024:3258 Moderate: xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents CVE-2024-31080 xorg-x11-server:...

7.8CVSS7.9AI score0.01859EPSS
SaveExploits0References4
Rows per page
Query Builder