Lucene search
+L

72 matches found

Cvelist
Cvelist
added 2020/12/16 1:29 p.m.39 views

CVE-2020-29363

An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CKATTRIBUTE, the receiving entity may not...

7.8AI score0.03486EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2020/12/16 12:0 a.m.8 views

PT-2020-6233 · P11 Kit +8 · P11-Kit +8

Name of the Vulnerable Software and Affected Versions: p11-kit versions 0.21.1 through 0.23.21 Description: A heap-based buffer over-read has been discovered in the RPC protocol used by the p11-kit server/remote commands and the client library. When the remote entity supplies a byte array through...

7.5CVSS6.6AI score0.03486EPSS
SaveExploits0References80
RedhatCVE
RedhatCVE
added 2020/12/15 2:8 p.m.49 views

CVE-2020-29363

An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CKATTRIBUTE, the receiving entity may not...

7.5CVSS3.9AI score0.03486EPSS
SaveExploits0References4
Veracode
Veracode
added 2020/12/13 4:16 a.m.26 views

Denial Of Service (DoS)

p11-kit is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer over-read has been discovered in the RPC protocol used by the p11-kit server/remote commands and the client library in versions 0.21.1 up to 0.23.21. When the remote entity supplies a byte array...

5.3CVSS3.5AI score0.02243EPSS
SaveExploits0References5Affected Software6
Positive Technologies
Positive Technologies
added 2020/11/27 12:0 a.m.8 views

PT-2020-5853 · P11 Kit +7 · P11-Kit +7

Name of the Vulnerable Software and Affected Versions: p11-kit versions 0.23.6 through 0.23.21 Description: A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array i...

7.5CVSS6.7AI score0.03486EPSS
SaveExploits0References60
Github Security Blog
Github Security Blog
added 2019/09/30 7:42 p.m.36 views

High severity vulnerability that affects PeterO.Cbor

Impact The CBOR library supports optional tags that enable CBOR objects to contain references to objects within them. Versions earlier than 4.0 resolved those references automatically. While this by itself doesn't cause much of a security problem, a denial of service can happen if those reference...

0.1AI score
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/03/07 10:0 p.m.38 views

CVE-2017-12174

It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError...

7.5AI score0.05966EPSS
SaveExploits0References12
CNVD
CNVD
added 2016/07/25 12:0 a.m.4 views

Google Chrome 'ByteArray::Get' method heap buffer overflow vulnerability

Google Chrome is a web browser developed by Google Google Inc. Google sfntly is one of the font toolkits for using, editing and creating SFNT-based fonts. Google sfntly used in versions of Google Chrome prior to 52.0.2743.82 The 'ByteArray::Get' method in the data/bytearray.cc file in versions...

8.8CVSS9.2AI score0.01504EPSS
SaveExploits0References1
OSV
OSV
added 2016/07/23 7:59 p.m.6 views

CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

8.8CVSS6.3AI score
SaveExploits0References13
OSV
OSV
added 2015/07/08 2:59 p.m.7 views

UBUNTU-CVE-2015-5119

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 AS3 implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of...

9.8CVSS7.8AI score0.99344EPSS
SaveExploits7References8
RedHat Linux
RedHat Linux
added 2014/04/17 11:30 a.m.9 views

OpenJDK: com.sun.org.apache.xml.internal.security.utils.UnsyncByteArrayOutputStream Denial of Service (Security, 8021290)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via unknown vectors related to Security...

5CVSS6.8AI score0.04732EPSS
SaveExploits0References5
zdt
zdt
added 2008/12/09 12:0 a.m.17 views

linux x86 shellcode obfuscator

Exploit for linux/x86 platform in category shellcode ============================== linux x86 shellcode obfuscator ============================== / sm4x - 2008 = sm4x0rcist a7 gmail d07 com - sh3llc0der.c v0.1 beta - elf binary shellcode encryptor, NULL free for IDS payload bypassing - key is a...

7AI score
SaveExploits0
Rows per page
Query Builder