Lucene search
K

60 matches found

OSV
OSV
added 2024/11/18 4:15 a.m.1 views

UBUNTU-CVE-2024-38828

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

5.3CVSS6.8AI score0.00076EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:16 a.m.2 views

SUSE CVE-2015-5119

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 AS3 implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of...

9.8CVSS7.9AI score0.93205EPSS
Exploits6References8
SUSE CVE
SUSE CVE
added 2023/02/15 5:7 a.m.2 views

SUSE CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

8.8CVSS9.6AI score0.0155EPSS
Exploits0References7
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:0 a.m.15 views

Adobe Flash Player Use-After-Free Vulnerability

A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution...

10CVSS7AI score0.93205EPSS
In wildExploits6
OSV
OSV
added 2022/02/10 10:46 p.m.0 views

GHSA-FG2V-W576-W4V3 Out of bounds read in json-smart

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions prior to 1.3.3 and 2.4.5 which causes a denial of service DOS via a crafted web request...

7.5CVSS6.8AI score0.00108EPSS
Exploits1References10
CNNVD
CNNVD
added 2021/06/01 12:0 a.m.2 views

Github json-smart-v1 缓冲区错误漏洞

Github json-smart-v1 is a Github open source application . Provides all non-indexed data in the data store as serialized JSON messages stored in the columns function . A security vulnerability exists in JSON Smart versions 1.3 and 2.4, which originates in the indexOf function of JSONParserByteArr...

7.5CVSS6.5AI score0.00108EPSS
Exploits1References13
GithubExploit
GithubExploit
added 2018/02/09 1:30 p.m.2 views

Exploit for Use After Free in Adobe Flash_Player

CVE-2018-4878 POC CVE-2018-4878 was first demonstrated being...

10CVSS9.2AI score0.93511EPSS
Exploits24
seebug.org
seebug.org
added 2017/10/20 12:0 a.m.50 views

Adobe Flash Player Infinite Recursion Arbitrary Read Access Violation(CVE-2016-4132)

SUMMARY A potentially exploitable read access violation vulnerability exists in the a way Adobe Flash Player handles infinitely recursive calls. A specially crafted ActionScript code can cause a read access violation which can potentially be further abused. To trriger this vulnerability user...

9.3CVSS9.1AI score0.02922EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2017/04/17 12:0 a.m.27 views

Flash Player < 25.0.0.148 Multiple RCE (APSB17-10)

Binary data 700058.prm...

10CVSS9.1AI score0.53858EPSS
Exploits2References8
Zero Day Initiative
Zero Day Initiative
added 2017/04/11 12:0 a.m.30 views

Adobe Flash ByteArray Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

6.8CVSS2AI score0.013EPSS
Exploits0References1
Exploit DB
Exploit DB
added 2017/01/14 12:0 a.m.60 views

Adobe Flash Player - Integer Overflow

// Exploit Title: Adobe Flash Player - Integer Overflow // Exploit Author: Matteo Memelli ryujin@offensive-security // Date: 14/01/2017 // Original PoC: https://bugs.chromium.org/p/project-zero/issues/detail?id=323&can=1&q=Shader // CVE: CVE-2015-3104 // Reference:...

10CVSS9.6AI score0.04479EPSS
Exploits1
BDU FSTEC
BDU FSTEC
added 2016/09/07 12:0 a.m.1 views

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the ByteArray::Get method in the Google Chrome browser component is due to buffer overflow in the dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions or other effects using a specially crafted SFNT font...

6.8CVSS8.1AI score0.0155EPSS
Exploits0References6Affected Software1
RedHat Linux
RedHat Linux
added 2016/07/26 5:18 a.m.2 views

chromium-browser: heap-buffer-overflow in sfntly

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

8.8CVSS7.7AI score0.0155EPSS
Exploits0References5
NVD
NVD
added 2016/07/23 7:59 p.m.12 views

CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

8.8CVSS9.3AI score0.0155EPSS
Exploits0References13
UbuntuCve
UbuntuCve
added 2016/07/23 7:59 p.m.27 views

CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

8.8CVSS7.5AI score0.0155EPSS
Exploits0References2
Prion
Prion
added 2016/07/23 7:59 p.m.11 views

Heap overflow

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

6.8CVSS8AI score0.0155EPSS
Exploits0References13Affected Software1
Debian CVE
Debian CVE
added 2016/07/23 7:0 p.m.21 views

CVE-2016-1709

Removed by vendor...

8.8CVSS9.3AI score0.0155EPSS
Exploits0
CVE
CVE
added 2016/07/23 7:0 p.m.87 views

CVE-2016-1709

CVE-2016-1709 describes a heap-buffer-overflow in the ByteArray::Get method of data/byte_array.cc in Google sfntly, affecting Google Chrome prior to 52.0.2743.82 (sfntly used by Chrome). The vulnerability could allow a remote attacker to cause a denial of service or other unspecified impact via a...

8.8CVSS9.2AI score0.0155EPSS
Exploits0References13Affected Software1
Cvelist
Cvelist
added 2016/07/23 7:0 p.m.17 views

CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

9.3AI score0.0155EPSS
Exploits0References13
RedhatCVE
RedhatCVE
added 2016/07/21 8:19 a.m.19 views

CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

8.8CVSS6.4AI score0.0155EPSS
Exploits0References2
Rows per page
Query Builder