Lucene search
+L

1243 matches found

Tenable Nessus
Tenable Nessus
•added 2022/12/07 12:00 a.m.•44 views

SUSE SLES12 Security Update : bcel (SUSE-SU-2022:4331-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:4331-1 advisory. - CVE-2022-42920: Fixed producing arbitrary bytecode via out-of-bounds writing bsc1205125. Tenable has extracted the preceding description...

9.8CVSS7AI score0.03009EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2022/12/02 12:00 a.m.•50 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : bcel (SUSE-SU-2022:4306-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:4306-1 advisory. - CVE-2022-42920: Fixed producing arbitrary bytecode via out-of-bounds writing bsc1205125. Tenable has...

9.8CVSS7AI score0.03009EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2022/11/16 9:05 p.m.•40 views

Security Bulletin: IBM SDK, Java Technology Edition, Security Update July 2022

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, 8 that is used by Rational Application Developer®. These issues were disclosed as part of the IBM Java SDK updates up to July 2022. IBM 8 SR7 FP15 1.8.0341. Vulnerability Details CVEID:CVE-2022-21496 DESCRIPTION: An...

5.9CVSS7.2AI score0.06946EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2022/11/10 12:00 a.m.•19 views

Wasmtime 安全漏洞

Wasmtime is a standalone WebAssembly and WASI-only wasm optimization runtime open-sourced by the Bytecode Alliance. A security vulnerability exists in versions of Wasmtime prior to 2.0.2 that stems from a data leak between instances in its pool allocator...

8.6CVSS7.8AI score0.00713EPSS
SaveExploits0References4
Veracode
Veracode
•added 2022/11/08 7:11 a.m.•47 views

Out-of-bound Write

Apache Commons BCEL is vulnerable to Out-of-bound Write. The vulnerability is due to ConstantPool.java and ConstantPoolGen.java improperly handing MAXCPENTRIES which allows an attacker to pass data to specific APIs and control the resulting bytecode causing out-of-bound writes...

9.8CVSS8.9AI score0.03009EPSS
SaveExploits0References14Affected Software1
Github Security Blog
Github Security Blog
•added 2022/11/07 7:00 p.m.•76 views

Apache Commons BCEL vulnerable to out-of-bounds write

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS9AI score0.03009EPSS
SaveExploits0References13Affected Software1
OSV
OSV
•added 2022/11/07 7:00 p.m.•277 views

GHSA-97XG-PHPR-RG8Q Apache Commons BCEL vulnerable to out-of-bounds write

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS9.6AI score0.03009EPSS
SaveExploits0References13
OSV
OSV
•added 2022/11/07 1:15 p.m.•7 views

DEBIAN-CVE-2022-42920

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS7.5AI score0.03009EPSS
SaveExploits0References1
NVD
NVD
•added 2022/11/07 1:15 p.m.•41 views

CVE-2022-42920

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS0.03009EPSS
SaveExploits0References6
OSV
OSV
•added 2022/11/07 1:15 p.m.•13 views

UBUNTU-CVE-2022-42920

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS6.9AI score0.03009EPSS
SaveExploits0References8
Prion
Prion
•added 2022/11/07 1:15 p.m.•56 views

Out-of-bounds

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

7.5CVSS9.3AI score0.03009EPSS
SaveExploits0References6Affected Software2
attackerkb
attackerkb
•added 2022/11/07 1:15 p.m.•8 views

CVE-2022-42920

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS5.9AI score0.03009EPSS
SaveExploits0References10
Mend
Mend
•added 2022/11/07 12:00 a.m.•3 views

CVE-2022-42920

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS0.03009EPSS
SaveExploits0References19
OSV
OSV
•added 2022/11/07 12:00 a.m.•48 views

CVE-2022-42920 Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

6.9AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2022/11/07 12:00 a.m.•40 views

CVE-2022-42920 Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.7AI score0.03009EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/07 12:00 a.m.•2 views

CVE-2022-42920: Out-of-bounds Write

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS8.1AI score0.03009EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2022/11/07 12:00 a.m.•78 views

CVE-2022-42920

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS6.9AI score0.03009EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2022/11/07 12:00 a.m.•10 views

Apache Commons BCEL 缓冲区错误漏洞

Apache Commons BCEL is the United States Apache Apache Foundation of a byte code engineering library . It is designed to provide users with a convenient way to analyze, create and manipulate binary Java classes. A buffer error vulnerability exists in Apache Commons BCEL, which stems from an...

9.8CVSS7.7AI score0.03009EPSS
SaveExploits0References18
CVE
CVE
•added 2022/11/07 12:00 a.m.•394 views

CVE-2022-42920

The CVE-2022-42920 issue affects Apache Commons BCEL. The vulnerability arises from an out-of-bounds write in multiple BCEL APIs that modify class characteristics, allowing attacker-controlled data to produce arbitrary bytecode. This could enable an attacker to gain higher control over the genera...

9.8CVSS9AI score0.03009EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
•added 2022/11/07 12:00 a.m.•59 views

CVE-2022-42920

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS7.4AI score0.03009EPSS
SaveExploits0
Rows per page
Query Builder