Lucene search
+L

18127 matches found

Tenable Nessus
Tenable Nessus
added 2024/01/16 12:00 a.m.16 views

EulerOS 2.0 SP10 : json-c (EulerOS-SA-2023-3216)

According to the versions of the json-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary...

9.8CVSS7AI score0.01287EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:00 a.m.21 views

EulerOS 2.0 SP10 : json-c (EulerOS-SA-2023-3181)

According to the versions of the json-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary...

9.8CVSS7AI score0.01287EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:00 a.m.29 views

EulerOS Virtualization 3.0.6.6 : c-ares (EulerOS-SA-2023-3394)

According to the versions of the c-ares packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARESRANDOMFILE wil...

7.5CVSS6.4AI score0.01577EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:00 a.m.38 views

EulerOS 2.0 SP11 : protobuf-c (EulerOS-SA-2023-2704)

According to the versions of the protobuf-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember. CVE-2022-48468 Note that Tenable Network Security has...

5.5CVSS6.6AI score0.00369EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/15 10:15 a.m.9 views

AZL-33550 CVE-2023-6915 affecting package kernel for versions less than 5.15.148.2-2

A Null pointer dereference problem was found in idafree in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return...

5.5CVSS6.5AI score0.00258EPSS
SaveExploits0References1
AlmaLinux
AlmaLinux
added 2024/01/15 12:00 a.m.61 views

Moderate: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

7.3CVSS7.5AI score0.01249EPSS
SaveExploits1References4
IBM Security Bulletins
IBM Security Bulletins
added 2024/01/12 6:47 p.m.28 views

Security Bulletin: A vulnerability in json-c may affect IBM Robotic Process Automation for Cloud Pak and result in arbitrary code execution (CVE-2020-12762).

Summary json-c is used by IBM Robotic Process Automation as part of base container images. CVE-2020-12762. Vulnerability Details CVEID:CVE-2020-12762 DESCRIPTION: json-c could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow and out-of-bounds write. B...

7.8CVSS8.3AI score0.01904EPSS
SaveExploits1Affected Software1
NVD
NVD
added 2024/01/12 2:15 p.m.13 views

CVE-2023-0437

When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...

7.5CVSS6.1AI score0.01103EPSS
SaveExploits0References4
OSV
OSV
added 2024/01/12 2:15 p.m.19 views

UBUNTU-CVE-2023-0437

When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...

7.5CVSS7.2AI score0.01103EPSS
SaveExploits0References3
MongoDB
MongoDB
added 2024/01/12 2:13 p.m.44 views

MongoDB client C Driver may infinitely loop when validating certain BSON input data

When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...

7.5CVSS7AI score0.01103EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/12 1:33 p.m.35 views

CVE-2023-0437 MongoDB client C Driver may infinitely loop when validating certain BSON input data

When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...

5.3CVSS7.6AI score0.01103EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/01/12 1:33 p.m.14 views

CVE-2023-0437 MongoDB client C Driver may infinitely loop when validating certain BSON input data

When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...

5.3CVSS6AI score0.01103EPSS
SaveExploits0References2
CVE
CVE
added 2024/01/12 1:33 p.m.96 views

CVE-2023-0437

The CVE-2023-0437 issue affects the MongoDB C Driver: all versions prior to 1.25.0 are vulnerable due to a loop in bson_utf8_validate that may exit never, potentially causing an infinite loop. This is supported by multiple sources in connected data (MongoDB advisory, Debian/LTS entries, and distr...

7.5CVSS6AI score0.01103EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/01/12 1:33 p.m.14 views

CVE-2023-0437 MongoDB client C Driver may infinitely loop when validating certain BSON input data

When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...

5.3CVSS5.9AI score
SaveExploits0References6
Debian CVE
Debian CVE
added 2024/01/12 1:33 p.m.75 views

CVE-2023-0437

When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...

7.5CVSS7.7AI score0.01103EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/01/12 12:00 a.m.8 views

PT-2024-2760 · Mongodb +3 · Mongodb C Driver +3

Name of the Vulnerable Software and Affected Versions: MongoDB C Driver versions prior to 1.25.0 Description: The issue is related to the bson utf8 validate function in the MongoDB C Driver, which can cause an infinite loop when called with certain inputs. This may allow a remote attacker to caus...

8.4CVSS6.2AI score0.02797EPSS
SaveExploits0References42
UbuntuCve
UbuntuCve
added 2024/01/12 12:00 a.m.36 views

CVE-2023-0437

When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...

7.5CVSS6.8AI score0.01103EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/01/12 12:00 a.m.10 views

Ubuntu: Security Advisory (USN-6579-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.2AI score0.09503EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/01/12 12:00 a.m.23 views

Debian: Security Advisory (DLA-3704-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.01381EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2024/01/11 7:17 p.m.589 views

Exploit for Untrusted Search Path in Microsoft

Privilege escalation using the XAML diagnostics API CVE-2023-...

7.3CVSS7.7AI score0.02822EPSS
SaveExploits2
Rows per page
Query Builder