Lucene search
+L

18391 matches found

Fedora
Fedora
added 2021/03/26 5:55 p.m.46 views

[SECURITY] Fedora 33 Update: CGAL-5.1.3-1.fc33

Libraries for CGAL applications. CGAL is a collaborative effort of several sites in Europe and Israel. The goal is to make the most important of the solutions and methods developed in computational geometry available to users in industry and academia in a C++ library. The goal is to provide easy...

10CVSS4.9AI score0.03292EPSS
SaveExploits1
Pen Test Partners Blog
Pen Test Partners Blog
added 2021/03/26 7:46 a.m.328 views

Dumping LSASS in memory undetected using MirrorDump

Introduction As I am sure some of you are aware from the occasional ramblings and screenshots on twitter, I am a big fan of .NET based offensive tooling. Not because it’s trendy or cool, but because of the development speed and ease of testing and debugging in comparison to C/C++. A month or so a...

7AI score
SaveExploits0
Fedora
Fedora
added 2021/03/26 12:55 a.m.50 views

[SECURITY] Fedora 32 Update: lib3mf-2.0.1-1.fc32

lib3mf is a C++ implementation of the 3D Manufacturing Format standard. This is a 3D printing standard for representing geometry as meshes...

8.1CVSS1.7AI score0.0417EPSS
SaveExploits1
CNVD
CNVD
added 2021/03/26 12:00 a.m.10 views

Denial of service vulnerability in c-aff4

c-aff4 is an open source format for storing digital evidence and data. A denial of service vulnerability exists in c-aff4. An attacker could exploit the vulnerability to cause a software crash...

6.9AI score
SaveExploits0
Veracode
Veracode
added 2021/03/25 12:58 a.m.31 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service. A division by zero in coders/jp2.c allows an attacker to cause a denial of service condition by submitting a malicious file...

5.5CVSS3.4AI score0.01126EPSS
SaveExploits0References5Affected Software3
Tenable Nessus
Tenable Nessus
added 2021/03/25 12:00 a.m.36 views

Photon OS 3.0: C PHSA-2021-3.0-0209

An update of the c package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0209. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148129;...

7.5CVSS8.3AI score0.54164EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/03/25 12:00 a.m.12 views

Microsoft Visual Studio Code Code Injection Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A code injection vulnerability in Microsoft Visual Studio Code unofficial C/C++ Advanced Lint extension prior to version 1.9.0 can be exploited by an attacker to execute arbitrary binaries when a user opens a carefully...

7.8CVSS7.7AI score0.01006EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2021/03/25 12:00 a.m.668 views

Worm.Win32.Recyl.dp Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/e4737fb6c231bfb84d1a55ec2fb61641.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Worm.Win32.Recyl.dp Vulnerability: Insecure Permissions Description: creates a dir named "RECYCLER"...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/03/24 12:00 a.m.28 views

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2021-1682)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.9AI score0.07508EPSS
SaveExploits2References2
NVD
NVD
added 2021/03/23 6:15 p.m.30 views

CVE-2021-21401

Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before versions 0.3.9.8 and 0.4.5, decoding a specifically formed message can cause invalid free or realloc calls if the message type contains an oneof field, and the oneof directly contains both a pointer field and ...

7.1CVSS0.01811EPSS
SaveExploits1References4
Prion
Prion
added 2021/03/23 6:15 p.m.29 views

Null pointer dereference

Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before versions 0.3.9.8 and 0.4.5, decoding a specifically formed message can cause invalid free or realloc calls if the message type contains an oneof field, and the oneof directly contains both a pointer field and ...

5.5CVSS6.8AI score0.01811EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
added 2021/03/23 6:15 p.m.36 views

CVE-2021-21401

Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before versions 0.3.9.8 and 0.4.5, decoding a specifically formed message can cause invalid free or realloc calls if the message type contains an oneof field, and the oneof directly contains both a pointer field and ...

7.1CVSS6.9AI score0.01811EPSS
SaveExploits1References6
CVE
CVE
added 2021/03/23 5:45 p.m.172 views

CVE-2021-21401

Nanopb (ANSI C) CVE-2021-21401 affects versions before 0.3.9.8 and 0.4.5, where decoding a specially formed message with a oneof containing both a pointer and a non-pointer field can trigger invalid free()/realloc() calls. Impact: potential memory mismanagement on untrusted data; exploit details ...

7.1CVSS6.9AI score0.01811EPSS
SaveExploits1References4Affected Software1
Photon
Photon
added 2021/03/23 12:00 a.m.50 views

Important Photon OS Security Update - PHSA-2021-0209

Updates of 'c-ares' packages of Photon OS have been released...

5CVSS1.7AI score0.54164EPSS
SaveExploits0
Photon
Photon
added 2021/03/23 12:00 a.m.40 views

Important Photon OS Security Update - PHSA-2021-3.0-0209

Updates of 'c-ares' packages of Photon OS have been released...

7.5CVSS1.7AI score0.54164EPSS
SaveExploits0
Fedora
Fedora
added 2021/03/22 2:10 a.m.43 views

[SECURITY] Fedora 34 Update: lib3mf-2.0.1-1.fc34

lib3mf is a C++ implementation of the 3D Manufacturing Format standard. This is a 3D printing standard for representing geometry as meshes...

8.1CVSS1.7AI score0.0417EPSS
SaveExploits1
CNVD
CNVD
added 2021/03/22 12:00 a.m.12 views

Weak Password Vulnerability in H3C SecPath F1000-C-G2

The H3C SecPath F1000-C-G2 is a firewall from Xinhua San Technologies Co. A weak password vulnerability exists in the H3C SecPath F1000-C-G2, which can be exploited by an attacker to obtain sensitive information...

6.9AI score
SaveExploits0
OSV
OSV
added 2021/03/21 5:15 a.m.17 views

CVE-2021-28953

The unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted repository...

7.8CVSS7.6AI score
SaveExploits0References3
NVD
NVD
added 2021/03/21 5:15 a.m.23 views

CVE-2021-28953

The unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted repository...

7.8CVSS0.01006EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/03/21 5:15 a.m.11 views

CVE-2021-28953

The unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted repository...

7.8CVSS7.8AI score0.01006EPSS
SaveExploits0References4
Rows per page
Query Builder