Lucene search
+L

4121 matches found

Github Security Blog
Github Security Blog
added 2021/11/10 8:15 p.m.39 views

NUL character in ROA causes OctoRPKI to crash

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character. Patches For more information If you have any questions or comments about this advisory email us at [email protected]...

7.5CVSS7.5AI score0.01255EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2021/11/10 8:15 p.m.21 views

GHSA-5MXH-2QFV-4G7J NUL character in ROA causes OctoRPKI to crash

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character. Patches For more information If you have any questions or comments about this advisory email us at [email protected]...

7.5CVSS7.5AI score0.01255EPSS
SaveExploits0References7
OSV
OSV
added 2021/11/10 8:41 a.m.31 views

RLSA-2021:4595 Moderate: binutils security update

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fixes: Developer environment:...

8.5CVSS8.1AI score0.12205EPSS
SaveExploits4References2
OSV
OSV
added 2021/11/10 8:39 a.m.34 views

RLSA-2021:4593 Moderate: annobin security update

Annobin provides a compiler plugin to annotate and tools to examine compiled binary files. Security Fixes: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in annobin in order to facilitate...

8.5CVSS8AI score0.12205EPSS
SaveExploits4References2
OSV
OSV
added 2021/11/10 8:39 a.m.18 views

ALSA-2021:4593 Moderate: annobin security update

Annobin provides a compiler plugin to annotate and tools to examine compiled binary files. Security Fixes: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in annobin in order to facilitate...

8.3CVSS8AI score0.12205EPSS
SaveExploits4References1
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:0 a.m.12 views

The vulnerability of the character determination function in the implementation of the Unicode standard, related to errors in code generation using homoglyphs, allows a violator to execute arbitrary code.

The vulnerability of the character determination function in the implementation of the Unicode standard is related to errors in code generation using homoglyphs. Exploiting this vulnerability can allow a remote attacker to generate arbitrary codes...

10CVSS8AI score0.04485EPSS
SaveExploits1References7Affected Software2
OSV
OSV
added 2021/11/08 4:37 p.m.8 views

CLSA-2021-1636389447 Fixed CVEs in glibc: CVE-2021-43396, CVE-2021-3326

CVE-2021-3326: avoid denial of service due to a failed assertion - CVE-2021-43396: check actual stored character in state reset code...

7.5CVSS6.9AI score0.03093EPSS
SaveExploits1References1
Veracode
Veracode
added 2021/11/05 1:37 a.m.36 views

Denial Of Service (DoS)

rust:edge is vulnerable to denial of service. The vulnerability exists as it permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters causing an...

8.3CVSS3.6AI score0.12205EPSS
SaveExploits4References22Affected Software13
Tenable Nessus
Tenable Nessus
added 2021/10/29 12:0 a.m.47 views

Adobe Character Animator 4.0.0 < 4.4.2 Multiple Vulnerabilities (APSB21-95)

The version of Adobe Character Animator installed on the remote Windows host is prior to 4.4.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-95 advisory. - Adobe Character Animator version 4.4 and earlier is affected by a memory corruption vulnerability when...

9.3CVSS6.9AI score0.01588EPSS
SaveExploits0References9
Zero Day Initiative
Zero Day Initiative
added 2021/10/28 12:0 a.m.28 views

Adobe Character Animator SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Character Animator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

3.3CVSS2.6AI score0.01151EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/10/27 12:0 a.m.40 views

Adobe Character Animator 2021 out-of-bounds read vulnerability

Adobe Character Animator is a motion capture and animation tool from Adobe. Adobe Character Animator 2021 4.4 and earlier versions contain an out-of-bounds read vulnerability that can be exploited by attackers to bypass mitigations such as ASLR and cause sensitive memory leaks...

4.3CVSS5AI score0.01155EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/27 12:0 a.m.6 views

Adobe Character Animator 代码问题漏洞

Adobe Character Animator is a motion capture and animation tool from Adobe. Adobe Character Animator 2021 4.4 and earlier versions contain a null pointer dereference vulnerability that could be exploited by attackers to implement an application denial of service in the context of the current user...

5.5CVSS5.6AI score0.01131EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/10/27 12:0 a.m.6 views

Adobe Character Animator 缓冲区错误漏洞

Adobe Character Animator is a motion capture and animation tool from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Character Animator 2021 4.4 and earlier versions, which can be exploited by an attacker to bypass mitigations such as ASLR and cause a...

4.3CVSS5.7AI score0.01151EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/10/27 12:0 a.m.6 views

Adobe Character Animator 缓冲区错误漏洞

Adobe Character Animator is a motion capture and animation tool from Adobe. Adobe Character Animator 2021 4.4 and earlier versions contain a memory corruption vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

9.3CVSS6.2AI score0.01588EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/10/27 12:0 a.m.6 views

Adobe Character Animator 缓冲区错误漏洞

Adobe Character Animator is a motion capture and animation tool from Adobe. Adobe Character Animator 2021 4.4 and earlier versions contain a memory corruption vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

9.3CVSS6.2AI score0.01588EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/10/27 12:0 a.m.3 views

Adobe Character Animator 缓冲区错误漏洞

Adobe Character Animator is a motion capture and animation tool from Adobe. Adobe Character Animator 2021 4.4 and earlier versions contain an out-of-bounds read vulnerability that can be exploited by attackers to bypass mitigations such as ASLR and cause sensitive memory leaks...

4.3CVSS5.6AI score0.01155EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/10/27 12:0 a.m.25 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : xterm Vulnerability (NS-SA-2021-0107)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has xterm packages installed that are affected by a vulnerability: - xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining charact...

9.8CVSS8.7AI score0.07541EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/10/27 12:0 a.m.178 views

Adobe Character Animator 2021 memory buffer out-of-bounds access vulnerability

Adobe Character Animator is a motion capture and animation tool that provides everyone with an easy-to-use solution for intuitive 2D character animation, real-time animation, and easy sharing and publishing of characters. Adobe Character Animator 2021 4.4 and earlier versions have a memory buffer...

9.3CVSS5.3AI score0.01588EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/10/27 12:0 a.m.36 views

Adobe Character Animator 2021 null pointer dereference vulnerability (CNVD-2022-67829)

Adobe Character Animator is a motion capture and animation tool from Adobe. Adobe Character Animator 2021 4.4 and earlier versions contain a null pointer dereference vulnerability that could be exploited by attackers to implement an application denial of service in the context of the current user...

5.5CVSS4.6AI score0.01131EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/10/27 12:0 a.m.42 views

Adobe Character Animator 2021 Memory Buffer Out-of-Bounds Access Vulnerability (CNVD-2022-67830)

Adobe Character Animator is a motion capture and animation tool from Adobe. Adobe Character Animator 2021 4.4 and earlier versions contain a memory buffer out-of-bounds access vulnerability that could be exploited by attackers to implement an application denial of service in the context of the...

5.5CVSS5.3AI score0.01127EPSS
SaveExploits0References1
Rows per page
Query Builder