Lucene search
K

3142 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2024/01/05 5:50 a.m.44 views

Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance - Identity Manager software component

Summary Multiple security vulnerabilities have been addressed in IBM Security Verify Governance - Identity Manager software component. Vulnerability Details CVEID:CVE-2023-2976 DESCRIPTION: Google Guava could allow a local authenticated attacker to obtain sensitive information, caused by a flaw...

7.5CVSS7.8AI score0.0486EPSS
Exploits4Affected Software1
Debian
Debian
added 2023/12/30 6:31 p.m.17 views

[SECURITY] [DLA 3699-1] libde265 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3699-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 30, 2023 https://wiki.debian.org/LTS -...

8.8CVSS9.3AI score0.00874EPSS
Exploits3
SUSE CVE
SUSE CVE
added 2023/12/25 2:11 a.m.1 views

SUSE CVE-2023-48704

ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

7.5CVSS7.3AI score0.00495EPSS
Exploits0References3
NVD
NVD
added 2023/12/22 4:15 p.m.19 views

CVE-2023-48704

ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

7.5CVSS0.00495EPSS
Exploits0References2
Prion
Prion
added 2023/12/22 4:15 p.m.16 views

Heap overflow

ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

5CVSS7.5AI score0.00495EPSS
Exploits0References2Affected Software2
UbuntuCve
UbuntuCve
added 2023/12/22 4:15 p.m.19 views

CVE-2023-48704

ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

7.5CVSS6.9AI score0.00495EPSS
Exploits0References3
OSV
OSV
added 2023/12/22 4:15 p.m.1 views

UBUNTU-CVE-2023-48704

ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

7.5CVSS6AI score0.00495EPSS
Exploits0References4
OSV
OSV
added 2023/12/22 3:18 p.m.4 views

CVE-2023-48704 Unauthenticated heap buffer overflow in Gorrila codec decompression

ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

7CVSS7.6AI score0.00495EPSS
Exploits0References4
CVE
CVE
added 2023/12/22 3:18 p.m.48 views

CVE-2023-48704

The CVE-2023-48704 issue affects ClickHouse server and is caused by a heap buffer overflow in the Gorilla codec decompression logic. An unauthenticated attacker can send a crafted payload to the native interface (default port 9000/tcp) to crash the ClickHouse server. Public details in connected s...

7.5CVSS7.3AI score0.00495EPSS
Exploits0References2Affected Software2
Cvelist
Cvelist
added 2023/12/22 3:18 p.m.24 views

CVE-2023-48704 Unauthenticated heap buffer overflow in Gorrila codec decompression

ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

7CVSS7.9AI score0.00495EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2023/12/22 3:18 p.m.19 views

CVE-2023-48704

ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

7.5CVSS7.6AI score0.00495EPSS
Exploits0
CNNVD
CNNVD
added 2023/12/22 12:0 a.m.4 views

ClickHouse Security Breach

ClickHouse is ClickHouse's fastest and most resource-efficient open source database for real-time applications and analytics. A security vulnerability exists in ClickHouse that originates from an attacker being able to send a specially crafted payload to the publicly available native interface on...

7.5CVSS6.6AI score0.00495EPSS
Exploits0References3
NVD
NVD
added 2023/12/21 11:15 p.m.15 views

CVE-2023-48298

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an...

7.5CVSS0.00634EPSS
Exploits0References2
OSV
OSV
added 2023/12/21 11:15 p.m.2 views

UBUNTU-CVE-2023-48298

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an...

7.5CVSS6AI score0.00634EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2023/12/21 11:15 p.m.20 views

CVE-2023-48298

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an...

7.5CVSS7.1AI score0.00634EPSS
Exploits0References3
Prion
Prion
added 2023/12/21 11:15 p.m.11 views

Design/Logic Flaw

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an...

5CVSS9.6AI score0.00634EPSS
Exploits0References2Affected Software2
Vulnrichment
Vulnrichment
added 2023/12/21 11:7 p.m.12 views

CVE-2023-48298 Integer underflow leading to stack overflow in FPC codec decompression

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an...

5.9CVSS7.8AI score0.00634EPSS
Exploits0References2
CVE
CVE
added 2023/12/21 11:7 p.m.74 views

CVE-2023-48298

CVE-2023-48298 affects ClickHouse, specifically the FPC codec decompression path. The issue is an integer underflow that can crash the server via a stack buffer overflow, exploitable by an unauthenticated attacker. The vulnerability is described as similar to CVE-2023-47118; no explicit remediati...

7.5CVSS6.6AI score0.00634EPSS
Exploits0References2Affected Software2
Debian CVE
Debian CVE
added 2023/12/21 11:7 p.m.18 views

CVE-2023-48298

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an...

7.5CVSS7.8AI score0.00634EPSS
Exploits0
Cvelist
Cvelist
added 2023/12/20 4:30 p.m.22 views

CVE-2023-47118 Heap buffer overflow in T64 codec decompression

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

7CVSS9.2AI score0.00462EPSS
Exploits0References1
Rows per page
Query Builder