Lucene search
+L

3731 matches found

OSV
OSV
added 2021/01/05 3:21 p.m.11 views

SUSE-SU-2021:0032-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 6 Fix Pack 20 bsc1180063,bsc1177943 CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803 Class libraries: - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is...

5.8CVSS5.2AI score0.03758EPSS
SaveExploits0References10
OSV
OSV
added 2020/12/24 6:15 p.m.9 views

CVE-2020-24658

Arm Compiler 5 through 5.06u6 has an error in a stack protection feature designed to help spot stack-based buffer overflows in local arrays. When this feature is enabled, a protected function writes a guard value to the stack prior to above any vulnerable arrays in the stack. The guard value is...

7.8CVSS6.1AI score0.0031EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/24 6:15 p.m.27 views

CVE-2020-24658

Arm Compiler 5 through 5.06u6 has an error in a stack protection feature designed to help spot stack-based buffer overflows in local arrays. When this feature is enabled, a protected function writes a guard value to the stack prior to above any vulnerable arrays in the stack. The guard value is...

7.8CVSS8AI score0.0031EPSS
SaveExploits0References1
Prion
Prion
added 2020/12/24 6:15 p.m.33 views

Buffer overflow

Arm Compiler 5 through 5.06u6 has an error in a stack protection feature designed to help spot stack-based buffer overflows in local arrays. When this feature is enabled, a protected function writes a guard value to the stack prior to above any vulnerable arrays in the stack. The guard value is...

4.4CVSS7.9AI score0.0031EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/12/24 5:21 p.m.84 views

CVE-2020-24658

Arm Compiler 5 through 5.06u6 contains a defect in the stack protection feature for detecting stack-based overflows. If the reference value written to the stack overlaps with the guard value, and both are overwritten, the protection may fail to detect corruption. This requires both a buffer overf...

7.8CVSS7.9AI score0.0031EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/24 5:21 p.m.57 views

CVE-2020-24658

Arm Compiler 5 through 5.06u6 has an error in a stack protection feature designed to help spot stack-based buffer overflows in local arrays. When this feature is enabled, a protected function writes a guard value to the stack prior to above any vulnerable arrays in the stack. The guard value is...

8AI score0.0031EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2020/12/24 12:0 a.m.11 views

ARM Compiler Buffer Error Vulnerability

ARM Compiler is a tool from ARM UK for compiling and generating applications for the ARM architecture. A security vulnerability exists in Arm Compiler version 5, release 5.06u6, which stems from a bug in the stack protection feature, which is designed to help detect stack-based buffer overflows i...

7.8CVSS7.4AI score0.0031EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/12/24 12:0 a.m.50 views

SUSE SLES15 Security Update : java-1_8_0-ibm (SUSE-SU-2020:3932-1)

This update for java-180-ibm fixes the following issues : Update to Java 8.0 Service Refresh 6 Fix Pack 20 bsc1180063,bsc1177943 CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803 - Class libraries : - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is...

5.8CVSS6.1AI score0.03758EPSS
SaveExploits0References17
OSV
OSV
added 2020/12/23 5:22 p.m.10 views

SUSE-SU-2020:3932-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 6 Fix Pack 20 bsc1180063,bsc1177943 CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803 Class libraries: - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is...

5.8CVSS5.2AI score0.03758EPSS
SaveExploits0References10
Kitploit
Kitploit
added 2020/12/20 8:30 p.m.53 views

Sploit - Go Package That Aids In Binary Analysis And Exploitation

Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the Go...

7.7AI score
SaveExploits0References1
OSV
OSV
added 2020/12/20 5:23 p.m.5 views

OPENSUSE-SU-2020:2300-1 Security update for gcc7

This update for gcc7 fixes the following issues: - CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue bsc1172798 - Enable fortran for the nvptx offload compiler. - Update README.First-for.SuSE.packagers - avoid assembler errors with AVX512 gather and scatter instructions...

5.5CVSS5.9AI score0.00504EPSS
SaveExploits0References10
NVD
NVD
added 2020/12/17 5:15 p.m.27 views

CVE-2020-15294

Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData results in multiple dereferences to the same pointer. If the pointer is located in memory-mapped from the guest space, this may cause a race-condition where the generated code would...

7.8CVSS7.9AI score0.00289EPSS
SaveExploits0References1
Prion
Prion
added 2020/12/17 5:15 p.m.22 views

Race condition

Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData results in multiple dereferences to the same pointer. If the pointer is located in memory-mapped from the guest space, this may cause a race-condition where the generated code would...

4.4CVSS7.2AI score0.00289EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/17 4:50 p.m.29 views

CVE-2020-15294 Compiler Optimization Removal or Modification of Security-Critical Code vulnerability in Bitdefender Hypervisor Introspection (VA-9339)

Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData results in multiple dereferences to the same pointer. If the pointer is located in memory-mapped from the guest space, this may cause a race-condition where the generated code would...

7.8CVSS7.9AI score0.00289EPSS
SaveExploits0References1
CVE
CVE
added 2020/12/17 4:50 p.m.52 views

CVE-2020-15294

CVE-2020-15294 refers to a vulnerability in Bitdefender Hypervisor Introspection (HVI) prior to version 1.132.2. The root cause is a compiler optimization issue in IntPeParseUnwindData(), which can trigger multiple dereferences of the same pointer—potentially when that pointer is memory-mapped fr...

7.8CVSS7.3AI score0.00289EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2020/12/17 12:0 a.m.13 views

Bitdefender Hypervisor Introspection 安全漏洞

Bidefender Hypervisor Introspection HVI is a software from Bidefender Romania that checks the memory safety of running virtual machines at the Hypervisor layer using the VM self-test APIs of the Xen and KVM hypervisors. The software blocks code execution in abnormal memory by virtualizing the...

7.8CVSS7.7AI score0.00289EPSS
SaveExploits0References2
OSV
OSV
added 2020/12/15 6:15 p.m.4 views

ALPINE-CVE-2020-29482

An issue was discovered in Xen through 4.14.x. A guest may access xenstore paths via absolute paths containing a full pathname, or via a relative path, which implicitly includes /local/domain/$DOMID for their own domain id. Management tools must access paths in guests' namespaces, necessarily usi...

6CVSS6.7AI score0.00385EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2020/12/15 6:15 p.m.24 views

CVE-2020-29482

An issue was discovered in Xen through 4.14.x. A guest may access xenstore paths via absolute paths containing a full pathname, or via a relative path, which implicitly includes /local/domain/$DOMID for their own domain id. Management tools must access paths in guests' namespaces, necessarily usi...

6CVSS6.3AI score0.00385EPSS
SaveExploits0References2
OSV
OSV
added 2020/12/15 6:15 p.m.6 views

UBUNTU-CVE-2020-29482

An issue was discovered in Xen through 4.14.x. A guest may access xenstore paths via absolute paths containing a full pathname, or via a relative path, which implicitly includes /local/domain/$DOMID for their own domain id. Management tools must access paths in guests' namespaces, necessarily usi...

6CVSS5.9AI score0.00385EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2020/12/15 5:14 p.m.68 views

CVE-2020-29482

An issue was discovered in Xen through 4.14.x. A guest may access xenstore paths via absolute paths containing a full pathname, or via a relative path, which implicitly includes /local/domain/$DOMID for their own domain id. Management tools must access paths in guests' namespaces, necessarily usi...

6CVSS7AI score0.00385EPSS
SaveExploits0
Rows per page
Query Builder