Lucene search
K

7 matches found

NVD
NVD
added 2026/03/04 6:16 p.m.7 views

CVE-2026-20053

Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. This vulnerability is due to improper range checking when decompressing VBA data, which is user controlled. An...

5.8CVSS0.00414EPSS
Exploits0References1
NVD
NVD
added 2026/03/04 6:16 p.m.3 views

CVE-2026-20054

Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. This vulnerability is due to improper error checking when decompressing VBA data. An attacker could exploit this...

5.8CVSS0.00432EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/04 5:47 p.m.3 views

CVE-2026-20058

Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. These vulnerabilities are due to improper error checking when decompressing VBA data. An attacker could exploit...

5.8CVSS6AI score0.0039EPSS
Exploits0References2Affected Software2
Vulnrichment
Vulnrichment
added 2026/03/04 5:47 p.m.4 views

CVE-2026-20057 Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications VBA feature which could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. This vulnerability is due to lack of proper error checking when decompressing VBA...

5.8CVSS6AI score0.00432EPSS
Exploits0References1
OSV
OSV
added 2011/02/23 7:0 p.m.1 views

DEBIAN-CVE-2011-1003

Double free vulnerability in the vbareadprojectstrings function in vbaextract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications VBA data in a Microsoft Office document. NOTE: some of these details are obtained fro...

6.8CVSS7.6AI score0.04215EPSS
Exploits0References1
CVE
CVE
added 2011/02/23 6:0 p.m.66 views

CVE-2011-1003

CVE-2011-1003 describes a double-free vulnerability in libclamav (vba_read_project_strings in vba_extract.c) that could allow remote code execution via crafted VBA data in Microsoft Office documents. Affected software is ClamAV prior to version 0.97; the underlying issue is in the VBA data handli...

6.8CVSS7.4AI score0.04215EPSS
Exploits0References20Affected Software1
Debian CVE
Debian CVE
added 2011/02/23 6:0 p.m.25 views

CVE-2011-1003

Double free vulnerability in the vbareadprojectstrings function in vbaextract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications VBA data in a Microsoft Office document. NOTE: some of these details are obtained fro...

6.8CVSS7.3AI score0.04215EPSS
Exploits0
Rows per page
Query Builder