Lucene search
K

12 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в djvulibre

A flaw was discovered in djvulibre-3.5.28 and earlier. A malicious read operation in the function DJVU::DataPool::hasdata, through a crafted djvu file, may cause the application to crash and lead to other issues...

7.8CVSS7.1AI score0.00284EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2014-3942

Malware in sbrugna...

5CVSS6.4AI score0.00319EPSS
Exploits0References5
CVE
CVE
added 2025/09/15 12:0 a.m.8 views

CVE-2025-57248

SumatraPDF 3.5.2 is affected by a null pointer dereference in libmupdf.dll during processing of crafted .djvu files, triggering a crash via DataPool::has_data(). The vulnerability is documented across multiple feeds (NVD/Red Hat NVD/CVE listings, OSV, Snyk, CNNVD, Red Hat, etc.), all identifying ...

7.3CVSS6.4AI score0.00112EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2024/12/30 12:0 a.m.2 views

SoftIron HyperCloud 安全漏洞

SoftIron HyperCloud is an intelligent cloud architecture from SoftIron. A security vulnerability exists in SoftIron HyperCloud version 2.3.0 through versions prior to 2.5.0. An attacker exploiting this vulnerability could affect the performance and availability of the back-end software-defined...

4.8CVSS6.4AI score0.00169EPSS
Exploits0References2
CNVD
CNVD
added 2021/07/06 12:0 a.m.6 views

Unauthorized Access Vulnerability in Sidi's Data Pool Management Platform

Suzhou Sidi Information Technology Co., Ltd. is a company that specializes in transmission devices, fire information servers, and protocol converters. An unauthorized access vulnerability exists in the Sidi data pool management platform, which can be exploited by attackers to obtain sensitive...

6.6AI score
Exploits0
CNVD
CNVD
added 2021/07/06 12:0 a.m.5 views

Unauthorized Access Vulnerability in Sidi's Data Pool Management Platform (CNVD-2021-51916)

Suzhou Sidi Information Technology Co., Ltd. is a company that specializes in transmission devices, fire information servers, and protocol converters. An unauthorized access vulnerability exists in the Sidi data pool management platform, which can be exploited by attackers to obtain sensitive...

6.6AI score
Exploits0
OSV
OSV
added 2021/06/24 7:15 p.m.1 views

DEBIAN-CVE-2021-32492

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::hasdata via crafted djvu file may lead to application crash and other consequences...

7.8CVSS7.2AI score0.00284EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.1 views

PT-2021-3122

Name of the Vulnerable Software and Affected Versions djvulibre versions 3.5.28 and earlier Description A flaw was found in the djvulibre library, specifically in the DJVU::DataPool::has data function, which can lead to an out of bounds read when processing a crafted djvu file. This may cause an...

7.8CVSS6.4AI score0.04581EPSS
Exploits7References112
securityvulns
securityvulns
added 2014/06/14 12:0 a.m.58 views

[Onapsis Security Advisories] Multiple Hard-coded Usernames in SAP Components

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisories:Multiple Hard-coded Usernames CWE-798 have been found and patched in a variety of SAP components. Summaries of the advisories with links to full versions follow: 1. ONAPSIS-2014-011-SAP Project System Structures and...

0.3AI score
Exploits0
NVD
NVD
added 2014/06/09 8:55 p.m.7 views

CVE-2014-4010

SAP Transaction Data Pool has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...

5CVSS6.6AI score0.00319EPSS
Exploits0References4
Cvelist
Cvelist
added 2014/06/09 8:0 p.m.13 views

CVE-2014-4010

SAP Transaction Data Pool has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...

6.6AI score0.00319EPSS
Exploits0References4
CVE
CVE
added 2014/06/09 8:0 p.m.33 views

CVE-2014-4010

The vulnerability CVE-2014-4010 affects SAP Transaction Data Pool, which contains hardcoded credentials. The root cause is hardcoded credentials enabling remote attackers to obtain access via unspecified vectors. The NVD entry assigns a CVSS v2 base score of 5.0 (Medium) with Network attack vecto...

5CVSS6.8AI score0.00319EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder