Lucene search
K

2839 matches found

RedHat Linux
RedHat Linux
added 2020/02/24 9:54 a.m.1 views

openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c

A heap-based buffer overflow flaw was found in the opjt1clbldecodeprocessor in openjpeg2. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

8.8CVSS6AI score0.04509EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2020/02/24 9:33 a.m.1 views

openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c

A heap-based buffer overflow flaw was found in the opjt1clbldecodeprocessor in openjpeg2. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

8.8CVSS6AI score0.04509EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2020/02/20 10:18 p.m.3 views

python-pillow: out-of-bounds write in expandrow in libImaging/SgiRleDecode.c

An out-of-bounds write flaw was discovered in python-pillow in the way SGI RLE images are decoded. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the application or potentially execute code on the system...

9.8CVSS7.2AI score0.01146EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/02/19 1:6 p.m.2 views

openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c

A heap-based buffer overflow flaw was found in the opjt1clbldecodeprocessor in openjpeg2. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

8.8CVSS6AI score0.04509EPSS
Exploits1References4
OSV
OSV
added 2020/02/18 7:15 p.m.3 views

DEBIAN-CVE-2015-7507

libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service out-of-bounds read via a crafted color table to the 1 bmpdecodergb or 2 bmpdecoderle function...

7.5CVSS7.3AI score0.0062EPSS
Exploits2References1
CNVD
CNVD
added 2020/02/17 12:0 a.m.2 views

Libnsbmp Buffer Overflow Vulnerability

Libnsbmp is a decoding library for the BMP and ICO image file formats, written in C. It is available as part of the NetSurf project. It is part of the NetSurf project and is available for other software under the MIT license. A buffer overflow vulnerability exists in the 'bmpdecoderle' function o...

8.8CVSS7.4AI score0.00629EPSS
Exploits2References1
CNVD
CNVD
added 2020/02/12 12:0 a.m.0 views

OpenJPEG Buffer Overflow Vulnerability (CNVD-2020-33736)

OpenJPEG is a C-based open source JPEG2000 codec . A buffer overflow vulnerability exists in OpenJPEG version 2.3.1 in the opjt1clbldecodeprocessor in the openjp2/t1.c file, which stems from the program's failure to properly check boundaries. A remote attacker could exploit this vulnerability wit...

8.8CVSS8.2AI score0.04509EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2020/02/10 6:44 p.m.48 views

CVE-2020-7226

CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...

7.5CVSS4.6AI score0.03282EPSS
Exploits1References3
Veracode
Veracode
added 2020/02/10 4:49 a.m.22 views

Denial Of Service (DoS)

cryptacular is vulnerable to denial of service. Failure to validate the nonce array length associated with new byte allows an attacker to cause excessive memory allocation on the system during a decode operation, potentially resulting in an application crash...

7.5CVSS4.2AI score0.03282EPSS
Exploits1References32Affected Software82
0day.today
0day.today
added 2020/02/06 12:0 a.m.143 views

Ecommerce Systempay 1.0 - Production KEY Brute Force Exploit

Exploit for php platform in category web applications Exploit Title: Ecommerce Systempay 1.0 - Production KEY Brute Force Author: live3 Vendor Homepage: https://paiement.systempay.fr/doc/fr-FR/ Software Link: https://paiement.systempay.fr/doc/fr-FR/module-de-paiement-gratuit/ Tested on: MacOs...

7.1AI score
Exploits0
OSV
OSV
added 2020/01/28 7:15 p.m.0 views

UBUNTU-CVE-2015-8011

Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...

9.8CVSS7.7AI score0.05555EPSS
Exploits0References6
OSV
OSV
added 2020/01/28 6:15 p.m.0 views

ALPINE-CVE-2020-8112

opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...

8.8CVSS7.5AI score0.04509EPSS
Exploits1References1
OSV
OSV
added 2020/01/28 6:15 p.m.1 views

AZL-44577 CVE-2020-8112 affecting package openjpeg2 for versions less than 2.3.1-12

opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...

8.8CVSS7.2AI score0.04509EPSS
Exploits1References1
OSV
OSV
added 2020/01/28 6:15 p.m.1 views

DEBIAN-CVE-2020-8112

opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...

8.8CVSS7.5AI score0.04509EPSS
Exploits1References1
OSV
OSV
added 2020/01/28 6:15 p.m.0 views

UBUNTU-CVE-2020-8112

opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...

8.8CVSS7.2AI score0.04509EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2020/01/28 3:1 p.m.0 views

openjpeg: Heap-based buffer overflow in opj_t1_clbl_decode_processor()

A heap-based buffer overflow flaw was found in openjpeg in the opjt1clbldecodeprocessor in libopenjp2.so. Affecting versions through 2.3.1, the highest threat from this vulnerability is to file confidentiality and integrity as well as system availability...

7.5CVSS6AI score0.04773EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2020/01/28 12:0 a.m.3 views

PT-2020-2776 · Openjpeg +6 · Openjpeg +6

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions 2.3.1 through 2020-01-28 Description: The issue is related to a heap-based buffer overflow in the opj t1 clbl decode processor function of the OpenJPEG library, specifically in the openjp2/t1.c file when qmfbid==1. This can ...

8.8CVSS7AI score0.04773EPSS
Exploits10References174
OSV
OSV
added 2020/01/24 3:15 p.m.22 views

CVE-2020-7226

CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...

7.5CVSS6.5AI score
Exploits0References19
Cvelist
Cvelist
added 2020/01/24 2:17 p.m.20 views

CVE-2020-7226

CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...

8.4AI score0.03282EPSS
Exploits1References19
Vulnrichment
Vulnrichment
added 2020/01/21 10:54 p.m.1 views

CVE-2020-7595

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

7.9AI score0.00476EPSS
Exploits0References15
Rows per page
Query Builder