Lucene search
+L

4489 matches found

OSV
OSV
•added 2024/12/05 6:09 p.m.•14 views

CLSA-2024-1733422173 php: Fix of CVE-2024-11233

CVE-2024-11233: Fix buffer overflow vulnerability in convert.quoted-printable-decode filter...

8.2CVSS6.3AI score0.01607EPSS
SaveExploits1References1
CloudLinux
CloudLinux
•added 2024/12/05 6:06 p.m.•40 views

php: Fix of CVE-2024-11233

CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode filter...

8.2CVSS7AI score0.01607EPSS
SaveExploits1
OSV
OSV
•added 2024/12/05 6:06 p.m.•22 views

CLSA-2024-1733421975 php: Fix of CVE-2024-11233

CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode filter...

8.2CVSS6.2AI score0.01607EPSS
SaveExploits1References1
SUSE Linux
SUSE Linux
•added 2024/12/05 5:31 p.m.•8 views

Security update for php8

This update for php8 fixes the following issues: CVE-2024-11233: buffer overread when processing input with the convert.quoted-printable-decode filter. bsc1233702 CVE-2024-11234: possible CRLF injection in URIs when a proxy is configured in a stream context. bsc1233703 CVE-2024-8929: data exposur...

8.3CVSS6.9AI score0.02238EPSS
SaveExploits3References12
Github Security Blog
Github Security Blog
•added 2024/12/05 1:36 a.m.•3 views

Malware in decode-2021-fe

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/12/03 5:18 p.m.•15 views

CLSA-2024-1733246329 php: Fix of CVE-2024-11233

CVE-2024-11233: fix buffer overflow vulnerability in convert.quoted-printable-decode filter...

8.2CVSS6.3AI score0.01607EPSS
SaveExploits1References1
OSV
OSV
•added 2024/12/02 4:15 p.m.•9 views

DEBIAN-CVE-2024-53984

Nanopb is a small code-size Protocol Buffers implementation. When the compile time option PBENABLEMALLOC is enabled, the message contains at least one field with FTPOINTER field type, custom stream callback is used with unknown stream length. and the pbdecodeex function is used with flag...

4.3CVSS5.3AI score0.00409EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
•added 2024/12/02 12:26 p.m.•20 views

Security update for php8

This update for php8 fixes the following issues: CVE-2024-11233: Single byte overread with convert.quoted-printable-decode filter bsc1233702. CVE-2024-11234: Configuring a proxy in a stream context might allow for CRLF injection in URIs bsc1233703. CVE-2024-8929: Leak partial content of the heap...

8.8CVSS6.8AI score0.02238EPSS
SaveExploits4References16
Positive Technologies
Positive Technologies
•added 2024/12/02 12:00 a.m.•2 views

PT-2024-35996

Name of the Vulnerable Software and Affected Versions: Nanopb versions prior to 0.4.9.1 Description: The issue arises when the compile time option PB ENABLE MALLOC is enabled, the message contains at least one field with FT POINTER field type, a custom stream callback is used with unknown stream...

4.3CVSS0.00409EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
•added 2024/12/02 12:00 a.m.•27 views

PT-2024-8963 · Mediatek · Mediatek Vdec

Name of the Vulnerable Software and Affected Versions: MediaTek vdec affected versions not specified Description: The issue is related to a missing bounds check in the vdec component of MediaTek microprogram software, which could lead to an out of bounds write. This could result in local escalati...

6.8CVSS6.3AI score0.00082EPSS
SaveExploits0References14
BDU FSTEC
BDU FSTEC
•added 2024/12/02 12:00 a.m.•20 views

The vulnerability of the convert.quoted-printable-decode filter in the PHP programming language interpreter allows a hacker to trigger a service failure.

The vulnerability of the convert.quoted-printable-decode filter in the PHP programming language interpreter is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

4.8CVSS6.2AI score0.01607EPSS
SaveExploits1References13Affected Software5
Positive Technologies
Positive Technologies
•added 2024/11/27 12:00 a.m.•16 views

PT-2024-29280 · Unknown · Contiki-Ng

Name of the Vulnerable Software and Affected Versions: Contiki-NG affected versions not specified Description: An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The issue exists in the...

9.6CVSS7.2AI score0.00294EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/11/26 12:00 a.m.•32 views

PT-2024-9372

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 133 Thunderbird versions prior to 133 Description: A null pointer dereference may have occurred in the pk12util tool, specifically in the SEC ASN1DecodeItem Util function, when handling malformed or improperly...

9.8CVSS6.5AI score0.00688EPSS
SaveExploits0References275
OSV
OSV
•added 2024/11/24 2:15 a.m.•7 views

DEBIAN-CVE-2024-11233

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas...

8.2CVSS6.1AI score0.01607EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/24 2:15 a.m.•16 views

AZL-53634 CVE-2024-11233 affecting package php for versions less than 8.1.31-1

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas...

8.2CVSS6.7AI score0.01607EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/24 2:15 a.m.•16 views

UBUNTU-CVE-2024-11233

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas...

8.2CVSS6.5AI score0.01607EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2024/11/24 1:08 a.m.•22 views

CVE-2024-11233 Single byte overread with convert.quoted-printable-decode filter

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas...

4.8CVSS6.9AI score0.01607EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/11/24 1:08 a.m.•45 views

CVE-2024-11233 Single byte overread with convert.quoted-printable-decode filter

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas...

4.8CVSS0.01607EPSS
SaveExploits1References1
Mend
Mend
•added 2024/11/24 1:08 a.m.•2 views

CVE-2024-11233

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas...

8.2CVSS0.01607EPSS
SaveExploits1References6
AlpineLinux
AlpineLinux
•added 2024/11/24 1:08 a.m.•32 views

CVE-2024-11233

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas...

8.2CVSS6.5AI score0.01607EPSS
SaveExploits1
Rows per page
Query Builder