Lucene search
+L

1117 matches found

Veracode
Veracode
added 2017/03/31 1:52 a.m.8 views

Denial Of Service (DoS)

sentry is vulnerable to denial of service DoS attacks. It fails to validate and limit the maximum password length, attackers can launch DoS by exhausting the resources after entering tons of data to the password hashing algorithm...

6.6AI score
SaveExploits0
Veracode
Veracode
added 2017/03/21 7:48 a.m.32 views

Denial Of Service (DoS) Through Corrupted Sun Files

ImageMagick is vulnerable to denial of service DoS attacks. These attacks are possible through the handling of corrupted sun files...

9.8CVSS8.7AI score0.03708EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2017/03/21 7:46 a.m.19 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks and other attacks. The library incorrectly handles certain psd files, allowing a malicious user to pass a malicious psd file to cause the system to crash...

9.8CVSS8.6AI score0.03933EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2017/03/21 7:21 a.m.19 views

Incorrect Buffer Boundary Checks

ImageMagick is vulnerable to denial of service DoS attacks and other attacks. The library contains incorrect boundary buffer checks. This allows a malicious user to pass a psd file that can cause the system to crash...

9.8CVSS8.7AI score0.03933EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2017/03/21 7:8 a.m.16 views

Out Of Bound Access

ImageMagick is vulnerable to denial of service DoS attacks. Attackers can gain out of bound access by using a malformed sun file...

5.5CVSS7AI score0.01416EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2017/03/17 7:43 a.m.8 views

SUSE-SU-2017:0718-1 Security update for xen

This update for xen fixes several issues. These security issues were fixed: - CVE-2016-10155: The virtual hardware watchdog 'wdti6300esb' was vulnerable to a memory leakage issue allowing a privileged user to cause a DoS and/or potentially crash the Qemu process on the host bsc1024183 -...

9.9CVSS8.3AI score0.03648EPSS
SaveExploits0References26
Tenable Nessus
Tenable Nessus
added 2017/03/07 12:0 a.m.32 views

openSUSE Security Update : ImageMagick (openSUSE-2017-303)

This update for ImageMagick fixes the following issues : - CVE-2016-10046: Prevent buffer overflow in draw.c caused by an incorrect length calculation bsc1017308 - CVE-2016-10048: Arbitrary module could have been load because relative path were not escaped bsc1017310 - CVE-2016-10049: Corrupt RLE...

9.8CVSS6.8AI score0.06534EPSS
SaveExploits0References49
Veracode
Veracode
added 2017/03/02 1:56 a.m.24 views

Denial Of Service (DoS) Through Null Pointer Dereference

zziplib is vulnerable to denial of service DoS attacks. These attacks are possible through fseeko.c using a ZIP file to cause a null pointer dereference and crash...

5.5CVSS5.2AI score0.01616EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2017/02/10 5:50 a.m.49 views

Denial Of Service (DoS)

OpenSSL is vulnerable to denial of service DoS attacks. These attacks can be triggered through the length field in ASN1TIME data, causing an out-of-bounds read and application crash...

7.5CVSS7.3AI score0.74483EPSS
SaveExploits0References60Affected Software2
Veracode
Veracode
added 2017/02/10 5:10 a.m.30 views

Denial Of Service (DoS) Through Null Pointer Dereference

OpenSSL is vulnerable to denial of service DoS attacks. These attacks can be triggered by using an invalid signaturealgorithms extension in the the ClientHello message during renegotiation...

5CVSS6.7AI score0.08055EPSS
SaveExploits0References19Affected Software1
Veracode
Veracode
added 2017/02/10 2:44 a.m.52 views

Denial Of Service (DoS)

OpenSSL is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious Diffie-Hellman ServerKeyExchange message to the system to cause a segmentation fault that can lead to the system crashing...

5CVSS7.1AI score0.0498EPSS
SaveExploits0References16Affected Software3
Veracode
Veracode
added 2017/02/09 5:17 a.m.29 views

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass a malicious rle image file to the system that can cause an out-of-bounds array access that can cause the system to crash...

6.8CVSS8.3AI score0.02393EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
added 2017/02/08 5:12 a.m.27 views

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and other possible attacks. A malicious user can pass a malicious LucasArts Smush file to the system to cause a segmentation violation that can lead to the system crashing...

7.5CVSS7.9AI score0.02412EPSS
SaveExploits0References8Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/02/06 12:0 a.m.61 views

openSUSE Security Update : gnutls (openSUSE-2017-207)

This update for gnutls fixes the following security issues : - GnuTLS could have crashed when processing maliciously crafted OpenPGP certificates GNUTLS-SA-2017-2, bsc1018832, CVE-2017-5335, CVE-2017-5337, CVE-2017-5336 - GnuTLS could have falsely accepted certificates when using OCSP...

9.8CVSS6.9AI score0.39657EPSS
SaveExploits1References8
OSV
OSV
added 2017/02/03 9:39 p.m.11 views

MGASA-2017-0038 Updated phpmyadmin packages fix security vulnerabilities

Multiple vulnerabilities in setup script CVE-2016-6621 / PMASA-2016-44. Open redirect PMASA-2017-1. php-gettext code execution CVE-2015-8980 / PMASA-2017-2. DOS vulnerability in table editing PMASA-2017-3. CSS injection in themes PMASA-2017-4. SSRF in replication PMASA-2017-6. DOS in replication...

9.8CVSS9.1AI score0.06711EPSS
SaveExploits1References12
Tenable Nessus
Tenable Nessus
added 2017/02/02 12:0 a.m.44 views

SUSE SLED12 / SLES12 Security Update : gnutls (SUSE-SU-2017:0348-1)

This update for gnutls fixes the following security issues : - GnuTLS could have crashed when processing maliciously crafted OpenPGP certificates GNUTLS-SA-2017-2, bsc1018832, CVE-2017-5335, CVE-2017-5337, CVE-2017-5336 - GnuTLS could have falsely accepted certificates when using OCSP...

9.8CVSS7AI score0.39657EPSS
SaveExploits1References14
Veracode
Veracode
added 2017/02/01 5:26 a.m.44 views

Denial Of Service (DoS)

expat is vulnerable to denial of service DoS attacks with the potential for other impacts. The vulnerability exists because there are multiple integer overflows in the XMLGetBuffer function that leads to a heap-based buffer overflow which may lead to further unspecified impact. This issue is...

7.5CVSS8.8AI score0.19069EPSS
SaveExploits0References22Affected Software6
NVD
NVD
added 2017/01/27 10:59 p.m.20 views

CVE-2017-3295

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters . Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

7.5CVSS6.9AI score0.02683EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2017/01/27 10:1 p.m.21 views

CVE-2017-3257

Removed by vendor...

6.5CVSS8.1AI score0.0257EPSS
SaveExploits0
Veracode
Veracode
added 2017/01/26 5:46 a.m.46 views

Denial Of Service (DoS)

OpenSSL is vulnerable to denial of service DoS attacks. The library does not validate division results, allowing a malicious user to cause a denial of service via an out-of-bounds write by sending a overly large BIGNUM...

9.8CVSS8.8AI score0.44218EPSS
SaveExploits1References56Affected Software3
Rows per page
Query Builder