Lucene search
+L

1117 matches found

Github Security Blog
Github Security Blog
•added 2021/12/18 12:00 a.m.•27 views

Pyo Buffer Overflow Vulnerability

Buffer overflow in ajaxsoundstudio.com Pyo = 1.03 in the Serverjackinit function which allows attackers to conduct Denial of Service attacks by arbitrary constructing a overlong clientname...

7.5CVSS7.7AI score0.01194EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2021/12/17 9:15 p.m.•35 views

CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.5CVSS0.01401EPSS
SaveExploits1References1
NVD
NVD
•added 2021/12/17 9:15 p.m.•50 views

CVE-2021-41500

Incomplete string comparison vulnerability exits in cvxopt.org cvxop = 1.2.6 in APIs cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve, which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects...

7.5CVSS0.01184EPSS
SaveExploits1References2
OSV
OSV
•added 2021/12/17 9:15 p.m.•10 views

CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.5CVSS7.4AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2021/12/17 9:15 p.m.•22 views

CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.5CVSS7.1AI score0.01401EPSS
SaveExploits1References3
Prion
Prion
•added 2021/12/17 9:15 p.m.•27 views

Null pointer dereference

Null pointer reference in CMSConservativeincrementobj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket...

5CVSS7.4AI score0.01037EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/12/17 8:36 p.m.•47 views

CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.6AI score0.01401EPSS
SaveExploits1References1
CVE
CVE
•added 2021/12/17 8:36 p.m.•103 views

CVE-2021-41499

Buffer Overflow in the Pyo library (version < 1.03) used by ajaxsoundstudio.com, triggered in the Server_debug function. An attacker can supply an overlong audio file name to cause a DoS. Affected products/libraries: Pyo

7.5CVSS7.4AI score0.01401EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
•added 2021/12/17 8:36 p.m.•73 views

CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.5CVSS7.4AI score0.01401EPSS
SaveExploits1
NVD
NVD
•added 2021/12/17 8:15 p.m.•34 views

CVE-2021-41495

Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArrayDescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error ca...

5.3CVSS0.01154EPSS
SaveExploits1References2
Prion
Prion
•added 2021/12/17 8:15 p.m.•32 views

Null pointer dereference

DISPUTED Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArrayDescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an...

3.5CVSS5.2AI score0.01154EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/12/17 7:25 p.m.•62 views

CVE-2021-41495

Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArrayDescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error ca...

5.8AI score0.01154EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2021/12/17 7:25 p.m.•81 views

CVE-2021-41495

Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArrayDescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error ca...

5.3CVSS7AI score0.01154EPSS
SaveExploits1
The Hacker News
The Hacker News
•added 2021/12/16 6:24 a.m.•182 views

Hackers Begin Exploiting Second Log4j Vulnerability as a Third Flaw Emerges

Web infrastructure company Cloudflare on Wednesday revealed that threat actors are actively attempting to exploit a second bug disclosed in the widely used Log4j logging utility, making it imperative that customers move quickly to install the latest version as a barrage of attacks continues to...

10CVSS7.5AI score0.99999EPSS
SaveExploits384
IBM Security Bulletins
IBM Security Bulletins
•added 2021/12/15 6:05 p.m.•65 views

Security Bulletin: Jnuary 2017 OpenSSL Vulnerabilities affect Multiple N series Products

Summary Multiple N series products incorporate the OpenSSL software libraries to provide cryptographic capabilities. OpenSSL versions below 1.0.2k and 1.1.0d are susceptible to vulnerabilities that could lead to out-of-bound reads, process crashes, Denial of Service DoS attacks, or incorrect...

7.5CVSS7AI score0.57322EPSS
SaveExploits6Affected Software1
ThreatPost
ThreatPost
•added 2021/12/15 2:04 p.m.•174 views

Apache’s Fix for Log4Shell Can Lead to DoS Attacks

As if finding one easily exploited and extremely dangerous flaw in the ubiquitous Java logging library Apache Log4j hadn’t already turned the Internet security community on its ear, researchers now have found a new vulnerability in Apache’s patch issued to mitigate it. Last Thursday security...

10CVSS7.4AI score0.99999EPSS
SaveExploits385References16
Prion
Prion
•added 2021/11/23 8:15 p.m.•24 views

Cross site request forgery (csrf)

The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion...

5.8CVSS8AI score0.00537EPSS
SaveExploits2References1Affected Software1
Veracode
Veracode
•added 2021/11/23 2:50 a.m.•29 views

Denial Of Service (DoS)

accountsservice is vulnerable to denial of service DoS attacks. Fallbacklocale variable, pointing to static storage via SetLanguagedbus function allows attackers to cause denial of service conditions...

7.8CVSS5.2AI score0.00373EPSS
SaveExploits0References4Affected Software3
ThreatPost
ThreatPost
•added 2021/11/09 6:06 p.m.•53 views

12 New Flaws Used in Ransomware Attacks in Q3

A dozen new vulnerabilities were used in ransomware attacks this quarter, bringing the total number of bugs associated with ransomware to 278. That’s a 4.5 percent increase over Q2, according to researchers. Five of the newbies can be used to achieve remote code execution RCE, while two can be us...

9.8CVSS7.9AI score0.99747EPSS
SaveExploits27References16
Cvelist
Cvelist
•added 2021/11/08 3:44 a.m.•47 views

CVE-2021-42072

An issue was discovered in Barrier before 2.4.0. The barriers component aka the server-side implementation of Barrier does not sufficiently verify the identify of connecting clients. Clients can thus exploit weaknesses in the provided protocol to cause denial-of-service or stage further attacks...

8.6AI score0.01654EPSS
SaveExploits1References4
Rows per page
Query Builder