Lucene search
+L

13335 matches found

osv_cve
osv_cve
•added 2020/01/19 8:15 p.m.•15 views

CVE-2020-7231

Evoko Home 1.31 devices provide different error messages for failed login requests depending on whether the username is valid...

5.3CVSS6.1AI score0.00972EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2020/01/17 12:00 a.m.•50 views

Fedora 31 : phpMyAdmin (2020-a1b4afe7b5)

Version 5.0.1 2020-01-07 - issue 15719 Fixed error 500 when browsing a table when $cfg'LimitChars' used a string and not an int value - issue 14936 Fixed display NULL on numeric fields has showing empty string since 5.0.0 - issue 15722 Fix get Database structure fails with PHP error on replicated...

6AI score
SaveExploits0References1
NVD
NVD
•added 2020/01/16 4:15 a.m.•34 views

CVE-2020-7044

In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...

7.5CVSS7.3AI score0.03242EPSS
SaveExploits1References8
Prion
Prion
•added 2020/01/16 4:15 a.m.•41 views

Code injection

In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...

5CVSS7.3AI score0.03242EPSS
SaveExploits1References8Affected Software5
UbuntuCve
UbuntuCve
•added 2020/01/16 4:15 a.m.•40 views

CVE-2020-7044

In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...

7.5CVSS7.1AI score0.03242EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2020/01/16 3:05 a.m.•59 views

CVE-2020-7044

In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using = and = to resolve off-by-one errors...

7.5CVSS7.4AI score0.03242EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2020/01/15 12:00 a.m.•4 views

PT-2020-1400

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to a component in the Filesystem of Oracle Solaris, which can be exploited by a high-privileged attacker with logon access to the infrastructure. This can lead to a denial of service D...

6CVSS0.00353EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2020/01/15 12:00 a.m.•76 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jan 2020)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS7.7AI score0.20535EPSS
SaveExploits0References1
NVD
NVD
•added 2020/01/14 4:15 p.m.•23 views

CVE-2015-8366

Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes...

9.8CVSS9.6AI score0.05075EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2020/01/14 4:15 p.m.•7 views

DEBIAN-CVE-2015-8367

The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...

9.8CVSS8.8AI score0.05604EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/01/14 4:15 p.m.•34 views

CVE-2015-8366

Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes...

9.8CVSS7.9AI score
SaveExploits0References4
osv_alpine
osv_alpine
•added 2020/01/14 4:15 p.m.•12 views

ALPINE-CVE-2015-8366

Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes...

9.8CVSS7.9AI score0.05075EPSS
SaveExploits0References1
Prion
Prion
•added 2020/01/14 4:15 p.m.•24 views

Information disclosure

The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...

7.5CVSS7.5AI score0.05604EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2020/01/14 4:15 p.m.•31 views

Code injection

Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes...

7.5CVSS7.9AI score0.05075EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2020/01/14 3:19 p.m.•46 views

CVE-2015-8366

Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes...

9.5AI score0.05075EPSS
SaveExploits0References3
CVE
CVE
•added 2020/01/14 3:19 p.m.•115 views

CVE-2015-8366

CVE-2015-8366 : In LibRaw, an array index error in the smal_decode_segment function prior to 0.17.1 can enable context-dependent attackers to trigger memory errors and possibly execute arbitrary code via index-related vectors. Several connected sources confirm the issue is tied to LibRaw before 0...

9.8CVSS9.4AI score0.05075EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2020/01/14 3:19 p.m.•71 views

CVE-2015-8366

Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes...

9.8CVSS9.4AI score0.05075EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2020/01/14 3:19 p.m.•104 views

CVE-2015-8366

Array index error in smaldecodesegment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes...

9.8CVSS9.6AI score0.05075EPSS
SaveExploits0
Cvelist
Cvelist
•added 2020/01/14 3:19 p.m.•51 views

CVE-2015-8367

The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...

9.6AI score0.05604EPSS
SaveExploits0References3
CVE
CVE
•added 2020/01/14 3:19 p.m.•143 views

CVE-2015-8367

CVE-2015-8367 affects Libraw’s phase_one_correct function; Libraw before 0.17.1 can cause memory errors and may allow arbitrary code execution due to memory object initialization issues. The available connected advisories indicate fixes in Libraw 0.17.1 and later (e.g., upstream release notes, di...

9.8CVSS9.4AI score0.05604EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder