Lucene search
+L

7516 matches found

Github Security Blog
Github Security Blog
added 2021/03/08 3:50 p.m.39 views

Improper Authentication

Impact A maliciously crafted claim may be incorrectly authenticated by the bot. Impacts bots that are not configured to be used as a Skill. This vulnerability requires an an attacker to have internal knowledge of the bot. Patches The problem has been patched in all affected versions. Please see t...

3.3AI score
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
added 2021/03/06 12:0 a.m.37 views

Debian: Security Advisory (DLA-2582-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.12357EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2021/03/05 10:35 a.m.48 views

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS3.3AI score0.02759EPSS
SaveExploits0References3
OSV
OSV
added 2021/03/04 9:15 p.m.6 views

CVE-2021-25338

Improper memory access control in RKP in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to write certain part of RKP EL2 memory region...

5.2CVSS5.8AI score0.00121EPSS
SaveExploits0References2
OSV
OSV
added 2021/03/04 9:15 p.m.9 views

CVE-2021-25339

Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to corrupt EL2 memory...

5.2CVSS6AI score0.00115EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:0 a.m.13 views

The vulnerability of the ARM System Memory Management Unit (SMMU) in NVIDIA Jetson TX2 processors allows a hacker to cause a system failure.

The vulnerability of the ARM System Memory Management Unit SMMU on NVIDIA Jetson TX2 processors lies in insufficient checking of exception states. Exploiting this vulnerability can allow attackers to cause system failures...

6.1CVSS6.7AI score
SaveExploits0References2
GithubExploit
GithubExploit
added 2021/02/26 2:18 p.m.149 views

Exploit for Out-of-bounds Write in Adobe Acrobat

CVE-2021-21017 Not another Adobe Reader Byte Order Mark bu...

8.8CVSS8.7AI score0.8621EPSS
SaveExploits2
OSV
OSV
added 2021/02/25 5:15 p.m.7 views

CVE-2020-27543

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

7.5CVSS7.2AI score0.02589EPSS
SaveExploits1References4
NVD
NVD
added 2021/02/25 5:15 p.m.17 views

CVE-2020-27543

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

7.5CVSS0.02589EPSS
SaveExploits1References4
Prion
Prion
added 2021/02/25 5:15 p.m.20 views

Design/Logic Flaw

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

5CVSS7.5AI score0.02589EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
added 2021/02/24 12:0 a.m.8 views

Rust Resource Management Error Vulnerability (CNVD-2021-13651)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in versions of Rust prior to 0.3.1 that stems from insertsliceclone generating two drop actions when a Clone exception occurs. No details of the vulnerability are...

5.3CVSS6.5AI score0.01359EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/23 2:15 a.m.32 views

CVE-2021-27568

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive...

5.9CVSS6.5AI score
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2021/02/23 2:15 a.m.3 views

CVE-2021-27568

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive...

5.9CVSS6.7AI score0.0291EPSS
SaveExploits1References12
Prion
Prion
added 2021/02/23 2:15 a.m.23 views

Information disclosure

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive...

4.3CVSS7.2AI score0.0291EPSS
SaveExploits1References8Affected Software7
CVE
CVE
added 2021/02/23 1:32 a.m.415 views

CVE-2021-27568

CVE-2021-27568 affects Netplex json-smart-v1 and json-smart-v2 (NumberFormatException uncaught), leading to potential denial of service or exposure of sensitive information when unhandled exceptions occur in the library. Connected IBM advisories confirm the vulnerability in IBM DOORS-related prod...

5.9CVSS6AI score0.0291EPSS
SaveExploits1References8Affected Software2
Cvelist
Cvelist
added 2021/02/23 1:32 a.m.34 views

CVE-2021-27568

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive...

7.5AI score0.0291EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2021/02/23 12:0 a.m.8 views

PT-2021-6276 · Netplex · Netplex Json-Smart-V1 +1

Name of the Vulnerable Software and Affected Versions: netplex json-smart-v1 versions through 2015-10-23 netplex json-smart-v2 versions through 2.4 Description: An issue was discovered where an exception is thrown from a function but not caught, as demonstrated by NumberFormatException. This may...

9.4CVSS6AI score0.0291EPSS
SaveExploits1References31
OpenVAS
OpenVAS
added 2021/02/22 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for libvncserver (EulerOS-SA-2021-1321)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.9AI score0.03748EPSS
SaveExploits1References2
OSV
OSV
added 2021/02/19 12:15 a.m.8 views

CVE-2020-19513

Buffer overflow in FinalWire Ltd AIDA64 Engineer 6.00.5100 allows attackers to execute arbitrary code by creating a crafted input that will overwrite the SEH handler...

7.8CVSS7.4AI score0.00485EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/02/18 12:0 a.m.8 views

FinalWire AIDA64 Engineer Buffer Error Vulnerability

Finalwire FinalWire AIDA64 Engineer is a hardware detection engine from the Hungarian company FinalWire Finalwire. The engine has diagnostic features and overclocking support, and supports real-time monitoring of transmitted voltage, temperature, and fan speed readings, among other things. A buff...

7.8CVSS7.4AI score0.00485EPSS
SaveExploits1References2
Rows per page
Query Builder