Lucene search
+L

2625 matches found

BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.8 views

The vulnerability of the PutSubImage() function in the client-side API library for the X Window System, libX11, allows a hacker to trigger a service failure.

The vulnerability of the PutSubImage function in the client-side API library for the X Window System libX11 is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00461EPSS
SaveExploits1References24Affected Software9
Vulnrichment
Vulnrichment
added 2023/10/03 9:34 a.m.13 views

CVE-2023-37891 WordPress Exit Popups & Onsite Retargeting by OptiMonk Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in OptiMonk OptiMonk: Popups, Personalization & A/B Testing plugin = 2.0.4 versions...

4.3CVSS7.1AI score0.00253EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/09/16 12:0 a.m.8 views

The vulnerability of the Wireshark traffic analyzer lies in the execution of a loop with an unavailable exit condition, allowing a hacker to cause a service failure.

The vulnerability of the Wireshark traffic analyzer is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a malicious actor to cause a service failure...

7.8CVSS6.7AI score0.00438EPSS
SaveExploits0References11Affected Software7
OSV
OSV
added 2023/09/13 5:15 p.m.3 views

DEBIAN-CVE-2023-4155

A flaw was found in KVM AMD Secure Encrypted Virtualization SEV in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the VMGEXIT handler recursively. If an attacker manages to call the handler multiple time...

5.6CVSS6AI score0.00159EPSS
SaveExploits0References1
Rosalinux
Rosalinux
added 2023/09/12 11:49 a.m.31 views

Advisory ROSA-SA-2023-2233

Software: thunderbird 102.14.0 OS: rosa-server79 packageevrstring: thunderbird-102.14.0-3.res7.x8664.rpm CVE-ID: CVE-2023-3417 BDU-ID: 2023-03965 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Thunderbird email client exists due to improper handling of the Unicode character for overriding text...

9.8CVSS8.8AI score0.13384EPSS
SaveExploits1
Rosalinux
Rosalinux
added 2023/09/12 11:49 a.m.36 views

Advisory ROSA-SA-2023-2232

Software: firefox 102.14.0 OS: rosa-server79 packageevrstring: firefox-102.14.0-3.res7.x8664.rpm CVE-ID: CVE-2023-3417 BDU-ID: 2023-03965 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Thunderbird email client exists due to improper handling of the Unicode character for overriding text directio...

9.8CVSS8.8AI score0.13384EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.10 views

The vulnerability of the Exiv2 metadata management library, related to the execution of a loop with an unreachable exit condition, allows a perpetrator to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.01051EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/09/07 12:0 a.m.10 views

The vulnerability of the TIFFReadDirectory function in the LibTIFF library, which allows a hacker to cause a service failure.

The vulnerability of the TIFFReadDirectory function in the LibTIFF library is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7.2AI score0.00805EPSS
SaveExploits1References9Affected Software4
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.32 views

Oracle Linux 8 : libarchive (ELSA-2019-3698)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3698 advisory. - fix out-of-bounds read within lhareaddatanone CVE-2017-14503 - fix crash on crafted 7zip archives CVE-2019-1000019 Tenable has extracted the precedin...

8.8CVSS6.5AI score0.04575EPSS
SaveExploits1References6
Amazon
Amazon
added 2023/09/07 12:0 a.m.35 views

Medium: php72-pecl-imagick

Issue Overview: ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service. CVE-2017-1000476 The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability th...

9.8CVSS9.6AI score0.05916EPSS
SaveExploits52
BDU FSTEC
BDU FSTEC
added 2023/09/04 12:0 a.m.7 views

The vulnerability of the QXmlStreamReader function in the cross-platform framework for Qt software development allows a attacker to cause a service failure.

The vulnerability of the QXmlStreamReader function in the cross-platform software development framework for Qt is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.8CVSS7.3AI score0.01273EPSS
SaveExploits0References18Affected Software10
CNNVD
CNNVD
added 2023/09/02 12:0 a.m.5 views

Linux Kernel Competitive Conditions Problem Vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux Kernel suffers from a Competitive Condition Issue vulnerability, which stems from a flaw found in the memory management subsystem, where a competition exists between ...

4.7CVSS6.5AI score0.00179EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2023/08/24 6:30 a.m.25 views

CVE-2023-4511 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file...

5.3CVSS7.8AI score0.00438EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2023/08/09 2:20 p.m.54 views

Moderate: Red Hat Security Advisory: RHUI 4.5.0 release - Security, Bug Fixes, and Enhancements

An updated version of Red Hat Update Infrastructure RHUI is now available. RHUI 4.5 fixes several security and operational bugs and also adds several new features. Red Hat Update Infrastructure RHUI offers a highly scalable, highly redundant framework that enables you to manage repositories and...

9.8CVSS6.6AI score0.0138EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
added 2023/08/08 1:32 a.m.4 views

SUSE CVE-2023-4155

A flaw was found in KVM AMD Secure Encrypted Virtualization SEV in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the VMGEXIT handler recursively. If an attacker manages to call the handler multiple time...

6.5CVSS6.3AI score0.00159EPSS
SaveExploits0References16
OSV
OSV
added 2023/07/06 1:15 p.m.5 views

CVE-2022-48509

Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally...

5.9CVSS5.8AI score0.00334EPSS
SaveExploits0References2
NVD
NVD
added 2023/07/06 1:15 p.m.29 views

CVE-2022-48509

Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally...

5.9CVSS5.7AI score0.00334EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/07/06 12:38 p.m.33 views

CVE-2022-48509

Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally...

5.9AI score0.00334EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/07/06 12:38 p.m.11 views

CVE-2022-48509

Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally...

6.8AI score0.00334EPSS
SaveExploits0References2
CVE
CVE
added 2023/07/06 12:38 p.m.47 views

CVE-2022-48509

CVE-2022-48509 describes a race condition in Huawei Share within Huawei HarmonyOS caused by multi-thread access to mutually exclusive resources. The vulnerability may cause the affected program to exit abnormally if exploited. Based on available sources, the issue is a race condition with impact ...

5.9CVSS5.6AI score0.00334EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder