Lucene search
+L

10010 matches found

AlpineLinux
AlpineLinux
added 2018/12/05 10:00 p.m.71 views

CVE-2018-18312

Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...

9.8CVSS9.4AI score0.12093EPSS
SaveExploits1References14
Cvelist
Cvelist
added 2018/12/05 10:00 p.m.54 views

CVE-2018-18312

Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...

9.3AI score0.12093EPSS
SaveExploits1References14
CVE
CVE
added 2018/12/05 10:00 p.m.243 views

CVE-2018-18312

Perl 5.26.3 and 5.28.0 before 5.28.1 are affected by CVE-2018-18312 due to a buffer overflow in handling crafted regular expressions (regcomp.c). The issue enables invalid writes when parsing certain regex patterns. Affected versions: Perl before 5.26.3 and 5.28.0 before 5.28.1. Fixes are availab...

9.8CVSS9.4AI score0.12093EPSS
SaveExploits1References14Affected Software1
Veracode
Veracode
added 2018/12/05 2:46 a.m.26 views

Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This is due to an issue with capturing the name of a function expression in one of the param scope functions where the name symbols are not added to the body. This allows a remote attacker to execute arbitrary code in the context of the...

8.1CVSS8.4AI score0.10809EPSS
SaveExploits0References1Affected Software2
OSV
OSV
added 2018/12/04 9:29 a.m.16 views

UBUNTU-CVE-2018-19837

In LibSass prior to 3.5.5, Sass::Eval::operatorSass::BinaryExpression inside eval.cpp allows attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, because of certain incorrect parsing of '%' as a modulo operator in parser.cpp...

6.5CVSS7.3AI score0.01782EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2018/12/04 12:00 a.m.35 views

RHEL 7 : Red Hat OpenShift Enterprise (RHSA-2016:1605)

An update is now available for Red Hat OpenShift Enterprise 3.1 and Red Hat OpenShift Enterprise 3.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

8AI score
SaveExploits0References5
CNVD
CNVD
added 2018/12/03 12:00 a.m.9 views

Perl Buffer Overflow Vulnerability

Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall. A buffer overflow vulnerability exists in Perlmysetenv in versions prior to Perl 5.26.3 and 5.28.x prior to 5.28.1. An attacker can exploit this vulnerability to cause a denial of service ...

9.8CVSS9.6AI score0.11676EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2018/11/30 12:00 a.m.32 views

Debian DSA-4347-1 : perl - security update

Multiple vulnerabilities were discovered in the implementation of the Perl programming language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2018-18311 Jayakrishna Menon and Christophe Hauser discovered an integer overflow vulnerability in Perlmysete...

9.8CVSS7.3AI score0.12093EPSS
SaveExploits3References11
OSV
OSV
added 2018/11/29 12:00 a.m.8 views

UBUNTU-CVE-2018-18314

Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations...

9.8CVSS7AI score0.0606EPSS
SaveExploits1References3
OSV
OSV
added 2018/11/29 12:00 a.m.13 views

UBUNTU-CVE-2018-18313

Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory...

9.1CVSS6.9AI score0.09524EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2018/11/29 12:00 a.m.36 views

CVE-2018-18313

Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory...

9.1CVSS7AI score0.09524EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2018/11/29 12:00 a.m.39 views

CVE-2018-18314

Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations...

9.8CVSS7AI score0.0606EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2018/11/29 12:00 a.m.31 views

CVE-2018-18312

Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...

9.8CVSS7.1AI score0.12093EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2018/11/29 12:00 a.m.43 views

CVE-2018-18311

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...

9.8CVSS7.4AI score0.11676EPSS
SaveExploits0References3
OSV
OSV
added 2018/11/29 12:00 a.m.6 views

UBUNTU-CVE-2018-18312

Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...

9.8CVSS7.1AI score0.12093EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2018/11/27 12:00 a.m.34 views

Scientific Linux Security Update : python on SL7.x x86_64 (20181030)

Security Fixes : - python: DOS via regular expression backtracking in difflib.ISLINEJUNK method in difflib CVE-2018-1061 - python: DOS via regular expression catastrophic backtracking in apop method in pop3lib CVE-2018-1060 C Tenable Network Security, Inc. The descriptive text is C Scientific...

7.5CVSS6.3AI score0.05039EPSS
SaveExploits1References3
zdt
zdt
added 2018/11/21 12:00 a.m.391 views

Richfaces 3.x Remote Code Execution Vulnerability

Exploit for multiple platform in category web applications Original report+advisories: TITLE: ==================== Unauthenticated Remote Code execution in WebApps using Richfaces 3.X all versions. RESUME ==================== RichFaces Framework 3.X through 3.3.4 all versions is vulnerable to...

0.74171EPSS
SaveExploits8
Packet Storm
Packet Storm
added 2018/11/20 12:00 a.m.366 views

Richfaces 3.x Remote Code Execution

Original report+advisories: TITLE: ==================== Unauthenticated Remote Code execution in WebApps using Richfaces 3.X all versions. RESUME ==================== RichFaces Framework 3.X through 3.3.4 all versions is vulnerable to Expression Language EL Injection via UserResource resource,...

9.5AI score0.74171EPSS
SaveExploits8
Prion
Prion
added 2018/11/15 8:29 p.m.30 views

Design/Logic Flaw

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection...

6.5CVSS7AI score0.05097EPSS
SaveExploits2References2Affected Software1
OSV
OSV
added 2018/11/15 8:29 p.m.37 views

CVE-2018-16621

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection...

7.2CVSS6.9AI score
SaveExploits0References2
Rows per page
Query Builder