Lucene search
K

9288 matches found

Veracode
Veracode
added 2019/05/02 5:39 a.m.24 views

Heap-based Buffer Overflow

PHP is vulnerable to heap-based buffer overflow. Attackers are able to execute arbitrary code via a large regular expression...

6.8CVSS7AI score0.0837EPSS
Exploits1References24Affected Software7
Veracode
Veracode
added 2019/05/02 5:39 a.m.50 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
Exploits32References52Affected Software6
Veracode
Veracode
added 2019/05/02 5:39 a.m.42 views

Remote Code Execution (RCE) Via Memory Corruption

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
Exploits32References24Affected Software6
Veracode
Veracode
added 2019/05/02 5:39 a.m.45 views

Out-Of-Bounds Read

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
Exploits32References22Affected Software5
Veracode
Veracode
added 2019/05/02 5:34 a.m.21 views

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists through parsing a malicious regular expression...

7.5CVSS6.6AI score0.03764EPSS
Exploits0References19Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.31 views

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists when parsing a malicious regular expression...

9.8CVSS6.7AI score0.06404EPSS
Exploits0References37Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.31 views

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists through the parsing of a malicious regular expression...

7.5CVSS6.6AI score0.06587EPSS
Exploits0References23Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.27 views

Denial Of Service (DoS)

PCRE is vulneraable to denial of service DoS. The vulnerability exists through the parsing of a malicious regular expression...

9.8CVSS6.8AI score0.07059EPSS
Exploits0References26Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.15 views

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists through parsing a malicious regular expression...

7.5CVSS6.6AI score0.05623EPSS
Exploits0References23Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.34 views

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists through parsing a malicious regular expression...

7.5CVSS6.6AI score0.03764EPSS
Exploits0References19Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.27 views

Denial Of Service (DoS)

pcre is vulnerable to denial of service DoS. The vulnerability exists as remote attackers can supply malicious regular expression to cause DoS attacks...

7.5CVSS5.7AI score0.06169EPSS
Exploits1References32Affected Software4
Veracode
Veracode
added 2019/05/02 4:46 a.m.55 views

Privilege Escalation

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...

5.9CVSS7AI score0.15561EPSS
Exploits7References36Affected Software63
Veracode
Veracode
added 2019/05/02 4:46 a.m.63 views

Information Disclosure

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...

5.9CVSS7AI score0.15561EPSS
Exploits7References42Affected Software63
Veracode
Veracode
added 2019/05/02 4:46 a.m.46 views

Weak Authentication

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...

5.9CVSS7AI score0.15561EPSS
Exploits7References40Affected Software63
Veracode
Veracode
added 2019/05/02 4:46 a.m.52 views

Information Disclosure

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...

5.9CVSS7AI score0.15561EPSS
Exploits7References36Affected Software63
Veracode
Veracode
added 2019/05/02 4:45 a.m.33 views

Denial Of Service (DoS)

Tcl Tool Command Language provides a powerful platform for creating integration applications that tie together diverse applications, protocols, devices, and frameworks. When paired with the Tk toolkit, Tcl provides a fast and powerful way to create cross-platform GUI applications. Two denial of...

6.8CVSS8.7AI score0.03887EPSS
Exploits2References43Affected Software2
Veracode
Veracode
added 2019/05/02 4:44 a.m.58 views

Stack-based Buffer Overflow

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the Name Server Caching Daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. It was found that...

5CVSS7.6AI score0.04113EPSS
Exploits2References25Affected Software1
Positive Technologies
Positive Technologies
added 2019/04/21 12:0 a.m.3 views

PT-2019-12298 · Artifex · Artifex Mujs

Name of the Vulnerable Software and Affected Versions: Artifex MuJS version 1.0.5 Description: An issue was discovered in Artifex MuJS. It has unlimited recursion because the match function in regexp.c lacks a depth check. Recommendations: For Artifex MuJS version 1.0.5, consider applying a patch...

7.5CVSS6.5AI score0.02323EPSS
Exploits0References12
Veracode
Veracode
added 2019/04/11 2:59 a.m.7 views

Regular Expression Denial Of Service (ReDoS)

marked is vulnerable to regular expression denial of service ReDoS attacks. The vulnerability exists as the inline.text regex could require a quadratic time to complete a scan, causing ReDoS...

6.5AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2019/04/04 12:0 a.m.27 views

(0Day) Hewlett Packard Enterprise Intelligent Management Center perfSelectTask Expression Language Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

8.8CVSS3.1AI score0.0364EPSS
Exploits0
Rows per page
Query Builder