Lucene search
+L

961 matches found

RedhatCVE
RedhatCVE
added 2019/01/11 5:24 p.m.36 views

CVE-2018-20534

DISPUTED There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world...

6.5CVSS3.6AI score0.0233EPSS
SaveExploits1References2
OSV
OSV
added 2019/01/04 7:6 p.m.6 views

GHSA-645P-88QH-W398 Arbitrary Code Execution in jackson-databind

FasterXML jackson-databind 2.x before 2.9.7, 2.8.11.3, 2.7.9.5, and 2.6.7.3 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization...

9.8CVSS7.5AI score0.12679EPSS
SaveExploits0References38
Prion
Prion
added 2019/01/02 6:29 p.m.28 views

Deserialization of untrusted data

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization...

7.5CVSS9.6AI score0.12679EPSS
SaveExploits0References35Affected Software22
OSV
OSV
added 2019/01/02 6:29 p.m.5 views

UBUNTU-CVE-2018-14718

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization...

9.8CVSS7.5AI score0.12679EPSS
SaveExploits0References6
OSV
OSV
added 2019/01/02 6:29 p.m.30 views

CVE-2018-14718

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization...

9.8CVSS9.8AI score
SaveExploits0References35
Cvelist
Cvelist
added 2019/01/02 6:0 p.m.30 views

CVE-2018-14718

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization...

9.8AI score0.12679EPSS
SaveExploits0References35
OSV
OSV
added 2019/01/02 2:29 p.m.8 views

CVE-2018-5197

A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters. An crafted malicious parameters could cause...

7.8CVSS5.9AI score0.01137EPSS
SaveExploits0References2
NVD
NVD
added 2018/12/28 4:29 p.m.30 views

CVE-2018-20532

There is a NULL pointer dereference at ext/testcase.c function testcaseread in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service...

6.5CVSS6.5AI score0.02146EPSS
SaveExploits1References5
OSV
OSV
added 2018/12/28 4:29 p.m.23 views

CVE-2018-20532

There is a NULL pointer dereference at ext/testcase.c function testcaseread in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service...

6.5CVSS6.5AI score
SaveExploits0References5
Prion
Prion
added 2018/12/28 4:29 p.m.20 views

Null pointer dereference

There is a NULL pointer dereference at ext/testcase.c function testcaseread in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service...

4.3CVSS6.3AI score0.02146EPSS
SaveExploits1References5Affected Software2
Debian CVE
Debian CVE
added 2018/12/28 3:0 a.m.29 views

CVE-2018-20534

There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application...

6.5CVSS6.8AI score0.0233EPSS
SaveExploits1
CNVD
CNVD
added 2018/12/28 12:0 a.m.4 views

libsolv null pointer dereference vulnerability (CNVD-2019-40948)

Libsolv is a free package management library. A null pointer dereference vulnerability exists in the testcasestr2depcomplex function in ext/testcase.c in libsolvext.a in libsolv 0.7.2 and earlier. An attacker could exploit this vulnerability to cause a denial of service...

6.5CVSS9.2AI score0.02164EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2018/12/28 12:0 a.m.26 views

CVE-2018-20533

There is a NULL pointer dereference at ext/testcase.c function testcasestr2depcomplex in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service...

6.5CVSS6.6AI score0.02164EPSS
SaveExploits1References5
OSV
OSV
added 2018/12/28 12:0 a.m.5 views

UBUNTU-CVE-2018-20532

There is a NULL pointer dereference at ext/testcase.c function testcaseread in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service...

6.5CVSS6.5AI score0.02146EPSS
SaveExploits1References6
OSV
OSV
added 2018/12/28 12:0 a.m.6 views

UBUNTU-CVE-2018-20534

There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application...

6.5CVSS6.5AI score0.0233EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2018/12/19 12:0 a.m.8 views

PT-2022-23251 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC versions prior to the version that includes commit fef6242 Description: A heap-buffer-overflow occurred in the gf isom dovi config get function of isomedia/avc ext.c at line 2490, as demonstrated by MP4Box. Recommendations: For versions...

9.8CVSS7.5AI score0.04615EPSS
SaveExploits150References372
OSV
OSV
added 2018/11/20 9:29 p.m.50 views

CVE-2018-19396

ext/standard/varunserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of service application crash via an unserialize call for the com, dotnet, or variant class...

7.5CVSS6.7AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2018/11/20 9:29 p.m.48 views

CVE-2018-19395

ext/standard/var.c in PHP 5.x through 7.1.24 on Windows allows attackers to cause a denial of service NULL pointer dereference and application crash because com and comsafearrayproxy return NULL in compropertiesget in ext/comdotnet/comhandlers.c, as demonstrated by a serialize call on...

7.5CVSS7.1AI score0.04327EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2018/11/20 9:0 p.m.87 views

CVE-2018-19396

ext/standard/varunserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of service application crash via an unserialize call for the com, dotnet, or variant class...

7.5CVSS7.5AI score0.04584EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2018/10/30 12:31 p.m.5 views

kernel: out-of-bound write in ext4_init_block_bitmap function with a crafted ext4 image

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is possible by mounting and operating a crafted ext4 filesystem image...

7.8CVSS7AI score0.00752EPSS
SaveExploits1References4
Rows per page
Query Builder