Lucene search
+L

2895 matches found

OSV
OSV
added 2018/12/24 5:29 a.m.8 views

CVE-2018-20431

GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function processmetadata in plugins/ole2extractor.c...

6.5CVSS6.3AI score
SaveExploits0References6
OSV
OSV
added 2018/12/24 5:29 a.m.5 views

DEBIAN-CVE-2018-20430

GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function historyextract in plugins/ole2extractor.c, related to EXTRACTORcommonconverttoutf8 in common/convert.c...

6.5CVSS6.9AI score0.02237EPSS
SaveExploits1References1
OSV
OSV
added 2018/12/24 5:29 a.m.12 views

UBUNTU-CVE-2018-20431

GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function processmetadata in plugins/ole2extractor.c...

6.5CVSS6.8AI score0.02236EPSS
SaveExploits1References7
Debian CVE
Debian CVE
added 2018/12/24 5:00 a.m.65 views

CVE-2018-20431

GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function processmetadata in plugins/ole2extractor.c...

6.5CVSS6.6AI score0.02236EPSS
SaveExploits1
CNVD
CNVD
added 2018/12/24 12:00 a.m.10 views

GNU Libextractor Buffer Overflow Vulnerability (CNVD-2019-03527)

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A buffer overflow vulnerability exists in the 'historyextract' function in the plugins/ole2extractor.c file in GNU Libextractor 1.8 and earlier. No details of the vulnerability are provided at...

6.5CVSS9.1AI score0.02237EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/12/24 12:00 a.m.6 views

GNU Libextractor Denial of Service Vulnerability (CNVD-2019-03528)

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A null pointer back-reference vulnerability exists in the 'processmetadata' function in the plugins/ole2extractor.c file in GNU Libextractor 1.8 and earlier. An attacker could exploit this...

6.5CVSS8.6AI score0.02236EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/12/07 12:00 a.m.8 views

Google Android Information Disclosure Vulnerability (CNVD-2018-26778)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in the dumpExtractors of the IMediaExtractor.cp file in Android, which can be exploited by an attacker to obtain recently accessed...

5.5CVSS5.5AI score0.00165EPSS
SaveExploits0References1
OSV
OSV
added 2018/12/06 2:29 p.m.8 views

CVE-2018-9554

In dumpExtractors of IMediaExtractor.cp, there is a possible disclosure of recently accessed media files due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

5.5CVSS5.9AI score0.00165EPSS
SaveExploits0References2
OSV
OSV
added 2018/09/04 12:29 a.m.13 views

CVE-2018-16430

GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...

8.8CVSS8.5AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2018/09/04 12:29 a.m.46 views

CVE-2018-16430

GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...

8.8CVSS7.2AI score0.02646EPSS
SaveExploits1References3
Prion
Prion
added 2018/09/04 12:29 a.m.16 views

Out-of-bounds

GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...

6.8CVSS8.4AI score0.02646EPSS
SaveExploits1References5Affected Software2
OSV
OSV
added 2018/09/04 12:29 a.m.8 views

UBUNTU-CVE-2018-16430

GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...

8.8CVSS7.2AI score0.02646EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2018/09/04 12:00 a.m.30 views

CVE-2018-16430

GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...

8.5AI score0.02646EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2018/09/04 12:00 a.m.54 views

CVE-2018-16430

GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTORzipextractmethod in zipextractor.c...

8.8CVSS8.6AI score0.02646EPSS
SaveExploits1
ossfuzz
ossfuzz
added 2018/07/24 3:22 p.m.20 views

llvm/llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::DataExtractor::getU32

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=4561877290975232 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

6.8AI score
SaveExploits0Affected Software1
CNVD
CNVD
added 2018/07/18 12:00 a.m.2 views

GNU Libextractor mpeg_extractor.c File Infinite Loop Vulnerability

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. An infinite loop vulnerability exists in the 'EXTRACTORmpegextractmethod' function mpegextractor.c file in GNU Libextractor versions prior to 1.7. An attacker can exploit this vulnerability to...

6.5CVSS7.1AI score0.01718EPSS
SaveExploits1References1
OSV
OSV
added 2018/07/17 3:29 p.m.10 views

UBUNTU-CVE-2018-14347

GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod mpegextractor.c...

6.5CVSS7.3AI score0.01718EPSS
SaveExploits1References6
Prion
Prion
added 2018/07/17 3:29 p.m.16 views

Design/Logic Flaw

GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod mpegextractor.c...

4.3CVSS7.3AI score0.01718EPSS
SaveExploits1References5Affected Software2
OSV
OSV
added 2018/07/17 3:29 p.m.6 views

DEBIAN-CVE-2018-14347

GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod mpegextractor.c...

6.5CVSS7.3AI score0.01718EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/06/14 12:00 a.m.38 views

DFArc Path Traversal Vulnerability

DFArc frontend is a frontend integration program for the Dink Smallwood game engine.D-Mod extractor is one of the D-Mod extractors. A path traversal vulnerability exists in D-Mod extractor in DFArc frontend versions prior to 3.14. An attacker can exploit this vulnerability to overwrite arbitrary...

7.5CVSS7.4AI score0.02448EPSS
SaveExploits0References1
Rows per page
Query Builder