Lucene search
+L

24367 matches found

Prion
Prion
added 2022/07/22 3:15 p.m.23 views

Heap overflow

Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consumeencodednamenew at format/wasm/wasm.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted binary file...

1.9CVSS5.6AI score0.00289EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2022/07/22 3:15 p.m.34 views

CVE-2022-34502

Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consumeencodednamenew at format/wasm/wasm.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted binary file...

5.5CVSS6.3AI score0.00289EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2022/07/22 2:17 p.m.96 views

CVE-2022-34502

Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consumeencodednamenew at format/wasm/wasm.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted binary file...

5.5CVSS5.5AI score0.00289EPSS
SaveExploits1
CVE
CVE
added 2022/07/22 2:17 p.m.106 views

CVE-2022-34502

CVE-2022-34502 affects Radare2 v5.7.0. The vulnerability is a heap buffer overflow in the function consume_encoded_name_new within format/wasm/wasm.c , enabling a Denial of Service when processing a crafted binary file. All connected documents consistently describe the same root cause and impact ...

5.5CVSS5.5AI score0.00289EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/07/22 11:05 a.m.7 views

OESA-2022-1774 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges.CVE-2022-2318 An issue was discovered in the Linux kernel through...

7.8CVSS7.1AI score0.05496EPSS
SaveExploits10References10
OpenVAS
OpenVAS
added 2022/07/22 12:00 a.m.24 views

Fedora: Security Advisory for libtiff (FEDORA-2022-b9c2a3a2b7)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7AI score
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/22 12:00 a.m.7 views

Atlassian Jira 跨站脚本漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A security vulnerability exists in Atlassian Jira Better PDF Exporter add-on version 10.0.0, which originates from a customized...

6.1CVSS5.9AI score0.00607EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/07/22 12:00 a.m.8 views

radare2 缓冲区错误漏洞

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in radare2 version v5.7.0, which stems from a heap buffer overflow vulnerability discovered via the consumeencodednamenew function in format/wasm/wasm.c. The vulnerability is caused by the use o...

5.5CVSS5.9AI score0.00289EPSS
SaveExploits1References2
Fedora
Fedora
added 2022/07/21 5:10 p.m.33 views

[SECURITY] Fedora 35 Update: libtiff-4.4.0-2.fc35

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

6.5CVSS2AI score0.01289EPSS
SaveExploits3
OSV
OSV
added 2022/07/20 2:48 p.m.6 views

USN-5272-1 hdf5 vulnerabilities

It was discovered that HDF5 incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service...

6.5CVSS7.3AI score0.01758EPSS
SaveExploits3References4
RedHat Linux
RedHat Linux
added 2022/07/19 9:07 p.m.6 views

nodejs: Certificate Verification Bypass via String Injection

It was found that node.js did not safely read the x509 certificate generalName format properly, resulting in data injection. A certificate could use a specially crafted extension in order to be successfully validated, permitting an attacker to impersonate a trusted host...

5.3CVSS7.2AI score0.10364EPSS
SaveExploits1References4
OSV
OSV
added 2022/07/18 12:15 a.m.6 views

CVE-2020-23561

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptionsW+0x0000000000005722...

5.5CVSS5.8AI score0.00327EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/07/18 12:00 a.m.12 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.06063EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/07/18 12:00 a.m.13 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.03549EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/07/18 12:00 a.m.13 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is released. These vulnerabilities allow attackers to disclose protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow attackers to disclose protected...

5.5CVSS6.5AI score0.03115EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/07/18 12:00 a.m.13 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.02844EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/07/18 12:00 a.m.11 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.03433EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/07/18 12:00 a.m.15 views

Fedora: Security Advisory for golang-github-pelletier-toml-2 (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
BDU FSTEC
BDU FSTEC
added 2022/07/18 12:00 a.m.11 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the use of an uninitialized pointer, which allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of an uninitialized pointer. Exploiting these vulnerabilities can allow attackers to execute arbitrary code...

7.8CVSS7.6AI score0.03377EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/07/18 12:00 a.m.13 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data outside of the buffer in memory. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data outside the buffer in memory. Exploiting these vulnerabilities can allow attackers to execute...

7.8CVSS7.8AI score0.03264EPSS
SaveExploits0References2
Rows per page
Query Builder