Lucene search
+L

93 matches found

Positive Technologies
Positive Technologies
•added 2018/06/18 12:00 a.m.•15 views

PT-2018-3432

Name of the Vulnerable Software and Affected Versions: tcpdump versions prior to 4.9.3 Description: The issue is related to a buffer overflow in the get next file function in tcpdump.c, which can be exploited by a remote attacker to gain unauthorized access to information, cause a denial of...

9.8CVSS7.2AI score0.06816EPSS
SaveExploits4References411
osv-alpine
osv-alpine
•added 2017/10/24 8:29 p.m.•10 views

ALPINE-CVE-2017-15873

The getnextblock function in archival/libarchive/decompressbunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation...

5.5CVSS7AI score0.01316EPSS
SaveExploits1References1
osv-ubuntu
osv-ubuntu
•added 2017/10/24 12:00 a.m.•13 views

UBUNTU-CVE-2017-15873

The getnextblock function in archival/libarchive/decompressbunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation...

5.5CVSS6.7AI score0.01316EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2017/10/22 12:00 a.m.•3 views

PT-2017-4121

Name of the Vulnerable Software and Affected Versions BusyBox version 1.27.2 Description The issue is related to an Integer Overflow in the get next block function, located in the archival/libarchive/decompress bunzip2.c component of BusyBox. This overflow may lead to a write access violation. Th...

5.5CVSS0.01316EPSS
SaveExploits1References197
osv-debian
osv-debian
•added 2017/09/21 11:29 p.m.•11 views

DEBIAN-CVE-2017-14682

GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted SVG document, a different vulnerability than CVE-2017-10928...

8.8CVSS7.9AI score0.02289EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2017/04/03 12:00 a.m.•2 views

PT-2017-7807

Name of the Vulnerable Software and Affected Versions YARA version 3.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash. This occurs when a crafted rule is mishandled in the yy get next buffer function...

7.5CVSS0.0286EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
•added 2016/08/12 12:00 a.m.•2 views

PT-2016-6838

Name of the Vulnerable Software and Affected Versions Flex versions prior to 2.6.1 Description A heap-based buffer overflow issue exists in the yy get next buffer function, potentially allowing attackers to cause a denial of service or possibly execute arbitrary code via certain vectors involving...

9.8CVSS0.09117EPSS
SaveExploits0
CNVD
CNVD
•added 2016/08/04 12:00 a.m.•47 views

Adobe Flex Buffer Overflow Vulnerability

Adobe Flex is the United States of America Odobie Adobe company's set of free, open source framework for building and maintaining Web applications. A buffer overflow vulnerability exists in the yygetnextbuffer function in Adobe Flex. A remote attacker could exploit this vulnerability to cause a...

9.8CVSS8.6AI score0.09117EPSS
SaveExploits0References1
CNVD
CNVD
•added 2015/09/15 12:00 a.m.•16 views

OpenLDAP Denial of Service Vulnerability (CNVD-2015-06013)

OpenLDAP is a free and open source implementation of the Lightweight Directory Access Protocol LDAP from the OpenLDAP Foundation in the United States, which is included in Linux distributions. A security vulnerability in the 'bergetnext' function in the libraries/liblber/io.c file in OpenLDAP...

5CVSS8.4AI score0.19984EPSS
SaveExploits3References1
osv-ubuntu
osv-ubuntu
•added 2015/09/11 12:00 a.m.•13 views

UBUNTU-CVE-2015-6908

The bergetnext function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrated by an attack against slapd...

5CVSS6.2AI score0.19984EPSS
SaveExploits3References4
Prion
Prion
•added 2012/06/13 10:24 a.m.•26 views

Race condition

Race condition in the scangetnextrmapitem function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel SamePage Merging KSM is enabled, allows local users to cause a denial of service NULL pointer dereference or possibly have unspecified other impact via a crafted application...

4CVSS7.2AI score0.00541EPSS
SaveExploits1References5Affected Software1
RedHat Linux
RedHat Linux
•added 2007/07/30 6:36 p.m.•13 views

xpdf integer overflow

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in 1 poppler before 0.5.91, 2 gpdf before 2.8.2, 3 kpdf, 4 kdegraphics, 5 CUPS, 6 PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a...

6.8CVSS6.8AI score0.08565EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2002/09/13 7:09 p.m.•14 views

security flaw

Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via 1 GetRequest, 2 GetNextRequest, and 3 SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly...

10CVSS5.9AI score0.51126EPSS
SaveExploits1References4
Rows per page
Query Builder