Lucene search
+L

7 matches found

OSV
OSV
•added 2026/02/14 12:09 a.m.•16 views

OSV-2026-240 Use-of-uninitialized-value in packet_get1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=483928517 Crash type: Use-of-uninitialized-value Crash state: packetget1 gpsdpoll FuzzDrivers.c...

5.4AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/16 12:00 a.m.•7 views

PT-2024-40893 · Git +1 · Gpsd

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the packet parse function, which calls packet get1 and then packet get. No information i...

6.9AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2010/10/10 12:00 a.m.•49 views

FreeBSD Ports: lftp

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.5CVSS9.4AI score0.03629EPSS
SaveExploits0References2
NVD
NVD
•added 2010/07/06 5:17 p.m.•20 views

CVE-2010-2251

The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a Content-Disposition header that suggests a crafted...

7.5CVSS7.2AI score0.03629EPSS
SaveExploits0References15
OSV
OSV
•added 2010/07/06 5:17 p.m.•10 views

DEBIAN-CVE-2010-2251

The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a Content-Disposition header that suggests a crafted...

7.5CVSS6.7AI score0.03629EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2010/07/06 2:00 p.m.•32 views

CVE-2010-2251

The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a Content-Disposition header that suggests a crafted...

9.5AI score0.03629EPSS
SaveExploits0References15
Mend
Mend
•added 2010/07/06 2:00 p.m.•2 views

CVE-2010-2251

The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a Content-Disposition header that suggests a crafted...

7.5CVSS0.03629EPSS
SaveExploits0References17
Rows per page
Query Builder