Lucene search
+L

82 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/28 12:00 a.m.•4 views

CVE-2018-20551: Improper Input Validation

A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c...

6.5CVSS7.4AI score0.0202EPSS
SaveExploits1References2
OSV
OSV
•added 2018/12/28 12:00 a.m.•8 views

UBUNTU-CVE-2018-20551

A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c...

6.5CVSS6.7AI score0.0202EPSS
SaveExploits1References5
OSV
OSV
•added 2018/11/06 5:29 p.m.•13 views

CVE-2018-9437

In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0...

5.5CVSS5.9AI score0.00884EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/06 12:00 a.m.•4 views

CVE-2018-9437: Out-of-bounds Read

In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0...

7.1CVSS6.6AI score0.00884EPSS
SaveExploits0References2
Veracode
Veracode
•added 2018/10/24 3:33 a.m.•18 views

Cross-Site Scripting (XSS)

angular-gettext is vulnerable to cross-site scripting. interpolationContext is passed to getString or getPlural functions in dist/angular-gettext.js and src/directive.js, which allows attackers to inject arbitrary Javascript code into a victim's browser when the attribute...

6.5AI score
SaveExploits0
CNVD
CNVD
•added 2018/07/06 12:00 a.m.•12 views

libming 'getString' function null pointer dereference vulnerability

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'getString' function of the decompile.c file in libming version 0.4.8. A remote attacker can exploit th...

6.5CVSS6.4AI score0.01456EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2018/07/05 2:29 p.m.•47 views

CVE-2018-13250

libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...

6.5CVSS6.6AI score0.01456EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2018/07/05 2:29 p.m.•7 views

CVE-2018-13250

libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...

6.5CVSS5.6AI score0.01456EPSS
SaveExploits1References2
OSV
OSV
•added 2018/07/05 2:29 p.m.•60 views

UBUNTU-CVE-2018-13250

libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...

6.5CVSS6.6AI score0.01456EPSS
SaveExploits1References3
CVE
CVE
•added 2018/07/05 2:00 p.m.•62 views

CVE-2018-13250

CVE-2018-13250 affects libming 0.4.8, where a NULL pointer dereference in the getString function of decompile.c (related to decompileSTRINGCONCAT) allows remote attackers to cause a denial of service via a crafted SWF file. Public documents consistently describe the vulnerable code path and impac...

6.5CVSS6.2AI score0.01456EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2018/07/05 2:00 p.m.•45 views

CVE-2018-13250

libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file...

6.3AI score0.01456EPSS
SaveExploits1References1
NVD
NVD
•added 2018/05/17 4:29 a.m.•30 views

CVE-2018-11226

The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact...

8.8CVSS9.1AI score0.01712EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2018/05/17 4:29 a.m.•39 views

CVE-2018-11226

The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact...

8.8CVSS7.3AI score0.01712EPSS
SaveExploits1References3
OSV
OSV
•added 2018/05/17 4:29 a.m.•28 views

UBUNTU-CVE-2018-11226

The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact...

8.8CVSS5.9AI score0.01712EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2018/05/17 4:00 a.m.•38 views

CVE-2018-11226

The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact...

9.1AI score0.01712EPSS
SaveExploits1References2
CNVD
CNVD
•added 2018/05/17 12:00 a.m.•17 views

libming denial of service vulnerability (CNVD-2018-10325)

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, and so on. A security vulnerability exists in the 'getString' function of the decompile.c file in libming 0.4.8 and earlier versions, which stems from the program's failure to correctly handle a situatio...

8.8CVSS6.8AI score0.01712EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/17 12:00 a.m.•1 views

CVE-2018-11226: Improper Restriction of Operations within the Bounds of a Memory Buffer

The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact...

8.8CVSS7.8AI score0.01712EPSS
SaveExploits1References2
CNVD
CNVD
•added 2018/03/09 12:00 a.m.•50 views

Heap buffer overflow vulnerability in libming 'getString' function (CNVD-2018-05225)

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A heap buffer overflow vulnerability exists in the 'getString' function of the util/decompile.c file in libming version 0.4.8. An attacker can...

6.5CVSS7.2AI score0.01882EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/03/09 12:00 a.m.•14 views

Heap buffer overflow vulnerability in libming 'getString' function (CNVD-2018-05219)

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A heap buffer overflow vulnerability exists in the 'getString' function of the util/decompile.c file in libming version 0.4.8. An attacker can...

6.5CVSS7.2AI score0.01615EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/03/09 12:00 a.m.•14 views

libming 'getString' function heap buffer out-of-bounds read vulnerability

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A heap buffer out-of-bounds read vulnerability exists in the 'getString' function of the util/decompile.c file in libming version 0.4.8. An...

6.5CVSS6.9AI score0.0154EPSS
SaveExploits1References1
Rows per page
Query Builder