Lucene search
+L

20403 matches found

CNVD
CNVD
•added 2021/12/17 12:00 a.m.•53 views

GNU Binutils Buffer Overflow Vulnerability (CNVD-2021-103512)

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU community. GNU Binutils is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause a denial of service...

7.8CVSS5.3AI score0.01411EPSS
SaveExploits1References1
osv_ghsa
osv_ghsa
•added 2021/12/16 3:27 p.m.•46 views

GHSA-XQ58-69H2-765M Cross Site Request Forgery in mailman

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request using that token to set a new admin password or make other changes...

8.8CVSS8.6AI score0.00757EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2021/12/16 3:27 p.m.•52 views

Cross Site Request Forgery in mailman

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request using that token to set a new admin password or make other changes...

8.8CVSS2.4AI score0.00757EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2021/12/15 8:15 p.m.•12 views

CVE-2021-45078

stabxcoffbuiltintype in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699...

7.8CVSS6.8AI score0.01411EPSS
SaveExploits1References10
osv_cve
osv_cve
•added 2021/12/15 8:15 p.m.•105 views

CVE-2021-45078

stabxcoffbuiltintype in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699...

7.8CVSS7.5AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2021/12/15 8:15 p.m.•50 views

CVE-2021-45078

stabxcoffbuiltintype in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699...

7.8CVSS6.9AI score0.01411EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
•added 2021/12/15 8:15 p.m.•177 views

CVE-2021-45078

stabxcoffbuiltintype in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699...

9.8CVSS7.1AI score0.04533EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2021/12/15 7:37 p.m.•66 views

CVE-2021-45078

stabxcoffbuiltintype in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699...

7.8CVSS8.3AI score0.01411EPSS
SaveExploits1
CVE
CVE
•added 2021/12/15 7:37 p.m.•229 views

CVE-2021-45078

CVE-2021-45078 affects GNU Binutils (binutils) with a heap-based buffer overflow in the stab handling path (stab_xcoff_builtin_type / finish_stab in stabs.c). The issue is present in Binutils up to version 2.37; exploitation can cause a denial of service and potentially other impact as demonstrat...

7.8CVSS8.1AI score0.01411EPSS
SaveExploits1References6Affected Software1
Mend
Mend
•added 2021/12/15 7:37 p.m.•4 views

CVE-2021-45078

stabxcoffbuiltintype in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699...

8.5CVSS0.01411EPSS
SaveExploits1References12
IBM Security Bulletins
IBM Security Bulletins
•added 2021/12/15 6:32 a.m.•65 views

Security Bulletin: App Connect Professional is affected by GNU C Library vulnerability.

Summary App Connect Professional have addressed the following vulnerability reported in GNU C Library. Vulnerability Details CVEID: CVE-2021-27218 DESCRIPTION: GNOME GLib is vulnerable to a denial of service, caused by an error when invoking gbytearraynewtake with a buffer of 4GB or more on a...

7.5CVSS8.1AI score0.0408EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/12/15 6:24 a.m.•43 views

Security Bulletin: App Connect Professional is affected by GNU C Library vulnerability

Summary App Connect Professional have addressed the following vulnerability reported in GNU C Library. Vulnerability Details CVEID: CVE-2021-27645 DESCRIPTION: GNU glibc is vulnerable to a denial of service, caused by double-free in the nameserver caching daemon nscd. By sending a specially-craft...

2.5CVSS6.6AI score0.00385EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/12/15 6:21 a.m.•74 views

Security Bulletin: App Connect Professional is affected by GNU C Library vulnerability

Summary App Connect Professional have addressed the following vulnerability reported in GNU C Library. Vulnerability Details CVEID: CVE-2021-33574 DESCRIPTION: GNU C Library aka glibc is vulnerable to a denial of service, caused by a use-after-free flaw in the mqnotify function. By sending a...

9.8CVSS7.1AI score0.03522EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/12/15 6:15 a.m.•51 views

Security Bulletin: App Connect Professional is affected by GNU C Library vulnerability.

Summary App Connect Professional have addressed the following vulnerability reported in GNU C Library. Vulnerability Details CVEID: CVE-2021-35942 DESCRIPTION: GNU C Library aka glibc could allow a local attacker to obtain sensitive information, caused by a flaw when called with an untrusted,...

9.1CVSS6.8AI score0.02753EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/12/15 5:13 a.m.•47 views

Security Bulletin: App Connect Professional is affected by GNU C Library vulnerability

Summary App Connect Professional have addressed the following vulnerability reported in GNU C Library. Vulnerability Details CVEID: CVE-2021-35942 DESCRIPTION: GNU C Library aka glibc could allow a local attacker to obtain sensitive information, caused by a flaw when called with an untrusted,...

9.1CVSS6.8AI score0.02753EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/12/15 5:08 a.m.•51 views

Security Bulletin: App Connect Professional is affected by GNU C Library vulnerability

Summary App Connect Professional have addressed the following vulnerability reported in GNU C Library. Vulnerability Details CVEID: CVE-2021-3326 DESCRIPTION: GNU C Library aka glibc or libc6 is vulnerable to a denial of service, caused by an assertion failure when processing invalid input...

7.5CVSS8.3AI score0.03779EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/12/15 5:04 a.m.•49 views

Security Bulletin: App Connect Professional is affected by GNU C Library vulnerability.

Summary App Connect Professional have addressed the following vulnerability reported in GNU C Library. Vulnerability Details CVEID: CVE-2020-10029 DESCRIPTION: GNU C Library aka glibc or libc6 is vulnerable to a denial of service, caused by a stack-based overflow during range reduction. A local...

5.5CVSS6.5AI score0.00764EPSS
SaveExploits1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/15 12:00 a.m.•5 views

CVE-2021-45078: Out-of-bounds Write

stabxcoffbuiltintype in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699...

7.8CVSS6.7AI score0.01411EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•2 views

PT-2021-6021

Name of the Vulnerable Software and Affected Versions GNU Binutils versions through 2.37 Description The issue is related to a heap-based buffer overflow in the stab xcoff builtin type function in stabs.c, which can cause a denial of service or possibly have other unspecified impacts. This is due...

7.8CVSS0.01411EPSS
SaveExploits1References64
Tenable Nessus
Tenable Nessus
•added 2021/12/15 12:00 a.m.•56 views

SUSE SLES12 Security Update : gettext-runtime (SUSE-SU-2021:4060-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:4060-1 advisory. - CVE-2018-18751: Fixed a double free bsc1113719 Tenable has extracted the preceding description block directly from the SUSE security...

9.8CVSS7AI score0.04257EPSS
SaveExploits1References4
Rows per page
Query Builder