Lucene search
+L

20454 matches found

Debian
Debian
•added 2024/12/07 6:53 p.m.•21 views

[SECURITY] [DLA 3985-1] gsl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3985-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 07, 2024 https://wiki.debian.org/LTS -...

6.5CVSS6.6AI score0.00965EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2024/12/06 11:20 p.m.•30 views

CVE-2024-53589

A buffer overflow vulnerability exists in GNU Binutils’ objdump utility when processing tekhex format files. During format identification, the vulnerability occurs in the Binary File Descriptor BFD library’s tekhex parser. A specially crafted tekhex file, when processed by objdump, may trigger an...

6.6CVSS7.2AI score0.00269EPSS
SaveExploits0References5
CNVD
CNVD
•added 2024/12/06 12:00 a.m.•13 views

GNU Emacs Code Execution Vulnerability

GNU Emacs is a family of text editors in the American GNU community. A code execution vulnerability exists in GNU Emacs, which stems from the fact that a user who chooses to call elisp-completion-at-point on untrusted source code may trigger an insecure macro expansion that can be exploited by an...

7.8CVSS7.8AI score0.006EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/12/05 8:15 p.m.•20 views

CVE-2024-53589

GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD Binary File Descriptor library's handling of tekhex format files...

6.6AI score0.00269EPSS
SaveExploits0References3
NVD
NVD
•added 2024/12/05 8:15 p.m.•35 views

CVE-2024-53589

GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD Binary File Descriptor library's handling of tekhex format files...

8.4CVSS0.00269EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2024/12/05 8:15 p.m.•12 views

DEBIAN-CVE-2024-53589

GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD Binary File Descriptor library's handling of tekhex format files...

8.4CVSS6.4AI score0.00269EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/05 12:00 a.m.•108 views

CVE-2024-53589

GNU objdump 2.43 is vulnerable to a Buffer Overflow within the Binary File Descriptor (BFD) library. The issue originates from the tekhex parser failing to properly validate the length of input data when processing tekhex-formatted files . An attacker can exploit this flaw using a specially craft...

8.4CVSS6.9AI score0.00269EPSS
SaveExploits0References3
Mend
Mend
•added 2024/12/05 12:00 a.m.•8 views

CVE-2024-53589

GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD Binary File Descriptor library's handling of tekhex format files...

8.6CVSS0.00269EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/12/05 12:00 a.m.•59 views

CVE-2024-53589

GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD Binary File Descriptor library's handling of tekhex format files...

0.00269EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/12/05 12:00 a.m.•3 views

PT-2024-35782

Name of the Vulnerable Software and Affected Versions GNU objdump version 2.43 Description The issue is related to a buffer overflow in the BFD Binary File Descriptor library's handling of tekhex format files. This could potentially lead to code execution. There is a mention of a critical buffer...

8.4CVSS0.00269EPSS
SaveExploits0References18
Vulnrichment
Vulnrichment
•added 2024/12/05 12:00 a.m.•10 views

CVE-2024-53589

GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD Binary File Descriptor library's handling of tekhex format files...

8.3AI score0.00269EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2024/12/05 12:00 a.m.•264 views

CVE-2024-53589

GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD Binary File Descriptor library's handling of tekhex format files...

8.4CVSS6.4AI score0.00269EPSS
SaveExploits0
Redos
Redos
•added 2024/12/03 12:00 a.m.•24 views

ROS-20241203-15

Go programming language vulnerability is related to errors in handling whitespace characters in context JavaScript. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality, integrity, and availability of protected information. affect the confidentiality,...

9.8CVSS7.5AI score0.03073EPSS
SaveExploits0
Packet Storm
Packet Storm
•added 2024/12/02 12:00 a.m.•262 views

ABB Cylon Aspect 3.08.01 mstpstatus.php Information Disclosure

ABB Cylon Aspect 3.08.01 mstpstatus.php Information Disclosure Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.01 Summary: ASPECT is an award-winning scalable building energy management and...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/12/02 12:00 a.m.•22 views

Intel Distribution for GDB DoS

The vulnerability in the application development library set of Intel Distribution for GDB is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.6CVSS5.5AI score0.00132EPSS
SaveExploits0References5Affected Software2
Zero Science Lab
Zero Science Lab
•added 2024/11/28 12:00 a.m.•291 views

ABB Cylon Aspect 3.08.00 (fileSystemUpdate.php) Insecure File Upload

Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description A vulnerability exists in the fileSystemUpdate.php endpoint of the AB...

5.9AI score
SaveExploits0
NVD
NVD
•added 2024/11/27 3:15 p.m.•38 views

CVE-2024-53920

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point for code completion on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. This unsafe expansion also occurs if a user chooses to...

7.8CVSS0.006EPSS
SaveExploits0References11
osv_cve
osv_cve
•added 2024/11/27 3:15 p.m.•29 views

CVE-2024-53920

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point for code completion on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. This unsafe expansion also occurs if a user chooses to...

7.8CVSS8.7AI score
SaveExploits0References7
AlpineLinux
AlpineLinux
•added 2024/11/27 3:15 p.m.•18 views

CVE-2024-53920

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point for code completion on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. This unsafe expansion also occurs if a user chooses to...

7.8CVSS8AI score0.006EPSS
SaveExploits0References8
Microsoft CVE
Microsoft CVE
•added 2024/11/27 8:00 a.m.•11 views

GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs

...

6.5CVSS7.3AI score0.01071EPSS
SaveExploits0
Rows per page
Query Builder