Lucene search
+L

17464 matches found

Microsoft CVE
Microsoft CVE
added 2020/08/18 7:00 a.m.7 views

do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638 but the ! syntax is specific to ed and is unrelated to a shell metacharacter.

...

9.3CVSS7.9AI score0.04493EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2020/08/18 7:00 a.m.10 views

In the GNU C Library (aka glibc or libc6) through 2.29 proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.

...

9.8CVSS6.9AI score0.04731EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2020/08/18 7:00 a.m.10 views

In the GNU C Library (aka glibc or libc6) through 2.28 the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters which could lead applications to incorrectly assume that it had parsed a valid string without the possibility of embedded HTTP headers or other potentially dangerous substrings.

...

5.3CVSS5.9AI score0.00479EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/08/18 7:00 a.m.9 views

In the GNU C Library (aka glibc or libc6) through 2.28 attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.

...

7.5CVSS7.8AI score0.05532EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2020/08/18 7:00 a.m.5 views

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault associated with a NULL pointer dereference leading to a denial of service in the intuit_diff_type function in pch.c aka a "mangled rename" issue.

...

7.5CVSS6.4AI score0.08427EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/08/18 7:00 a.m.6 views

The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example within a single execution of a program the output of every __builtin_darn() call may be the same.

...

7.5CVSS7.8AI score0.03181EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/08/18 7:00 a.m.6 views

An issue was discovered in GNU libiberty as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_count_templates_scopes in cp-demangle.c after many recursive calls.

...

5.5CVSS6.4AI score0.01813EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2020/08/18 7:00 a.m.10 views

In the GNU C Library (aka glibc or libc6) through 2.29 check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion as demonstrated by '(\227|)(\\1\\1|t1|\\\2537)+' in grep.

...

7.5CVSS7.7AI score0.05757EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2020/08/18 7:00 a.m.8 views

An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section.

...

7.8CVSS7.5AI score0.01976EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2020/08/18 12:00 a.m.7 views

GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.

...

9.3CVSS7.7AI score0.0543EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2020/08/08 12:00 a.m.48 views

GNU GLOBAL: Arbitrary code execution

Background GNU GLOBAL is a source code tagging system that works the same way across diverse environments, such as Emacs editor, Vi editor, Less viewer, Bash shell, various web browsers, etc. Description A vulnerability was found in an undocumented function of gozilla. Impact A remote attacker...

8.8CVSS4.4AI score0.01228EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2020/08/08 12:00 a.m.12 views

Fedora: Security Advisory for radare2 (FEDORA-2020-aa51efe207)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.6CVSS9.5AI score0.01558EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2020/08/02 12:00 a.m.149 views

All-Dynamics Software enlogic:show Digital Signage System 2.0.2 Session Fixation

All-Dynamics Software enlogic:show Digital Signage System 2.0.2 Session Fixation Vendor: All-Dynamics Software GmbH Vendor web page: https://www.all-dynamics.de Product web page: https://www.enlogic-show.com Affected version: 2.0.2 Build 2098 ILP32W 0/1/3/1597919619 Summary: Bring communication...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2020/07/31 12:00 a.m.30 views

Fedora: Security Advisory for golang (FEDORA-2020-9cd1204ba0)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:00 a.m.18 views

The vulnerability of the memcpy function in the glibc library, which allows a hacker to execute arbitrary code in the context of a privileged process

The vulnerability of the memcpy function in the glibc library arises from an operation that occurs outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the privileged process context...

8.1CVSS8.2AI score0.05354EPSS
SaveExploits0References9Affected Software4
OpenVAS
OpenVAS
added 2020/07/29 12:00 a.m.28 views

FreeRDP < 2.2.0 Integer Overflow Vulnerability

FreeRDP is prone to an integer overflow vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

3.5CVSS5.9AI score0.01466EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/07/28 12:00 a.m.8 views

Fedora: Security Advisory for bashtop (FEDORA-2020-54e4356732)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/07/27 12:00 a.m.29 views

openSUSE: Security Advisory for go1.13 (openSUSE-SU-2020:1087-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.9CVSS7AI score0.02906EPSS
SaveExploits0References2
Gentoo Linux
Gentoo Linux
added 2020/07/27 12:00 a.m.70 views

Binutils: Multiple vulnerabilities

Background The GNU Binutils are a collection of tools to create, modify and analyse binary files. Many of the files use BFD, the Binary File Descriptor library, to do low-level manipulation. Description Multiple vulnerabilities have been discovered in Binutils. Please review the CVE identifiers...

6.5CVSS1.9AI score0.02752EPSS
SaveExploits5
OpenVAS
OpenVAS
added 2020/07/24 12:00 a.m.31 views

Fedora: Security Advisory for python27 (FEDORA-2020-e9251de272)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.9AI score0.06253EPSS
SaveExploits0References2
Rows per page
Query Builder