Lucene search
K

16974 matches found

OSV
OSV
added 2021/07/31 11:3 a.m.3 views

OESA-2021-1290 aspell security update

GNU Aspell is a spell checker intended to replace Ispell. It can be used as a library and spell checker. Its main feature is that it provides much better suggestions than other inspectors, including Ispell and Microsoft Word. It also has many other technical enhancements to Ispell, such as the us...

9.1CVSS7.2AI score0.03259EPSS
Exploits0References2
NVD
NVD
added 2021/07/30 2:15 p.m.19 views

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

5.5CVSS0.00661EPSS
Exploits1References5
OSV
OSV
added 2021/07/30 2:15 p.m.7 views

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

5.5CVSS5.9AI score
Exploits0References5
OSV
OSV
added 2021/07/30 2:15 p.m.1 views

ALPINE-CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

5.5CVSS7.5AI score0.00661EPSS
Exploits1References1
Kitploit
Kitploit
added 2021/07/29 9:30 p.m.90 views

Sniffle - A Sniffer For Bluetooth 5 And 4.X LE

Sniffle is a sniffer for Bluetooth 5 and 4.x LE using TI CC1352/CC26x2 hardware. Sniffle has a number of useful features, including: Support for BT5/4.2 extended length advertisement and data packets Support for BT5 Channel Selection Algorithms 1 and 2 Support for all BT5 PHY modes regular 1M, 2M...

6.7AI score
Exploits0References1
Mageia
Mageia
added 2021/07/28 8:0 p.m.40 views

Updated aspell packages fix security vulnerability

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist CVE-2019-25051...

7.8CVSS4.5AI score0.00549EPSS
Exploits0References2
OSV
OSV
added 2021/07/28 8:0 p.m.9 views

MGASA-2021-0388 Updated aspell packages fix security vulnerability

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist CVE-2019-25051...

7.8CVSS7.8AI score0.00549EPSS
Exploits0References3
Cvelist
Cvelist
added 2021/07/28 12:0 a.m.25 views

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

6.3AI score0.00661EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2021/07/28 12:0 a.m.5 views

PT-2021-3737 · Unknown +2 · Util-Linux +2

Name of the Vulnerable Software and Affected Versions: util-linux versions through 2.37.1 Description: The issue is related to an integer overflow in the util-linux package, specifically in the ipcutils.c file. This overflow can potentially cause a buffer overflow if an attacker is able to...

10CVSS6.5AI score0.34771EPSS
Exploits9References106
Debian CVE
Debian CVE
added 2021/07/28 12:0 a.m.46 views

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

5.5CVSS6.2AI score0.00661EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2021/07/28 12:0 a.m.54 views

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

5.5CVSS6.2AI score0.00661EPSS
Exploits1
Ubuntu
Ubuntu
added 2021/07/26 3:5 p.m.117 views

USN-5023-1: Aspell vulnerability

It was discovered that Aspell incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code or cause a crash...

7.8CVSS7.8AI score0.00549EPSS
Exploits0
GithubExploit
GithubExploit
added 2021/07/26 7:8 a.m.77 views

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 PoC Introdução Este é um exploit para o CV...

7.8CVSS7.7AI score0.99295EPSS
Exploits81
Tenable Nessus
Tenable Nessus
added 2021/07/26 12:0 a.m.28 views

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Aspell vulnerability (USN-5023-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5023-1 advisory. It was discovered that Aspell incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code or...

7.8CVSS7.9AI score0.00549EPSS
Exploits0References2
OSV
OSV
added 2021/07/22 6:15 p.m.41 views

CVE-2021-35942

The wordexp function in the GNU C Library aka glibc through 2.33 may crash or read arbitrary memory in parseparam in posix/wordexp.c when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but...

9.1CVSS7AI score
Exploits0References6
Prion
Prion
added 2021/07/22 6:15 p.m.32 views

Design/Logic Flaw

The wordexp function in the GNU C Library aka glibc through 2.33 may crash or read arbitrary memory in parseparam in posix/wordexp.c when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but...

6.4CVSS9.1AI score0.02678EPSS
Exploits0References6Affected Software3
OSV
OSV
added 2021/07/22 6:15 p.m.6 views

UBUNTU-CVE-2021-35942

The wordexp function in the GNU C Library aka glibc through 2.33 may crash or read arbitrary memory in parseparam in posix/wordexp.c when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but...

9.1CVSS7AI score0.02678EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2021/07/22 6:15 p.m.73 views

CVE-2021-35942

The wordexp function in the GNU C Library aka glibc through 2.33 may crash or read arbitrary memory in parseparam in posix/wordexp.c when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but...

9.1CVSS6.9AI score0.02678EPSS
Exploits0References3
Veracode
Veracode
added 2021/07/22 12:41 p.m.6 views

Denial Of Service(DoS)

objstack in GNU Aspell is vulnerable to denial of sevice. The vulnerability exists because of a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS6.8AI score0.00549EPSS
Exploits0References8Affected Software5
OpenVAS
OpenVAS
added 2021/07/22 12:0 a.m.18 views

openSUSE: Security Advisory for caribou (openSUSE-SU-2021:1071-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.01112EPSS
Exploits0References2
Rows per page
Query Builder