Lucene search
+L

14884 matches found

OSV
OSV
added 2021/07/28 8:00 p.m.10 views

MGASA-2021-0388 Updated aspell packages fix security vulnerability

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist CVE-2019-25051...

7.8CVSS7.8AI score0.00549EPSS
SaveExploits0References3
Mageia
Mageia
added 2021/07/28 8:00 p.m.43 views

Updated aspell packages fix security vulnerability

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist CVE-2019-25051...

7.8CVSS4.5AI score0.00549EPSS
SaveExploits0References2
OSV
OSV
added 2021/07/26 5:15 p.m.33 views

CVE-2021-31292

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service DOS via crafted metadata...

7.5CVSS7.5AI score
SaveExploits0References6
NVD
NVD
added 2021/07/26 5:15 p.m.29 views

CVE-2021-31292

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service DOS via crafted metadata...

7.5CVSS0.02555EPSS
SaveExploits1References6
OSV
OSV
added 2021/07/26 5:15 p.m.33 views

PYSEC-2021-877

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service DOS via crafted metadata...

7.5CVSS7.5AI score0.02555EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2021/07/26 5:15 p.m.30 views

CVE-2021-31291

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

6.7AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2021/07/26 5:15 p.m.41 views

CVE-2021-31292

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service DOS via crafted metadata...

7.5CVSS6.9AI score0.02555EPSS
SaveExploits1References2
Prion
Prion
added 2021/07/26 5:15 p.m.30 views

Integer overflow

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service DOS via crafted metadata...

5CVSS7.2AI score0.02555EPSS
SaveExploits1References6Affected Software3
CVE
CVE
added 2021/07/26 12:00 a.m.200 views

CVE-2021-31292

Exiv2 vulnerability CVE-2021-31292: an integer overflow in CrwMap::encode0x1810 in Exiv2 0.27.3 allows a heap-based buffer overflow via crafted metadata, enabling a denial of service. The issue affects Exiv2’s image metadata handling (library and related tooling) and is addressed by upgrading to ...

7.5CVSS7.4AI score0.02555EPSS
SaveExploits1References6Affected Software1
Veracode
Veracode
added 2021/07/24 3:45 p.m.25 views

Denial Of Service (DoS)

hdf5 is vulnerable to denial of service. A heap-based buffer over-read exists in the function H5Olayoutdecode in H5Olayout.c allows an attacker to cause crash the application...

5.5CVSS3.7AI score0.01476EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
added 2021/07/24 3:26 a.m.22 views

Information Disclosure

hdf5 is vulnerable to information disclosure. The vulnerability exists due to a heap-based buffer over-read in the function H5Olinkdecode in H5Olink.c...

9.8CVSS1.7AI score0.0183EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2021/07/22 12:41 p.m.10 views

Denial Of Service(DoS)

objstack in GNU Aspell is vulnerable to denial of sevice. The vulnerability exists because of a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS6.8AI score0.00549EPSS
SaveExploits0References8Affected Software5
RedhatCVE
RedhatCVE
added 2021/07/21 7:20 p.m.33 views

CVE-2021-36978

QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in PlASCII85Decoder::write called from PlAESPDF::flush and PlAESPDF::finish when a certain downstream write fails...

7.8CVSS3.5AI score0.01272EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/07/21 2:10 p.m.44 views

CVE-2020-19609

Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiffexpandcolormap function when parsing TIFF files allowing attackers to cause a denial of service...

6.2AI score0.01048EPSS
SaveExploits1References4
CVE
CVE
added 2021/07/21 2:10 p.m.109 views

CVE-2020-19609

CVE-2020-19609 affects Artifex MuPDF: a heap-based buffer overwrite in tiff_expand_colormap() when parsing TIFF files can cause denial of service. The vulnerability is present in MuPDF before 1.18.0. OpenSUSE/OpenSUSE-SU-2021:1341-1 and Debian/DLA-2765-1 reference this issue alongside CVE-2020-16...

5.5CVSS6AI score0.01048EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/07/21 12:00 a.m.41 views

RHEL 8 : perl (RHSA-2021:2792)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2792 advisory. Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: per...

8.6CVSS7AI score0.11334EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2021/07/21 12:00 a.m.70 views

EulerOS Virtualization 3.0.2.2 : ghostscript (EulerOS-SA-2021-2135)

According to the versions of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Ghostscript is a set of software that provides a PostScriptinterpreter, a set of C procedures the Ghostscript library,...

7.8CVSS8AI score0.04497EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
added 2021/07/20 10:25 p.m.124 views

Moderate: Red Hat Security Advisory: perl security and bug fix update

An update for perl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

8.6CVSS7AI score0.11334EPSS
SaveExploits0References4
OSV
OSV
added 2021/07/20 7:15 a.m.28 views

CVE-2021-36978

QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in PlASCII85Decoder::write called from PlAESPDF::flush and PlAESPDF::finish when a certain downstream write fails...

5.5CVSS7.2AI score
SaveExploits0References6
OSV
OSV
added 2021/07/20 7:15 a.m.21 views

CVE-2020-36428

matio aka MAT File I/O Library 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble called from ReadInt32Data and MatVarRead4...

8.8CVSS7.3AI score
SaveExploits0References2
Rows per page
Query Builder