Lucene search
+L

3178 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/15 12:00 a.m.•4 views

CVE-2018-12495: Out-of-bounds Read

The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file...

5.5CVSS6.2AI score0.01849EPSS
SaveExploits1References2
CVE
CVE
•added 2018/06/12 2:00 p.m.•90 views

CVE-2018-12248

The CVE-2018-12248 entry concerns mruby 1.4.1, where a heap-based buffer over-read occurs in the OP_ENTER path when fiber is invoked with many arguments. The underlying cause is that mrbgems/mruby-fiber/src/fiber.c does not extend the stack sufficiently for large argument lists. Affects mruby 1.4...

7.5CVSS7.4AI score0.0151EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2018/06/12 2:00 p.m.•2 views

CVE-2018-12248

An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OPENTER because mrbgems/mruby-fiber/src/fiber.c does not extend the stack in cases of many arguments to fiber...

8.7CVSS0.0151EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/06/12 12:00 a.m.•3 views

PT-2018-11075

Name of the Vulnerable Software and Affected Versions mruby version 1.4.1 Description A heap-based buffer over-read issue was found, associated with OP ENTER, due to the failure of mrbgems/mruby-fiber/src/fiber.c to extend the stack when handling many arguments to fiber. Recommendations For mruby...

7.5CVSS0.0151EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/12 12:00 a.m.•5 views

CVE-2018-12248: Out-of-bounds Read

An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OPENTER because mrbgems/mruby-fiber/src/fiber.c does not extend the stack in cases of many arguments to fiber...

7.5CVSS7.4AI score0.0151EPSS
SaveExploits0References2
OSV
OSV
•added 2018/06/11 11:29 a.m.•29 views

CVE-2018-12092

tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...

9.8CVSS9.7AI score
SaveExploits0References1
Mend
Mend
•added 2018/06/11 11:00 a.m.•2 views

CVE-2018-12092

tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...

9.8CVSS0.0163EPSS
SaveExploits0References1
CVE
CVE
•added 2018/06/11 11:00 a.m.•57 views

CVE-2018-12092

CVE-2018-12092 affects tinyexr 0.9.5, with a heap-based buffer over-read in tinyexr::DecodePixelData (tinyexr.h). Publicly reported descriptions in CNVD-2018-14428 and NVD confirm a buffer over-read related to OpenEXR code. The CNVD entry explicitly describes a vulnerability in tinyexr 0.9.5 and ...

9.8CVSS9.4AI score0.0163EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2018/06/11 12:00 a.m.•2 views

PT-2018-11005

Name of the Vulnerable Software and Affected Versions tinyexr version 0.9.5 Description The issue is related to a heap-based buffer over-read in the tinyexr::DecodePixelData function, located in tinyexr.h, and is connected to OpenEXR code. Recommendations For tinyexr version 0.9.5, consider...

9.8CVSS0.0163EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/11 12:00 a.m.•5 views

CVE-2018-12092: Out-of-bounds Read

tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...

9.8CVSS8.4AI score0.0163EPSS
SaveExploits0References2
OSV
OSV
•added 2018/06/08 12:29 p.m.•26 views

CVE-2018-12064

tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h...

9.8CVSS9.7AI score
SaveExploits0References1
Mend
Mend
•added 2018/06/08 12:00 p.m.•2 views

CVE-2018-12064

tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h...

9.8CVSS0.01275EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/06/08 12:00 a.m.•2 views

PT-2018-10981

Name of the Vulnerable Software and Affected Versions tinyexr version 0.9.5 Description The issue is related to a heap-based buffer over-read that occurs via the tinyexr::ReadChannelInfo function in tinyexr.h. Recommendations For tinyexr version 0.9.5, at the moment, there is no information about...

9.8CVSS0.01275EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/08 12:00 a.m.•4 views

CVE-2018-12064: Out-of-bounds Read

tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h...

9.8CVSS8.3AI score0.01275EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2018/06/05 12:00 a.m.•67 views

Debian: Security Advisory (DSA-4218-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.4AI score0.88114EPSS
SaveExploits6References4
Veracode
Veracode
•added 2018/06/01 6:26 a.m.•24 views

Denial Of Service (DoS)

freexl is susceptible to denial of serviceDoS. The attack can launched by sending a malicious file to destroycell function, leading to heap-based buffer over-read...

8.8CVSS8.4AI score0.02135EPSS
SaveExploits1References9Affected Software1
RedhatCVE
RedhatCVE
•added 2018/05/31 10:18 p.m.•35 views

CVE-2018-11625

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

8.8CVSS4.5AI score0.02237EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2018/05/31 8:48 p.m.•31 views

CVE-2018-11439

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file...

6.5CVSS5AI score0.0295EPSS
SaveExploits1References2
OSV
OSV
•added 2018/05/31 4:29 p.m.•8 views

CVE-2018-11625

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

8.8CVSS8.3AI score
SaveExploits0References2
Prion
Prion
•added 2018/05/31 4:29 p.m.•31 views

Heap overflow

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

6.8CVSS8.2AI score0.02237EPSS
SaveExploits1References2Affected Software2
Rows per page
Query Builder