Lucene search
+L

16689 matches found

Tenable Nessus
Tenable Nessus
•added 2023/12/23 12:00 a.m.•18 views

SUSE SLED15: libzbar-devel / libzbar0 / libzbar0-32bit / libzbarqt-devel / etc (SUSE-SU-2023:4948-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4948-1 advisory. - CVE-2023-40889: Fixed heap-based buffer overflow in the qrreadermatchcenters function...

9.8CVSS7.7AI score0.01946EPSS
SaveExploits0References7
OpenVAS
OpenVAS
•added 2023/12/22 12:00 a.m.•27 views

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-3486)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.7AI score0.00613EPSS
SaveExploits8References2
OpenVAS
OpenVAS
•added 2023/12/22 12:00 a.m.•12 views

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2023-3464)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS7AI score0.0068EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2023/12/22 12:00 a.m.•31 views

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-3514)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.7AI score0.00613EPSS
SaveExploits8References2
NVD
NVD
•added 2023/12/18 2:15 p.m.•27 views

CVE-2023-6228

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash...

5.5CVSS0.00399EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2023/12/18 2:15 p.m.•48 views

CVE-2023-6228

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash...

5.5CVSS6.7AI score0.00399EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2023/12/18 1:43 p.m.•29 views

CVE-2023-6228

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash...

5.5CVSS7AI score0.00399EPSS
SaveExploits0
CVE
CVE
•added 2023/12/18 1:43 p.m.•512 views

CVE-2023-6228

CVE-2023-6228 affects libtiff’s tiffcp utility. The issue is a heap-based buffer overflow in cpStripToTile() inside tools/tiffcp.c when processing crafted TIFFs, which can crash the application (denial of service). Public advisories confirm a patched libtiff release is available; several sources ...

5.5CVSS5.8AI score0.00399EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/18 12:00 a.m.•1 views

CVE-2023-3430: Heap-based Buffer Overflow

A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which triggers a heap-based buffer overflow and could cause a crash, leading to a denial ...

7.5CVSS7.4AI score0.01236EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/18 12:00 a.m.•1 views

CVE-2023-6228: Out-of-bounds Write

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash...

5.5CVSS6.7AI score0.00399EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/18 12:00 a.m.•1 views

CVE-2023-47038: Heap-based Buffer Overflow

A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer...

7.8CVSS6.7AI score0.00814EPSS
SaveExploits0References3
OSV
OSV
•added 2023/12/15 5:57 p.m.•14 views

MGASA-2023-0346 Updated gimp packages fix security vulnerabilities

GIMP has been updated to version 2.10.36 to fix several security issues. CVE-2023-44441: GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-44442: GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-44443: GIMP P...

7.8CVSS6.7AI score0.93639EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/12/15 11:32 a.m.•46 views

CVE-2023-33221 Heap Buffer Overflow when reading DESFire card

When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code Execution on the targeted device. This is especially problematic if you...

6.8CVSS10AI score0.01032EPSS
SaveExploits0References1
Oracle linux
Oracle linux
•added 2023/12/15 12:00 a.m.•53 views

gstreamer1-plugins-bad-free security update

1.22.1-2 - Patch CVE-2023-44429: AV1 codec parser heap-based buffer overflow - Patch CVE-2023-44446: MXF demuxer use-after-free - Resolves: RHEL-17030, RHEL-17039...

8.8CVSS7.5AI score0.02171EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/12/15 12:00 a.m.•77 views

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Vim vulnerabilities (USN-6557-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6557-1 advisory. It was discovered that Vim could be made to dereference invalid memory. An attacker could possibly us...

7.8CVSS7.1AI score0.01603EPSS
SaveExploits8References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/15 12:00 a.m.•4 views

CVE-2023-33221: Heap-based Buffer Overflow

When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code Execution on the targeted device. This is especially problematic if you...

9.8CVSS8.5AI score0.01032EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/12/15 12:00 a.m.•31 views

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : audiofile vulnerabilities (USN-6558-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6558-1 advisory. It was discovered that audiofile could be made to dereference invalid memory. If a user or an automat...

8.8CVSS6.8AI score0.04654EPSS
SaveExploits4References5
RedhatCVE
RedhatCVE
•added 2023/12/14 6:01 p.m.•41 views

CVE-2023-37329

A heap-based buffer overflow vulnerability was found in the PGS Blu-ray subtitle decoder within GStreamer when processing specific files. This issue could allow a malicious third party to crash the application and execute code by manipulating the heap. Mitigation Mitigation for this issue is eith...

5.5CVSS7AI score0.01643EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/12/14 12:27 p.m.•44 views

CVE-2023-37327

A heap-based buffer overflow vulnerability was found in the FLAC parser in GStreamer. This issue occurs when processing malformed image tags, which could allow a malicious third party to induce a crash in the application and potentially execute code by manipulating the heap. Mitigation Mitigation...

5.5CVSS7.4AI score0.017EPSS
SaveExploits0References4
Prion
Prion
•added 2023/12/13 9:15 p.m.•26 views

Heap overflow

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue...

1.7CVSS7.5AI score0.00508EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder