Lucene search
+L

20276 matches found

OpenVAS
OpenVAS
added 2021/10/06 12:00 a.m.33 views

Redis Stack Overflow Vulnerability (GHSA-p486-xggp-782c)

Redis is prone to a heap-based stack overflow vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if...

8.8CVSS6.5AI score0.16206EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.31 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.02208EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.23 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.01708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.18 views

Autodesk Design Review PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.01708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.25 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.02208EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.28 views

Autodesk Design Review RLC File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.02208EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/05 9:15 p.m.22 views

CVE-2021-3625

Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions = v2.5.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363...

9.8CVSS0.02312EPSS
SaveExploits2References1
Prion
Prion
added 2021/10/05 9:15 p.m.23 views

Heap overflow

Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions = v2.5.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363...

7.5CVSS9.5AI score0.02312EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2021/10/05 8:50 p.m.94 views

CVE-2021-3625

CVE-2021-3625 concerns a heap-based buffer overflow (CWE-122) in Zephyr’s USB DFU DNLOAD path. Affected product: Zephyr RTOS; vulnerable component is the USB DFU DNLOAD code, with root cause described as a heap-based overflow. Impact details in sources indicate a potential for memory data leakage...

9.8CVSS9.7AI score0.02312EPSS
SaveExploits2References1Affected Software1
Veracode
Veracode
added 2021/10/05 12:06 p.m.179 views

Remote Code Execution (RCE)

Redis is vulnerable to remote code execution. The vulnerability exists due to heap-based Lua stack to be overflowed. An attacker is able to crash the system by sending a maliciously crafted script to the system...

8.8CVSS4AI score0.16206EPSS
SaveExploits0References19Affected Software2
NVD
NVD
added 2021/10/04 6:15 p.m.26 views

CVE-2021-32626

Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This can result with heap corruption and potentially remote co...

8.8CVSS0.16206EPSS
SaveExploits0References10
AlpineLinux
AlpineLinux
added 2021/10/04 5:30 p.m.61 views

CVE-2021-32626

Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This can result with heap corruption and potentially remote co...

8.8CVSS8.6AI score0.16206EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/10/04 5:30 p.m.38 views

CVE-2021-32626 Lua scripts can overflow the heap-based Lua stack in Redis

Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This can result with heap corruption and potentially remote co...

7.5CVSS9AI score0.16206EPSS
SaveExploits0References10
OpenVAS
OpenVAS
added 2021/10/04 12:00 a.m.35 views

Python 2.7.x < 2.7.15 Heap-Based Buffer Overflow Vulnerability Python Issue (bpo-31530) - Linux

Python is prone to a heap-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

3.6CVSS7AI score0.01186EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/10/02 12:00 a.m.11 views

CVE-2021-3835

Buffer overflow in usb device class. Zephyr versions = v2.6.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fm6v-8625-99jf...

8.8CVSS7.4AI score0.00743EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2021/09/30 1:39 p.m.36 views

Denial Of Service (DoS)

vim is vulnerable denial of service. The vulnerability exists due to a Heap-based Buffer Overflow...

7.8CVSS3.6AI score0.01728EPSS
SaveExploits1References13Affected Software6
Tenable Nessus
Tenable Nessus
added 2021/09/29 12:00 a.m.58 views

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Vim vulnerabilities (USN-5093-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5093-1 advisory. Brian Carpenter discovered that vim incorrectly handled memory when opening certain files. If a user was tricked into opening a...

8.6CVSS8.2AI score0.01741EPSS
SaveExploits3References4
Huntr
Huntr
added 2021/09/27 1:04 p.m.41 views

Heap-based Buffer Overflow in hoene/libmysofa

Description There are some heap-buffer-overflows in mysofa2json of libmysofa. They are in function loudness, mysofacheck and readOHDRHeaderMessageDataLayout. System info Ubuntu 20.04.3 LTS clang 12.0.1 libmysofa github master branch commit 0cb89cb Command to Reproduce build libmysofa with...

7.5CVSS1.5AI score0.01069EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2021/09/27 12:00 a.m.47 views

EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2021-2564)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of...

9.8CVSS7.5AI score0.03188EPSS
SaveExploits0References6
Huntr
Huntr
added 2021/09/26 1:48 a.m.20 views

Heap-based Buffer Overflow in mruby/mruby

Description Heap buffer overflow on mrb-vm-exec Proof of Concept // poc.rb 1.timesuntil% ;break Result ./mruby poc.rb ================================================================= ==1451==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x6020000023d9 at pc 0x55b2fc3f1046 bp...

SaveExploits0
Rows per page
Query Builder