Lucene search
+L

867 matches found

Tenable Nessus
Tenable Nessus
•added 2021/03/10 12:00 a.m.•44 views

EulerOS Virtualization 3.0.2.6 : gd (EulerOS-SA-2021-1431)

According to the versions of the gd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash o...

9.8CVSS8.6AI score0.37226EPSS
SaveExploits8References3
OpenVAS
OpenVAS
•added 2021/03/05 12:00 a.m.•26 views

Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2021-1473)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.9AI score0.37226EPSS
SaveExploits8References2
OpenVAS
OpenVAS
•added 2021/02/05 12:00 a.m.•24 views

Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2021-1189)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.9AI score0.37226EPSS
SaveExploits8References2
CVE
CVE
•added 2020/09/09 7:00 p.m.•92 views

CVE-2020-1913

The CVE-2020-1913 issue affects Facebook Hermes’ JavaScript interpreter and is caused by an Integer signedness error. A crafted JavaScript payload can cause denial of service or potentially remote code execution if untrusted JS is evaluated by the Hermes runtime. The description notes that most R...

8.1CVSS7.7AI score0.01202EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/09 12:00 a.m.•6 views

CVE-2020-1913: Signed to Unsigned Conversion Error

An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6 allows attackers to cause a denial of service attack or a potential RCE via crafted JavaScript. Note that this is only exploitable if the application using Hermes...

8.1CVSS5.8AI score0.01202EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2020/05/01 12:00 a.m.•42 views

Debian: Security Advisory (DLA-2197-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.24027EPSS
SaveExploits6References3
Debian
Debian
•added 2020/04/30 3:29 p.m.•77 views

[SECURITY] [DLA 2197-1] miniupnpc security update

Package : miniupnpc Version : 1.9.20140610-2+deb8u2 CVE ID : CVE-2017-8798 It was discovered that there was a integer signedness error in the miniupnpc UPnP client that could allow remote attackers to cause a denial of service attack. For Debian 8 "Jessie", this problem has been fixed in version...

9.8CVSS9.3AI score0.24027EPSS
SaveExploits6
Veracode
Veracode
•added 2020/04/10 1:04 a.m.•53 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as an integer signedness error in nextpidmap could allow a local, unprivileged user to cause a denial of service...

4.9CVSS3.9AI score0.00572EPSS
SaveExploits2References18Affected Software2
Veracode
Veracode
•added 2020/04/10 12:57 a.m.•42 views

Arbitrary Code Execution

openoffice.org is vulnerable to arbitrary code execution. The vulnerability exists as an array index error and an integer signedness error were found in the way OpenOffice.org parsed certain Rich Text Format RTF files. An attacker could use these flaws to create a specially-crafted RTF file that,...

9.3CVSS4.5AI score0.10274EPSS
SaveExploits0References26Affected Software1
Veracode
Veracode
•added 2020/04/10 12:35 a.m.•26 views

Arbitrary Code Execution

python is vulnerable to arbitrary code execution. An integer signedness error, leading to a buffer overflow, was found in the Python zlib extension module. If a Python application requested the negative byte count be flushed for a decompression stream, it could cause the application to crash or,...

7.5CVSS4.7AI score0.22621EPSS
SaveExploits2References35Affected Software1
NVD
NVD
•added 2020/03/24 7:15 p.m.•28 views

CVE-2019-20561

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. The bootloader has an integer signedness error. The Samsung ID is SVE-2019-15230 October 2019...

9.8CVSS9.6AI score0.00549EPSS
SaveExploits0References1
Prion
Prion
•added 2020/03/24 7:15 p.m.•23 views

Integer overflow

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. The bootloader has an integer signedness error. The Samsung ID is SVE-2019-15230 October 2019...

7.5CVSS9.4AI score0.00549EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/03/24 6:28 p.m.•33 views

CVE-2019-20561

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. The bootloader has an integer signedness error. The Samsung ID is SVE-2019-15230 October 2019...

9.6AI score0.00549EPSS
SaveExploits0References1
NVD
NVD
•added 2020/03/16 6:15 p.m.•38 views

CVE-2019-19945

uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bounds access to a heap buffer and a subsequent crash. It can be triggered with an HTTP POST request to a CGI script, specifying both "Transfer-Encoding: chunked" and a large...

7.5CVSS7.6AI score0.01551EPSS
SaveExploits0References2
CVE
CVE
•added 2020/03/16 5:17 p.m.•118 views

CVE-2019-19945

CVE-2019-19945 affects OpenWrt/uhttpd. A signedness error in uhttpd up to 18.06.5 and 19.x up to 19.07.0-rc2 allows out-of-bounds access to a heap buffer, leading to a crash. The issue can be triggered by a remote HTTP POST to a CGI script with Transfer-Encoding: chunked and a large negative Cont...

7.5CVSS7.5AI score0.01551EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/03/16 5:17 p.m.•50 views

CVE-2019-19945

uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bounds access to a heap buffer and a subsequent crash. It can be triggered with an HTTP POST request to a CGI script, specifying both "Transfer-Encoding: chunked" and a large...

7.6AI score0.01551EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/16 12:00 a.m.•4 views

CVE-2019-19945: Out-of-bounds Read

uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bounds access to a heap buffer and a subsequent crash. It can be triggered with an HTTP POST request to a CGI script, specifying both "Transfer-Encoding: chunked" and a large...

7.5CVSS7.4AI score0.01551EPSS
SaveExploits0References3
NVD
NVD
•added 2020/03/12 9:15 p.m.•25 views

CVE-2017-18350

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name...

5.9CVSS6AI score0.01323EPSS
SaveExploits0References2
OSV
OSV
•added 2020/03/12 9:15 p.m.•27 views

CVE-2017-18350

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name...

5.9CVSS7.3AI score
SaveExploits0References2
Prion
Prion
•added 2020/03/12 9:15 p.m.•26 views

Stack overflow

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name...

4.3CVSS6AI score0.01323EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder