Lucene search
+L

1149 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/12 12:00 a.m.•4 views

CVE-2017-18350: Buffer Copy without Checking Size of Input

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name...

5.9CVSS6.5AI score0.01323EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2020/02/20 6:15 p.m.•46 views

CVE-2011-0699

Integer signedness error in the btrfsioctlspaceinfo function in the Linux kernel 2.6.37 allows local users to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted slot value...

7CVSS7.2AI score0.00315EPSS
SaveExploits0References2
Prion
Prion
•added 2020/02/20 6:15 p.m.•22 views

Integer overflow

Integer signedness error in the btrfsioctlspaceinfo function in the Linux kernel 2.6.37 allows local users to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted slot value...

6.9CVSS7.6AI score0.00315EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2020/01/27 5:15 a.m.•35 views

CVE-2019-20427

In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation for specific fields of packets sent by a client. Interaction between reqcapsulegetsize and tgtbrwwrite leads to a tgtshortio2pages integer...

9.8CVSS10AI score0.05099EPSS
SaveExploits1References4
NVD
NVD
•added 2020/01/27 5:15 a.m.•29 views

CVE-2019-20423

In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields of packets sent by a client. The function targethandleconnect mishandles a certain size value when a client connects to a server, because of an integer...

7.8CVSS7.8AI score0.02376EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2020/01/27 5:15 a.m.•35 views

CVE-2019-20427

In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation for specific fields of packets sent by a client. Interaction between reqcapsulegetsize and tgtbrwwrite leads to a tgtshortio2pages integer...

9.8CVSS7.3AI score0.05099EPSS
SaveExploits1References5
Prion
Prion
•added 2020/01/27 5:15 a.m.•22 views

Integer overflow

In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation for specific fields of packets sent by a client. Interaction between reqcapsulegetsize and tgtbrwwrite leads to a tgtshortio2pages integer...

9CVSS9.9AI score0.05099EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
•added 2020/01/27 5:15 a.m.•37 views

CVE-2019-20423

In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields of packets sent by a client. The function targethandleconnect mishandles a certain size value when a client connects to a server, because of an integer...

7.8CVSS7AI score0.02376EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2020/01/27 4:21 a.m.•36 views

CVE-2019-20423

In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields of packets sent by a client. The function targethandleconnect mishandles a certain size value when a client connects to a server, because of an integer...

7.8AI score0.02376EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2020/01/27 4:20 a.m.•43 views

CVE-2019-20427

In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation for specific fields of packets sent by a client. Interaction between reqcapsulegetsize and tgtbrwwrite leads to a tgtshortio2pages integer...

10AI score0.05099EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/27 12:00 a.m.•2 views

CVE-2019-20427: Buffer Copy without Checking Size of Input

In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation for specific fields of packets sent by a client. Interaction between reqcapsulegetsize and tgtbrwwrite leads to a tgtshortio2pages integer...

9.8CVSS8.4AI score0.05099EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/27 12:00 a.m.•7 views

CVE-2019-20423: Buffer Copy without Checking Size of Input

In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields of packets sent by a client. The function targethandleconnect mishandles a certain size value when a client connects to a server, because of an integer...

7.8CVSS7.4AI score0.02376EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•30 views

Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2019-2521)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.37226EPSS
SaveExploits9References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•41 views

Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2017-1128)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.04747EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•294 views

Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2019-2583)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.9AI score0.37226EPSS
SaveExploits8References2
RedhatCVE
RedhatCVE
•added 2019/12/28 3:41 a.m.•43 views

CVE-2018-5711

gdgifin.c in the GD Graphics Library aka libgd, as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or...

5.5CVSS3.4AI score0.13204EPSS
SaveExploits1References1
NVD
NVD
•added 2019/12/24 10:15 p.m.•21 views

CVE-2019-19958

In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...

6.5CVSS6.4AI score0.00935EPSS
SaveExploits1References1
Prion
Prion
•added 2019/12/24 10:15 p.m.•22 views

Integer overflow

In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...

4.3CVSS6.4AI score0.00935EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2019/12/24 9:58 p.m.•91 views

CVE-2019-19958

In CVE-2019-19958, the affected component is libIEC61850 1.4.0, specifically StringUtils_createStringFromBuffer in common/string_utilities.c. A signedness issue in integer handling could allow an under/over-approximation during buffer processing, potentially triggering an excessive memory allocat...

6.5CVSS6.3AI score0.00935EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/24 12:00 a.m.•2 views

CVE-2019-19958: Incorrect Conversion between Numeric Types

In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...

6.5CVSS6.6AI score0.00935EPSS
SaveExploits1References3
Rows per page
Query Builder