Lucene search
K

4773 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/03/12 12:0 a.m.29 views

Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

7CVSS3.5AI score0.19589EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/03/12 12:0 a.m.19 views

Microsoft Chakra lastIndexOf Integer Underflow Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.1CVSS2.3AI score0.06553EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2019/02/06 12:0 a.m.7757 views

PHP 5.6.x < 5.6.40 Multiple vulnerabilities.

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.40. It is, therefore, affected by multiple vulnerabilities: - An integer underflow condition exists in gdContributionsAlloc function in gdinterpolation.c. An unauthenticated, remote attacker can hav...

9.8CVSS7.4AI score0.65116EPSS
Exploits11References7
Tenable Nessus
Tenable Nessus
added 2019/01/31 12:0 a.m.288 views

PHP 7.1.x < 7.1.26 Multiple vulnerabilities.

According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.26. It is, therefore, affected by multiple vulnerabilities: - An integer underflow condition exists in gdContributionsAlloc function in gdinterpolation.c. An unauthenticated, remote attacker can hav...

9.8CVSS7.5AI score0.65116EPSS
Exploits12References9
Tenable Nessus
Tenable Nessus
added 2019/01/30 12:0 a.m.142 views

PHP 7.3.x < 7.3.1 Multiple vulnerabilities.

According to its banner, the version of PHP running on the remote web server is 7.3.x prior to 7.3.1. It is, therefore, affected by multiple vulnerabilities: - An integer underflow condition exists in gdContributionsAlloc function in gdinterpolation.c. An unauthenticated, remote attacker can have...

9.8CVSS7.5AI score0.65116EPSS
Exploits12References8
RedhatCVE
RedhatCVE
added 2019/01/29 2:25 p.m.22 views

CVE-2018-20179

rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspciprocess and results in memory corruption and probably even a remote code execution...

9.8CVSS6.3AI score0.06795EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2019/01/29 2:20 p.m.18 views

CVE-2018-20180

rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function rdpsnddbgprocess and results in memory corruption and probably even a remote code execution...

9.8CVSS6.3AI score0.08214EPSS
Exploits1References2
Veracode
Veracode
added 2019/01/15 9:18 a.m.26 views

Integer Underflow

ovs is vulnerable to integer underflows. The library does not properly check memory size in the ofputilpullqueuegetconfigreply10 function in lib\ofp-util.c, causing an integer underflow that can crash the application or overwrite memory...

9.8CVSS9.1AI score0.02887EPSS
Exploits0References12Affected Software1
Veracode
Veracode
added 2019/01/15 9:6 a.m.21 views

Denial Of Service (DoS)

wpasupplicant is vulnerable to denial of service DoS attacks. The vulnerability exists as Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpasupplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of...

4.3CVSS6.1AI score0.04198EPSS
Exploits0References17Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/01/14 12:0 a.m.24 views

Debian DSA-4366-1 : vlc - security update

An integer underflow was discovered in the CAF demuxer of the VLC media player. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4366. The text itself is copyright C Software in the Public Interest, Inc...

9.1CVSS8.2AI score0.03916EPSS
Exploits1References4
Debian
Debian
added 2019/01/12 12:35 p.m.212 views

[SECURITY] [DSA 4366-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4366-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 12, 2019 https://www.debian.org/security/faq -...

9.1CVSS8.5AI score0.03916EPSS
Exploits1
OpenVAS
OpenVAS
added 2019/01/11 12:0 a.m.49 views

Debian: Security Advisory (DSA-4366-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.3AI score0.03916EPSS
Exploits1References4
Zero Day Initiative
Zero Day Initiative
added 2019/01/09 12:0 a.m.24 views

Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

7CVSS3.5AI score0.16084EPSS
Exploits0References1
OSV
OSV
added 2019/01/03 4:32 p.m.9 views

SUSE-SU-2019:13923-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage bsc1113064. - CVE-2017-10794: Fixed buffer overflow in RGB TIFF picture processing bsc1112392. - CVE-2017-14997: Fixed integer underflow in...

8.8CVSS7.4AI score0.0339EPSS
Exploits4References17
OpenVAS
OpenVAS
added 2018/12/17 12:0 a.m.29 views

VLC Media Player CAF Demuxer Integer Underflow Vulnerability - Mac OS X

VLC media player is prone to an integer underflow vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.1CVSS9.2AI score0.03916EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2018/12/17 12:0 a.m.25 views

VLC Media Player CAF Demuxer Integer Underflow Vulnerability - Windows

VLC media player is prone to an integer underflow vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.1CVSS9.2AI score0.03916EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2018/12/17 12:0 a.m.20 views

Adobe Reader DC Onix NextKey Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.7CVSS3.4AI score0.04979EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2018/11/29 10:23 a.m.3 views

ruby: Buffer under-read in String#unpack

A integer underflow was found in the way Stringunpack decodes the unpacking format. An attacker, able to control the unpack format, could use this flaw to disclose arbitrary parts of the application's memory...

7.5CVSS7.4AI score0.07825EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2018/11/29 10:10 a.m.3 views

ruby: Buffer under-read in String#unpack

A integer underflow was found in the way Stringunpack decodes the unpacking format. An attacker, able to control the unpack format, could use this flaw to disclose arbitrary parts of the application's memory...

7.5CVSS7.4AI score0.07825EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2018/11/29 9:56 a.m.4 views

ruby: Buffer under-read in String#unpack

A integer underflow was found in the way Stringunpack decodes the unpacking format. An attacker, able to control the unpack format, could use this flaw to disclose arbitrary parts of the application's memory...

7.5CVSS7.4AI score0.07825EPSS
Exploits0References5
Rows per page
Query Builder