Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2016-2721

Malware in sbrugna...

4.3CVSS7AI score0.01341EPSS
Exploits0References17
RedHat Linux
RedHat Linux
added 2024/07/23 3:36 p.m.7 views

tpm2-tss: Buffer Overlow in TSS2_RC_Decode

A flaw was found in tpm2-tss, which is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In affected versions, Tss2RCSetHandler and Tss2RCDecode index into the layerhandler with an 8-bit layer number, but the array only ha...

6.4CVSS7.5AI score0.00519EPSS
Exploits1References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/05/01 3:33 a.m.3 views

Malicious code in editor-layer-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c27267283420f53586172a7d6b227c424aeb92e63c242a01287112a092a7247a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0References1
OSV
OSV
added 2023/05/01 3:33 a.m.10 views

MAL-2023-1168 Malicious code in editor-layer-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c27267283420f53586172a7d6b227c424aeb92e63c242a01287112a092a7247a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Snyk
Snyk
added 2023/03/01 8:18 a.m.1 views

Malicious Package

Overview editor-layer-index is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

9.8CVSS7.1AI score
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:8 a.m.2 views

SUSE CVE-2016-1626

The opjpiupdatedecodepoc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...

4.3CVSS8.6AI score0.01341EPSS
Exploits0References3
CNVD
CNVD
added 2016/02/16 12:0 a.m.4 views

Google Chrome opj_pi_update_decode_poc function denial of service vulnerability

Google Chrome is a web browsing tool developed by Google. Google Chrome 48.0.2564.109 previous version of the existence of a denial of service vulnerability, due to PDFium within OpenJPEG in the function opjpiupdatedecodepoc wrongly calculated a certain layer index value. A remote attacker could...

4.3CVSS8.7AI score0.01341EPSS
Exploits0References1
OSV
OSV
added 2016/02/14 2:59 a.m.1 views

DEBIAN-CVE-2016-1626

The opjpiupdatedecodepoc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...

4.3CVSS5.9AI score0.01341EPSS
Exploits0References1
Rows per page
Query Builder