Lucene search
+L

10054 matches found

osv_debian
osv_debian
•added 2024/01/29 5:15 p.m.•13 views

DEBIAN-CVE-2023-40549

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service...

5.5CVSS6.7AI score0.00412EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/01/29 12:00 a.m.•2 views

PT-2024-7625

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL dereference bug in the fs/ntfs3 component of the Linux kernel. This bug occurs when the ntfs load attr list function is called, and the "size" comes from...

5.5CVSS5.8AI score0.00225EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/01/27 12:00 a.m.•14 views

PT-2024-15939 · Unknown · Stanfordvl Gibsonenv +1

Name of the Vulnerable Software and Affected Versions: StanfordVL GibsonEnv version 0.3.1 Description: A critical issue has been found, affecting the cloudpickle.load function of the file gibsonutilspposgd fuse.py. This issue leads to deserialization and can be exploited remotely. The complexity ...

9.8CVSS7AI score0.00713EPSS
SaveExploits0References9
osv_cve
osv_cve
•added 2024/01/26 6:15 p.m.•25 views

CVE-2024-0937

A vulnerability, which was classified as critical, has been found in vanderSchaar LAB synthcity 0.2.9. Affected by this issue is the function loadfromfile of the component PKL File Handler. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been...

9.8CVSS5.2AI score0.00684EPSS
SaveExploits0References4
PyPA
PyPA
•added 2024/01/26 5:15 p.m.•21 views

PYSEC-2024-21

A vulnerability classified as critical was found in vanderSchaar LAB TemporAI 0.0.3. Affected by this vulnerability is the function loadfromfile of the component PKL File Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the...

8.8CVSS7.5AI score0.00668EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2024/01/26 12:00 a.m.•19 views

PT-2024-15921 · Unknown · Van Der Schaar Lab Temporai

Name of the Vulnerable Software and Affected Versions: van der Schaar LAB TemporAI version 0.0.3 Description: A critical vulnerability was found in the function load from file of the component PKL File Handler, leading to deserialization. The attack can be launched remotely. The vendor was...

8.8CVSS7AI score0.00668EPSS
SaveExploits0References9
Veracode
Veracode
•added 2024/01/25 12:10 p.m.•31 views

Denial Of Service (DoS)

mupdf is vulnerable to Divide By Zero. The vulnerability is caused due to missing float validation in the bmpdecompressrle4 function within load-pnm.c, resulting in a divide by zero exception. This can potentially lead to a Denial of Service DoS attacks...

7.5CVSS6.7AI score0.00914EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
•added 2024/01/25 5:55 a.m.•17 views

Divide-By-Zero

libmupdf.so is vulnerable to Divide-By-Zero. The vulnerability is due to pnmbinaryreadimage function within load-pnm.c there is no proper validation of input PNM image data, leading to incorrect calculations of image parameters. This results in scenarios where the function attempts to divide a...

7.5CVSS6.7AI score0.00914EPSS
SaveExploits1References4Affected Software1
SUSE CVE
SUSE CVE
•added 2024/01/25 2:48 a.m.•12 views

SUSE CVE-2024-0742

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7...

4.3CVSS6.2AI score0.00596EPSS
SaveExploits0References8
Qualys Blog
Qualys Blog
•added 2024/01/24 4:25 p.m.•33 views

Upgrade to New UI of Qualys Web Application Scanning (WAS): Bringing You Enhanced Web Application Security

In the dynamic world of cybersecurity, staying ahead means constantly evolving. At Qualys, we understand that the bedrock of outstanding security is continuous improvement and innovation. Thats why were thrilled to announce the latest launch of the new User Interface UI for Qualys Web Application...

7.2AI score
SaveExploits0
osv_debian
osv_debian
•added 2024/01/23 2:15 p.m.•10 views

DEBIAN-CVE-2024-0742

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7...

4.3CVSS5.5AI score0.00596EPSS
SaveExploits0References1
NVD
NVD
•added 2024/01/23 2:15 p.m.•28 views

CVE-2024-0742

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7...

4.3CVSS5.5AI score0.00596EPSS
SaveExploits0References6
osv_ubuntu
osv_ubuntu
•added 2024/01/23 2:15 p.m.•12 views

UBUNTU-CVE-2024-0742

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7...

4.3CVSS7.2AI score0.00596EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2024/01/23 12:00 a.m.•7 views

PT-2024-2763

Name of the Vulnerable Software and Affected Versions Shim affected versions not specified Description The issue is related to an out-of-bounds read flaw in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binar...

8.3CVSS6.5AI score0.00412EPSS
SaveExploits0References100
UbuntuCve
UbuntuCve
•added 2024/01/23 12:00 a.m.•47 views

CVE-2023-40549

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service...

6.2CVSS7AI score0.00412EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/01/23 12:00 a.m.•15 views

UBUNTU-CVE-2023-40549

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service...

6.2CVSS6.7AI score0.00412EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2024/01/21 6:30 p.m.•72 views

GHSA-297X-2QF3-JRJ3 Unsafe yaml deserialization in llama-hub

The OpenAPI and ChatGPT plugin loaders in LlamaHub aka llama-hub before 0.0.67 allow attackers to execute arbitrary code because safeload is not used for YAML...

9.8CVSS9.8AI score0.01202EPSS
SaveExploits0References6
NVD
NVD
•added 2024/01/21 5:15 p.m.•61 views

CVE-2024-23731

The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument...

9.8CVSS9.6AI score0.01059EPSS
SaveExploits0References2
PyPA
PyPA
•added 2024/01/21 5:15 p.m.•18 views

PYSEC-2024-7

The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument...

9.8CVSS7.5AI score0.01059EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2024/01/21 12:00 a.m.•22 views

Embedchain Security Breach

Embedchain is an open source RAG framework from Embedchain Open Source. A security vulnerability exists in Embedchain versions prior to 0.1.57. An attacker can exploit this vulnerability to execute arbitrary code related to the parameters of the openapi.py yaml.load function...

9.8CVSS7.6AI score0.01059EPSS
SaveExploits0References3
Rows per page
Query Builder