Lucene search
+L

8478 matches found

OSV
OSV
added 2018/12/24 6:29 p.m.7 views

CVE-2018-20247

In Foxit Quick PDF Library all versions prior to 16.12, issue where loading a malformed or malicious PDF containing a recursive page tree structure using the LoadFromFile, LoadFromString or LoadFromStream functions results in a stack overflow...

7.8CVSS5.9AI score0.54492EPSS
SaveExploits0References2
OSV
OSV
added 2018/12/23 2:29 a.m.6 views

CVE-2018-20369

Barracuda Message Archiver 2018 has XSS in the errormsg exception-handling value for the ldapuser parameter to the cgi-mod/ldaploadentry.cgi module. The injection point of the issue is the AddUpdate module...

6.1CVSS5.8AI score0.00692EPSS
SaveExploits3References1
Prion
Prion
added 2018/12/21 11:29 p.m.15 views

Design/Logic Flaw

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

7.5CVSS9.9AI score0.0346EPSS
SaveExploits1References1
OSV
OSV
added 2018/12/21 11:29 p.m.8 views

CVE-2018-20325

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

9.8CVSS6AI score0.0346EPSS
SaveExploits1References1
PyPA
PyPA
added 2018/12/21 11:29 p.m.12 views

PYSEC-2018-82

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

9.8CVSS7.7AI score0.0346EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2018/12/21 11:29 p.m.13 views

PYSEC-2018-82

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

9.8CVSS6.1AI score0.0346EPSS
SaveExploits1References2
CVE
CVE
added 2018/12/21 10:0 p.m.80 views

CVE-2018-20325

CVE-2018-20325 affects the Danijar Hafner definitions package for Python. The vulnerability resides in the load() method of definitions/parser.py, allowing execution of arbitrary Python commands and resulting in command execution. The available documents identify the vulnerable component and the ...

9.8CVSS9.9AI score0.0346EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2018/12/21 10:0 p.m.35 views

CVE-2018-20325

There is a vulnerability in load method in definitions/parser.py in the Danijar Hafner definitions package for Python. It can execute arbitrary python commands resulting in command execution...

10AI score0.0346EPSS
SaveExploits1References1
OSV
OSV
added 2018/12/21 9:29 a.m.6 views

ALPINE-CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

8.8CVSS7.4AI score0.02006EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/12/19 12:0 a.m.10 views

LibRaw 'unpacked_load_raw()' Function Denial of Service Vulnerability

LibRaw is a C++ library for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A denial of service vulnerability exists in the LibRaw 'unpackedloadraw' function. An attacker can exploit the vulnerability to cause a DoS Denial of Service...

7.5CVSS8.4AI score0.02505EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2018/12/19 12:0 a.m.6 views

PT-2023-15164 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a Buffer Overflow in the gf text process sub function of filters/load text.c. This function is part of the GPAC MP4box, which is used for processing and...

9.8CVSS7AI score0.04615EPSS
SaveExploits150References372
Positive Technologies
Positive Technologies
added 2018/12/19 12:0 a.m.6 views

PT-2023-15159 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4Box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a segmentation violation via the function gf sm load init swf at scene manager/swf parse.c. No information is provided about the estimated number of potentiall...

9.8CVSS7.5AI score0.04615EPSS
SaveExploits150References373
OSV
OSV
added 2018/12/17 3:29 p.m.5 views

DEBIAN-CVE-2018-18245

Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified checkload plugin to NRPE...

5.4CVSS5.3AI score0.02552EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/12/13 12:0 a.m.7 views

Lisa-lab/pylearn2 inventory in command execution vulnerability

The Pylearn2/config/yamlparse.load function suffers from a command execution vulnerability in its implementation, which allows an attacker to perform arbitrary code operations...

7.7AI score
SaveExploits0
Fedora
Fedora
added 2018/12/11 2:43 a.m.43 views

[SECURITY] Fedora 29 Update: keepalived-2.0.10-1.fc29

Keepalived provides simple and robust facilities for load balancing and high availability to Linux system and Linux based infrastructures. The load balancing framework relies on well-known and widely used Linux Virtual Server IPVS kernel module providing Layer4 load balancing. Keepalived implemen...

9.8CVSS1AI score0.03746EPSS
SaveExploits2
CNVD
CNVD
added 2018/12/11 12:0 a.m.8 views

LibRaw 'LibRaw::panasonic_load_raw()' function heap buffer overflow vulnerability

LibRaw is a C++ library developed by the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A heap buffer overflow vulnerability exists in the 'LibRaw::panasonicloadraw' function in the dcrawcommon.cpp file in LibRaw versions prior to 0.18.6. A remote attacker can...

8.8CVSS9.3AI score0.01993EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/12/10 12:0 a.m.7 views

LibRaw 'samsung_load_raw()' function memory out-of-bounds read vulnerability

LibRaw is a C++ library developed by the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A security vulnerability exists in the 'samsungloadraw' function in the internal/dcrawcommon.cpp file in LibRaw versions prior to 0.18.9. A remote attacker can exploit this...

8.8CVSS9.1AI score0.01983EPSS
SaveExploits0References1
Hacker One
Hacker One
added 2018/12/08 3:22 p.m.13 views

Ruby: The taint flag is not propagated at JSON.parse

Vulnerability description not provided...

7.1AI score
SaveExploits0
OSV
OSV
added 2018/12/07 10:29 p.m.20 views

CVE-2018-5812

An error within the "nikoncoolscanloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to trigger a NULL pointer dereference...

6.5CVSS6.5AI score
SaveExploits0References5
OSV
OSV
added 2018/12/07 10:29 p.m.6 views

DEBIAN-CVE-2018-5810

An error within the "rolleiloadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.9 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash...

8.8CVSS7AI score0.021EPSS
SaveExploits0References1
Rows per page
Query Builder