Lucene search
+L

378 matches found

OSV
OSV
added 2023/12/12 2:15 a.m.16 views

AZL-32125 CVE-2023-46219 affecting package mysql for versions less than 8.0.40-1

When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use...

5.3CVSS6.7AI score0.01133EPSS
SaveExploits1References1
OSV
OSV
added 2023/12/12 2:15 a.m.9 views

AZL-35781 CVE-2023-46219 affecting package cmake for versions less than 3.29.6-1

When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use...

5.3CVSS6.6AI score0.01133EPSS
SaveExploits1References1
OSV
OSV
added 2023/12/12 2:15 a.m.10 views

AZL-35020 CVE-2023-46219 affecting package mysql for versions less than 8.0.40-1

When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use...

5.3CVSS6.6AI score0.01133EPSS
SaveExploits1References1
curl security advisories
curl security advisories
added 2023/12/06 8:0 a.m.12 views

HSTS long filename clears contents

When saving HSTS data to an excessively long filename, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use...

5.3CVSS6.5AI score0.01133EPSS
SaveExploits1References1Affected Software2
Positive Technologies
Positive Technologies
added 2023/12/06 12:0 a.m.4 views

PT-2023-29913 · Curl +6 · Curl +6

Name of the Vulnerable Software and Affected Versions: curl affected versions not specified Description: When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use...

6.5CVSS6.2AI score0.01685EPSS
SaveExploits2References59
NVD
NVD
added 2023/11/27 1:15 p.m.26 views

CVE-2023-4590

Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler SEH registers...

9.8CVSS0.01096EPSS
SaveExploits1References1
OSV
OSV
added 2023/11/27 1:15 p.m.7 views

CVE-2023-4590

Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler SEH registers...

9.8CVSS6.1AI score0.01096EPSS
SaveExploits1References1
Prion
Prion
added 2023/11/27 1:15 p.m.21 views

Buffer overflow

Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler SEH registers...

7.5CVSS8.2AI score0.01096EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/11/27 12:8 p.m.38 views

CVE-2023-4590 Buffer Overflow vulnerability in Frhed

Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler SEH registers...

7.3CVSS9.8AI score0.01096EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/11/27 12:0 a.m.5 views

Frhed Buffer Error Vulnerability

Frhed is a binary file editor hex editor for Windows from the datadiode personal developer. A buffer error vulnerability exists in Frhed version 1.6.0 that originates from allowing an attacker to execute arbitrary code via the long filename parameter via the Structured Exception Handler SEH...

9.8CVSS7.9AI score0.01096EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/11/27 12:0 a.m.11 views

PT-2023-29754 · Frhed · Frhed

Name of the Vulnerable Software and Affected Versions: Frhed hex editor version 1.6.0 Description: The issue is a buffer overflow vulnerability that could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler SEH registers...

9.8CVSS9.6AI score0.01096EPSS
SaveExploits1References4
Mageia
Mageia
added 2023/11/09 12:55 p.m.104 views

Updated zlib packages fix a security vulnerability

The updated packages fix a security vulnerability: MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. CVE-2023-45853...

9.8CVSS7.8AI score0.03179EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/20 11:6 a.m.5 views

OESA-2023-1751 zlib security update

Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms. Security Fixes: MiniZip in zlib through 1.3 has an integer overflow and resulta...

9.8CVSS8.9AI score0.03179EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/10/14 2:15 a.m.4 views

CVE-2023-45853

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an...

9.8CVSS7.1AI score0.03179EPSS
SaveExploits0References12
OSV
OSV
added 2023/10/14 2:15 a.m.7 views

AZL-35400 CVE-2023-45853 affecting package zlib for versions less than 1.3.1-1

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an...

9.8CVSS7.1AI score0.03179EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/14 2:15 a.m.11 views

AZL-61795 CVE-2023-45853 affecting package optipng 0.7.8-5

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an...

9.8CVSS7.1AI score0.03179EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/14 2:15 a.m.13 views

AZL-35295 CVE-2023-45853 affecting package tcl for versions less than 8.6.13-3

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an...

9.8CVSS7.1AI score0.03179EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/14 2:15 a.m.8 views

AZL-31500 CVE-2023-45853 affecting package zlib for versions less than 1.2.13-2

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an...

9.8CVSS7.1AI score0.03179EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/14 2:15 a.m.7 views

AZL-44043 CVE-2023-45853 affecting package deltarpm 3.6.5-2

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an...

9.8CVSS7.1AI score0.03179EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/14 2:15 a.m.8 views

AZL-43435 CVE-2023-45853 affecting package libkml 1.3.0-41

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an...

9.8CVSS7.1AI score0.03179EPSS
SaveExploits0References1
Rows per page
Query Builder