Lucene search
+L

7636 matches found

Veracode
Veracode
added 2021/07/30 5:40 a.m.30 views

Denial Of Service(DoS)

Fetchmail is vulnerable to denial of service. reportvbuild in report.c sometimes omits initialization of the vsnprintf valist argument, allowing mail servers to cause a denial of service or possibly have unspecified other impact via long error messages...

7.5CVSS4.9AI score0.0256EPSS
SaveExploits0References10Affected Software1
RedHat Linux
RedHat Linux
added 2021/07/20 10:33 p.m.7 views

systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash

A flaw was found in systemd. The use of alloca function with an uncontrolled size in function unitnamepathescape allows a local attacker, able to mount a filesystem on a very long path, to crash systemd and the whole system by allocating a very large space in the stack. The highest threat from th...

5.5CVSS7.3AI score0.08792EPSS
SaveExploits2References6
RedHat Linux
RedHat Linux
added 2021/07/20 9:27 p.m.10 views

glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern

A stack buffer overflow flaw was found in glibc in the way the printf family of functions processed an 80-bit long double with a non-canonical bit pattern. This flaw allows an attacker who can control the arguments of these functions with the non-standard long double pattern to trigger an overflo...

7.5CVSS7AI score0.02799EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/07/20 12:00 a.m.5 views

systemd 安全漏洞

systemd is a Linux-based system and service manager from the individual developer Lennart Poettering in Germany. The product is compatible with SysV and LSB startup scripts and provides a framework for representing dependencies between system services. A security vulnerability exists in systemd...

5.5CVSS6.6AI score0.08792EPSS
SaveExploits2References46
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:00 a.m.8 views

The vulnerability in the pickle.c module of the Python programming language, related to integer overflow, allows attackers to cause a service failure.

The vulnerability in the pickle.c module of the Python programming language is related to a numerical overflow due to the large value of LONGBINPUT. This value is incorrectly handled when attempting to double the size of an object. Exploiting this vulnerability can allow a remote attacker to caus...

7.5CVSS6.8AI score0.05789EPSS
SaveExploits1References9Affected Software3
Positive Technologies
Positive Technologies
added 2021/07/19 12:00 a.m.18 views

PT-2021-1515

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 3.16 through 5.13.x before 5.13.4 Description: The issue is related to an integer overflow and out-of-bounds write in the Linux kernel's filesystem layer, specifically in the fs/seq file.c component. This can be exploite...

10CVSS8.6AI score0.98745EPSS
SaveExploits384References1130
OSV
OSV
added 2021/07/07 2:15 p.m.8 views

CVE-2020-20211

Mikrotik RouterOs 6.44.5 long-term tree suffers from an assertion failure vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet...

6.5CVSS6.7AI score0.02107EPSS
SaveExploits1References2
Microsoft KB
Microsoft KB
added 2021/07/06 12:00 a.m.9 views

July 6, 2021, update for Outlook 2016 (KB5001980)

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2021/07/06 12:00 a.m.9 views

July 6, 2021, update for Office 2016 (KB5001971)

None None...

6.1AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/07/02 1:15 p.m.7 views

CVE-2021-36125

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalRenameRequest page is vulnerable to infinite loops and denial of service attacks when a user's current username is beyond an arbitrary maximum configuration value MaxNameChars...

7.5CVSS7.2AI score0.01039EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/06/30 12:00 a.m.7 views

PT-2021-14713 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.299 and earlier Jenkins LTS versions 2.289.1 and earlier Description: The issue allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read...

4.3CVSS4.6AI score0.01982EPSS
SaveExploits0References10
CNVD
CNVD
added 2021/06/29 12:00 a.m.11 views

Roehling PostSRSd Denial of Service Vulnerability

Roehling Postsrsd is a C-based program by Roehling's personal developer that provides reverse SRS functionality for mail servers. PostSRSd suffers from a denial of service vulnerability that stems from a problem caused by Postfix sending certain long data fields, such as email addresses for...

5.3CVSS6.6AI score0.01622EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/28 6:15 p.m.25 views

CVE-2021-35525

PostSRSd before 1.11 allows a denial of service subprocess hang if Postfix sends certain long data fields such as multiple concatenated email addresses. NOTE: the PostSRSd maintainer acknowledges "theoretically, this error should never occur ... I'm not sure if there's a reliable way to trigger...

5.3CVSS0.01622EPSS
SaveExploits0References4
OSV
OSV
added 2021/06/28 6:15 p.m.21 views

CVE-2021-35525

PostSRSd before 1.11 allows a denial of service subprocess hang if Postfix sends certain long data fields such as multiple concatenated email addresses. NOTE: the PostSRSd maintainer acknowledges "theoretically, this error should never occur ... I'm not sure if there's a reliable way to trigger...

5.3CVSS6.7AI score
SaveExploits0References4
Prion
Prion
added 2021/06/28 6:15 p.m.22 views

Race condition

PostSRSd before 1.11 allows a denial of service subprocess hang if Postfix sends certain long data fields such as multiple concatenated email addresses. NOTE: the PostSRSd maintainer acknowledges "theoretically, this error should never occur ... I'm not sure if there's a reliable way to trigger...

5CVSS5.5AI score0.01622EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/06/28 6:15 p.m.8 views

UBUNTU-CVE-2021-35525

PostSRSd before 1.11 allows a denial of service subprocess hang if Postfix sends certain long data fields such as multiple concatenated email addresses. NOTE: the PostSRSd maintainer acknowledges "theoretically, this error should never occur ... I'm not sure if there's a reliable way to trigger...

5.3CVSS5.8AI score0.01622EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2021/06/28 5:38 p.m.33 views

CVE-2021-35525

PostSRSd before 1.11 allows a denial of service subprocess hang if Postfix sends certain long data fields such as multiple concatenated email addresses. NOTE: the PostSRSd maintainer acknowledges "theoretically, this error should never occur ... I'm not sure if there's a reliable way to trigger...

5.8AI score0.01622EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2021/06/28 5:38 p.m.77 views

CVE-2021-35525

PostSRSd before 1.11 allows a denial of service subprocess hang if Postfix sends certain long data fields such as multiple concatenated email addresses. NOTE: the PostSRSd maintainer acknowledges "theoretically, this error should never occur ... I'm not sure if there's a reliable way to trigger...

5.3CVSS5.2AI score0.01622EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/06/28 12:00 a.m.7 views

Roehling PostSRSd 安全漏洞

Roehling Postsrsd is a C-based program by Roehling's personal developer that provides reverse SRS functionality for mail servers. PostSRSd suffers from a denial of service vulnerability that stems from a problem caused by Postfix sending certain long data fields, such as email addresses for...

5.3CVSS5.7AI score0.01622EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2021/06/15 12:00 a.m.14 views

PT-2021-7399 · Qualcomm · Snapdragon Connectivity +6

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables affected versions not specified Description: The issue is related to improper...

7.8CVSS7.5AI score0.00416EPSS
SaveExploits0References7
Rows per page
Query Builder