Lucene search
K

680 matches found

Veracode
Veracode
added 2022/01/07 3:30 a.m.15 views

Denial Of Service (DoS)

pocketmine/pocketmine-mp is vulnerable to denial of service. The library does not properly validate byte limit in the skin length resulting in an overflow, allowing an attacker to crash the application...

3.9AI score
Exploits0
OSV
OSV
added 2021/12/15 8:15 p.m.3 views

CVE-2021-27856

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 includes an account named "cmuser" that has administrative privileges and no password. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this vulnerability is FPSA002...

9.8CVSS7.2AI score0.05598EPSS
Exploits1References3
OSV
OSV
added 2021/11/15 4:15 a.m.1 views

DEBIAN-CVE-2021-43618

GNU Multiple Precision Arithmetic Library GMP through 6.2.1 has an mpz/inpraw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms...

7.5CVSS7.9AI score0.03425EPSS
Exploits1References1
Openbugbounty
Openbugbounty
added 2021/11/11 4:11 a.m.10 views

mp-trans.com.pl Improper Access Control vulnerability OBB-2256288

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.6AI score
Exploits0
CNVD
CNVD
added 2021/11/11 12:0 a.m.17 views

XnView MP Buffer Overflow Vulnerability (CNVD-2021-95260)

XnView MP is a set of image viewing software that is an enhanced version of XnView Classic. The software can be used to view, convert, organize and edit graphics and video files.XnView MP suffers from a buffer overflow vulnerability, which can be exploited by attackers to cause a denial of servic...

5.5CVSS4.9AI score0.00947EPSS
Exploits1References1
OSV
OSV
added 2021/11/10 10:15 p.m.5 views

CVE-2020-23887

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service DoS via a crafted ico file. Related to a Read Access Violation starting at USER32!SmartStretchDIBits+0x33...

5.5CVSS6.1AI score
Exploits0References2
OSV
OSV
added 2021/11/10 10:15 p.m.2 views

CVE-2020-23886

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service DoS via a crafted pict file. Related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree...

5.5CVSS5.8AI score0.00947EPSS
Exploits1References3
NVD
NVD
added 2021/11/10 10:15 p.m.12 views

CVE-2020-23886

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service DoS via a crafted pict file. Related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree...

5.5CVSS0.00947EPSS
Exploits1References3
Prion
Prion
added 2021/11/10 10:15 p.m.23 views

Design/Logic Flaw

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service DoS via a crafted pict file. Related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree...

4.3CVSS5.6AI score0.00947EPSS
Exploits1References3Affected Software1
Prion
Prion
added 2021/11/10 10:15 p.m.22 views

Design/Logic Flaw

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service DoS via a crafted ico file. Related to a Read Access Violation starting at USER32!SmartStretchDIBits+0x33...

4.3CVSS5.6AI score0.00697EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/11/10 9:25 p.m.16 views

CVE-2020-23887

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service DoS via a crafted ico file. Related to a Read Access Violation starting at USER32!SmartStretchDIBits+0x33...

5.6AI score0.00697EPSS
Exploits1References2
CVE
CVE
added 2021/11/10 9:25 p.m.48 views

CVE-2020-23887

XnView MP v0.96.4 is affected by a heap-based buffer overflow that can be triggered by a crafted ICO file, leading to a denial of service. The issue is described as a Read Access Violation beginning at USER32!SmartStretchDIBits+0x33. Connected sources confirm the vulnerability in XnView MP, but d...

5.5CVSS5.5AI score0.00697EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2021/11/10 9:25 p.m.56 views

CVE-2020-23886

XnView MP 0.96.4 is affected by a heap overflow in the image-pict processing path, enabling denial of service. Exploit path is a crafted pict file, with the fault linked to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree. Public documents do not specify a patched version; Red Hat/other...

5.5CVSS5.5AI score0.00947EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2021/11/10 9:25 p.m.14 views

CVE-2020-23886

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service DoS via a crafted pict file. Related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree...

5.6AI score0.00947EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2021/11/10 12:0 a.m.4 views

PT-2021-10962 · Xnview Mp · Xnview Mp

Name of the Vulnerable Software and Affected Versions: XnView MP version 0.96.4 Description: A heap overflow issue allows attackers to cause a denial of service DoS via a crafted pict file, related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree. Recommendations: For XnView MP versi...

5.5CVSS5.5AI score0.00947EPSS
Exploits1References5
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.3 views

XnView MP 缓冲区错误漏洞

XnView MP is a set of image viewing software that is an enhanced version of XnView Classic. The software can be used to view, convert, organize and edit graphics and video files. XnView MP is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause a heap overflow...

5.5CVSS6AI score0.00697EPSS
Exploits1References2
OSV
OSV
added 2021/09/28 12:15 p.m.4 views

CVE-2021-41539

A vulnerability has been identified in Solid Edge SE2021 All versions SE2021MP8. The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process ZDI-CAN-13773...

7.8CVSS5.9AI score0.01127EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/08/17 12:0 a.m.2 views

The vulnerability of the MP Daemon diagnostic tool developed by Realtek SDK allows a hacker to execute arbitrary code.

The vulnerability of the MP Daemon diagnostic tool developed by Realtek SDK relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.99857EPSS
Exploits2References5Affected Software2
OSV
OSV
added 2021/08/16 12:15 p.m.3 views

CVE-2021-35394

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote...

9.8CVSS7.2AI score0.99857EPSS
Exploits2References5
NVD
NVD
added 2021/08/16 12:15 p.m.29 views

CVE-2021-35394

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote...

10CVSS0.99857EPSS
Exploits2References5
Rows per page
Query Builder