Lucene search
K

29 matches found

Vulnrichment
Vulnrichment
added 2026/01/27 8:49 a.m.3 views

CVE-2026-24813 A null pointer dereference in abcz316/SKRoot-linuxKernelRoot

NULL Pointer Dereference vulnerability in abcz316 SKRoot-linuxKernelRoot testRoot/jni/utils modules. This vulnerability is associated with program files cJSON.Cpp. This issue affects SKRoot-linuxKernelRoot...

8.7CVSS5.9AI score0.00085EPSS
Exploits0References1
OSV
OSV
added 2025/12/05 6:54 p.m.1 views

GHSA-CMP6-M4WJ-Q63Q yawkat LZ4 Java has a possible information leak in Java safe decompressor

Summary Insufficient clearing of the output buffer in Java-based decompressor implementations in lz4-java 1.10.0 and earlier allows remote attackers to read previous buffer contents via crafted compressed input. In applications where the output buffer is reused without being cleared, this may lea...

8.2CVSS6.1AI score0.00066EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2016-0857

Malware in sbrugna...

8.4CVSS8.2AI score0.00409EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2024-6873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It is possible to crash or redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request to...

8.1CVSS6.4AI score0.02221EPSS
Exploits0References2
OSV
OSV
added 2024/08/01 4:15 p.m.2 views

UBUNTU-CVE-2024-6873

It is possible to crash or redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request to the ClickHouse server native interface. This redirection is limited to what is available within a 256-byte range of memory at the time o...

8.1CVSS6.3AI score0.02221EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/08/01 12:0 a.m.2 views

PT-2024-37919 · Unknown +1 · Clickhouse

Name of the Vulnerable Software and Affected Versions: ClickHouse versions prior to the latest supported version Description: It is possible to crash or redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request to the...

8.1CVSS8AI score0.02221EPSS
Exploits0References14
ClickHouse
ClickHouse
added 2024/08/01 12:0 a.m.9 views

CVE-2024-6873

It is possible to redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request to the ClickHouse server native interface. This redirection is limited to what is available within a 256-byte range of memory at the time of...

8.1CVSS6AI score0.02221EPSS
Exploits0
OpenVAS
OpenVAS
added 2024/03/08 12:0 a.m.29 views

Fedora: Security Advisory for nekohtml (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.46427EPSS
Exploits3References2
Fedora
Fedora
added 2024/03/07 10:33 p.m.15 views

[SECURITY] Fedora 40 Update: nekohtml-1.9.22-26.fc40

NekoHTML is a simple HTML scanner and tag balancer that enables application programmers to parse HTML documents and access the information using standard XML interfaces. The parser can scan HTML files and "fix up" many common mistakes that human and computer authors make in writing HTML documents...

8.8CVSS6.4AI score0.46427EPSS
Exploits3
Fedora
Fedora
added 2024/03/07 10:33 p.m.25 views

[SECURITY] Fedora 40 Update: jni-inchi-0.8-11.fc40

JNI-InChI enables Java software to generate IUPAC's International Chemical Identifiers InChIs by making Java Native Interface JNI calls to the InChI C library developed by IUPAC. All of the features from the InChI library are supported: - Standard and Non-Standard InChI generation from structures...

8.8CVSS6.8AI score0.46427EPSS
Exploits3
Fedora
Fedora
added 2024/03/07 10:33 p.m.13 views

[SECURITY] Fedora 40 Update: hawtjni-1.18-12.fc40

HawtJNI is a code generator that produces the JNI code needed to implement java native methods. It is based on the jnigen code generator that is part of the SWT Tools project which is used to generate all the JNI code which powers the eclipse platform...

8.8CVSS7AI score0.46427EPSS
Exploits3
UbuntuCve
UbuntuCve
added 2023/12/22 4:15 p.m.16 views

CVE-2023-48704

ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

7.5CVSS6.9AI score0.00473EPSS
Exploits0References3
ClickHouse
ClickHouse
added 2023/11/26 12:0 a.m.9 views

CVE-2023-47118

A heap buffer overflow vulnerability affecting the native interface running by default on port 9000/tcp. An attacker, by triggering a bug in the T64 compression codec, can cause the ClickHouse server process to crash. This vulnerability can be exploited without the need to authenticate. Fix has...

9.8CVSS5.8AI score0.00387EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2023/11/26 12:0 a.m.1 views

PT-2023-30321 · Unknown +1 · Clickhouse

Name of the Vulnerable Software and Affected Versions: ClickHouse versions prior to 23.10.2.13-stable ClickHouse versions prior to 23.9.4.11-stable ClickHouse versions prior to 23.8.6.16-lts ClickHouse versions prior to 23.3.16.7-lts Description: A heap buffer overflow issue was discovered in the...

9.8CVSS8.8AI score0.00387EPSS
Exploits0References15
ClickHouse
ClickHouse
added 2023/11/26 12:0 a.m.6 views

CVE-2023-48704

A heap buffer overflow vulnerability affecting the native interface running by default on port 9000/tcp. An attacker, by triggering a bug in the Gorilla codec, can cause the ClickHouse server process to crash. This vulnerability can be exploited without the need to authenticate. Fix has been push...

7.5CVSS5.8AI score0.00473EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 6:16 a.m.1 views

SUSE CVE-2005-3946

Opera 8.50 allows remote attackers to cause a denial of service crash via a Java applet with a large string argument to the removeMember JNI method for the com.opera.JSObject class...

5CVSS6.8AI score0.02419EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:25 a.m.2 views

SUSE CVE-2014-8631

The Chrome Object Wrapper COW implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 supports native-interface passing, which allows remote attackers to bypass intended DOM object restrictions via a call to an unspecified method...

4.3CVSS8.7AI score0.00217EPSS
Exploits0References3
ThreatPost
ThreatPost
added 2021/02/23 7:36 p.m.187 views

IBM Squashes Critical Remote Code-Execution Flaw

IBM has patched a critical buffer-overflow error that affects Big Blue’s Integration Designer toolset, which helps enterprises create business processes that integrate applications and data. If exploited, the flaw could enable remote code execution. Click to Register The flaw CVE-2020-27221 has a...

7.5CVSS8.6AI score0.04991EPSS
Exploits0References15
CNNVD
CNNVD
added 2021/01/21 12:0 a.m.3 views

Eclipse OpenJ9 缓冲区错误漏洞

Eclipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. A buffer overflow vulnerability exists in Eclipse OpenJ9 versions prior to 0.23, which stems from a stack-based buffer overflow that can occur when the virtual machine ...

9.8CVSS6.8AI score0.00727EPSS
Exploits0References73
Packet Storm
Packet Storm
added 2021/01/07 12:0 a.m.307 views

H2 Database 1.4.199 JNI Code Execution

Exploit Title: H2 Database 1.4.199 - JNI Code Execution Exploit Author: 1F98D Original Author: Markus Wulftange Date: 28 April 2020 Vendor Hompage: https://www.h2database.com/ Tested on: Windows 10 x64, Java 1.8, H2 1.4.199 References:...

7.4AI score
Exploits0
Rows per page
Query Builder