Lucene search
K

4005 matches found

OSV
OSV
added 2017/03/07 3:59 p.m.0 views

UBUNTU-CVE-2016-10040

Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service application crash via a xml file with multiple nested open tags...

5.5CVSS6.6AI score0.00617EPSS
Exploits1References3
Prion
Prion
added 2017/03/07 3:59 p.m.18 views

Stack overflow

Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service application crash via a xml file with multiple nested open tags...

4.3CVSS7.4AI score0.00617EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2017/03/07 3:59 p.m.1 views

DEBIAN-CVE-2016-10040

Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service application crash via a xml file with multiple nested open tags...

5.5CVSS6.1AI score0.00617EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2017/03/07 3:59 p.m.24 views

CVE-2016-10040

Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service application crash via a xml file with multiple nested open tags...

5.5CVSS6.6AI score0.00617EPSS
Exploits1References2
Cvelist
Cvelist
added 2017/03/07 3:0 p.m.24 views

CVE-2016-10040

Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service application crash via a xml file with multiple nested open tags...

5.5AI score0.00617EPSS
Exploits1References4
CVE
CVE
added 2017/03/07 3:0 p.m.69 views

CVE-2016-10040

CVE-2016-10040 : The connected Nessus/NVD-derived documents confirm a stack-based buffer overflow in QXmlSimpleReader of Qt 4.8.5, enabling a remote attacker to cause an application crash (DoS) via a crafted XML file with multiple nested open tags. The description explicitly ties this to Qt 4.8.5...

5.5CVSS5.5AI score0.00617EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2017/03/06 2:59 a.m.20 views

CVE-2017-6499

An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak thus, a DoS...

5.5CVSS6.4AI score0.00275EPSS
Exploits0References5
Prion
Prion
added 2017/03/06 2:59 a.m.27 views

Memory corruption

An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak thus, a DoS...

4.3CVSS5.3AI score0.00275EPSS
Exploits0References5Affected Software2
OSV
OSV
added 2017/03/06 2:59 a.m.5 views

CVE-2017-6499

An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak thus, a DoS...

5.5CVSS7.2AI score
Exploits0References5
OSV
OSV
added 2017/03/05 12:0 a.m.1 views

UBUNTU-CVE-2017-6499

An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak thus, a DoS...

5.5CVSS6.4AI score0.00275EPSS
Exploits0References4
CNVD
CNVD
added 2017/02/10 12:0 a.m.2 views

GStreamer gst-plugins-base denial of service vulnerability (CNVD-2017-01449)

GStreamer is a set of frameworks for handling streaming media. A denial of service vulnerability exists in GStreamer gst-plugins-base, which allows remote attackers to cause a denial of service stack overflow and crash via a nested WAVEFORMATEX vector...

7.5CVSS7.5AI score0.04327EPSS
Exploits0References1
OSV
OSV
added 2017/02/09 3:59 p.m.1 views

DEBIAN-CVE-2017-5839

The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service stack overflow and crash via vectors involving nested WAVEFORMATEX...

7.5CVSS7AI score0.04327EPSS
Exploits0References1
CNVD
CNVD
added 2017/02/09 12:0 a.m.1 views

Linux Kernel Denial of Service Vulnerability (CNVD-2017-01335)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the nestedvmxcheckvmptr function in the arch/x86/kvm/vmx.c file in Linux kernel 4.9.8 and earlier. An attacker on the virtual machine side...

6.5CVSS7.9AI score0.00049EPSS
Exploits0References1
OSV
OSV
added 2017/02/09 12:0 a.m.1 views

UBUNTU-CVE-2017-5839

The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service stack overflow and crash via vectors involving nested WAVEFORMATEX...

7.5CVSS7.2AI score0.04327EPSS
Exploits0References4
OSV
OSV
added 2017/02/06 6:59 a.m.1 views

DEBIAN-CVE-2017-2596

The nestedvmxcheckvmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXON instruction, which allows KVM L1 guest OS users to cause a denial of service host OS memory consumption by leveraging the mishandling of page references...

6.5CVSS8AI score0.00049EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2017/02/05 12:0 a.m.10 views

PT-2017-1185 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.9.8 Description: The issue is related to errors in resource management in the nested vmx check vmptr function of the Linux operating system. This can be exploited by a local attacker to cause a denial of...

10CVSS7.2AI score0.87EPSS
Exploits123References759
RedhatCVE
RedhatCVE
added 2017/01/31 7:47 a.m.27 views

CVE-2017-2596

Linux kernel built with the KVM visualization support CONFIGKVM, with nested visualizationnVMX feature enablednested=1, is vulnerable to host memory leakage issue. It could occur while emulating VMXON instruction in 'handlevmon'. An L1 guest user could use this flaw to leak host memory potentiall...

6.5CVSS1.9AI score0.00049EPSS
Exploits0References1
ThreatPost
ThreatPost
added 2017/01/31 7:0 a.m.13 views

Nested, Targeted Attacks Built for Reconnaissance

Researchers say members of the North Atlantic Treaty Organization were targeted during the holidays by a unique document-based attack that evades discovery by lying dormant when it detects a security researcher’s test environment. Characteristics of this attack, according to researchers at Cisco...

7.3AI score
Exploits0References2
Prion
Prion
added 2017/01/23 9:59 p.m.17 views

Cross site scripting

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via nested forbidden strings...

4.3CVSS6.2AI score0.00482EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2017/01/23 9:59 p.m.16 views

CVE-2013-7451

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the XSS filter via a nested tag...

6.1CVSS6.7AI score0.00566EPSS
Exploits0References3
Rows per page
Query Builder