Lucene search
+L

6048 matches found

CNNVD
CNNVD
•added 2022/03/11 12:00 a.m.•10 views

FasterXML jackson-databind buffer error vulnerability

FasterXML jackson-databind is a JAVA-based data formats such as XML and JSON and JAVA objects can be converted to the library . Jackson can easily convert Java objects into json objects and xml documents , the same can also be json, xml into Java objects . FasterXML jackson-databind 2.13.0 before...

7.5CVSS7AI score0.0486EPSS
SaveExploits1References47
Debian CVE
Debian CVE
•added 2022/03/11 12:00 a.m.•114 views

CVE-2020-36518

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects...

7.5CVSS7.8AI score0.0486EPSS
SaveExploits1
Veracode
Veracode
•added 2022/03/07 3:56 a.m.•43 views

Denial Of Service (DoS)

github.com/golang/go is vulnerable to Denial Of Service DoS. An attacker can crash the application by providing a deeply nested regular expression to reuse function of parse.go...

7.5CVSS8.4AI score0.03228EPSS
SaveExploits0References12Affected Software1
osv_debian
osv_debian
•added 2022/03/05 8:15 p.m.•9 views

DEBIAN-CVE-2022-24921

regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression...

7.5CVSS6.8AI score0.03228EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2022/03/05 8:15 p.m.•20 views

AZL-79112 CVE-2022-24921 affecting package golang 1.25.7-1

regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression...

7.5CVSS6.7AI score0.03228EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2022/03/05 8:15 p.m.•17 views

AZL-98922 CVE-2022-24921 affecting package golang 1.27.1-1

regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression...

7.5CVSS7.4AI score0.03228EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/05 8:15 p.m.•26 views

CVE-2022-24921

regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression...

7.5CVSS7.3AI score0.03228EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2022/03/05 12:00 a.m.•46 views

CVE-2022-24921

regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression...

6.7AI score
SaveExploits0References9
CVE
CVE
•added 2022/03/05 12:00 a.m.•522 views

CVE-2022-24921

CVE-2022-24921 affects the Go language’s standard library (regexp.Compile). The issue allows stack exhaustion via a deeply nested regular expression, leading to denial of service. The root cause is a vulnerability in regexp handling that can consume stack memory under certain inputs. Rationale: i...

7.5CVSS7.5AI score0.03228EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
•added 2022/03/05 12:00 a.m.•93 views

CVE-2022-24921

Removed by vendor...

7.5CVSS6.9AI score0.03228EPSS
SaveExploits0
attackerkb
attackerkb
•added 2022/03/04 7:15 p.m.•19 views

CVE-2021-3656

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "virtext" field, this issue could allow a malicious...

8.8CVSS6.7AI score0.00658EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2022/03/04 7:15 p.m.•23 views

DEBIAN-CVE-2021-3656

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "virtext" field, this issue could allow a malicious...

8.8CVSS6.3AI score0.00658EPSS
SaveExploits0References1
NVD
NVD
•added 2022/03/04 7:15 p.m.•48 views

CVE-2021-3656

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "virtext" field, this issue could allow a malicious...

8.8CVSS0.00658EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2022/03/04 7:15 p.m.•67 views

CVE-2021-3656

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "virtext" field, this issue could allow a malicious...

8.8CVSS6.6AI score0.00658EPSS
SaveExploits0References4
Prion
Prion
•added 2022/03/04 7:15 p.m.•52 views

Input validation

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "virtext" field, this issue could allow a malicious...

7.2CVSS8.3AI score0.00658EPSS
SaveExploits0References4Affected Software24
CVE
CVE
•added 2022/03/04 6:41 p.m.•437 views

CVE-2021-3656

CVE-2021-3656 describes a flaw in the KVM hypervisor for AMD processors where the L1 guest can provide a VMCB with an improperly validated virt_ext field, allowing the L1 to disable VMLOAD/VMSAVE intercepts and VLS for the L2 guest. This enables the L2 guest to read/write portions of the host’s p...

8.8CVSS8.6AI score0.00658EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2022/03/04 6:41 p.m.•64 views

CVE-2021-3656

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "virtext" field, this issue could allow a malicious...

8.8AI score0.00658EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2022/03/04 6:41 p.m.•97 views

CVE-2021-3656

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "virtext" field, this issue could allow a malicious...

8.8CVSS7.4AI score0.00658EPSS
SaveExploits0
Mend
Mend
•added 2022/03/04 6:41 p.m.•9 views

CVE-2021-3656

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "virtext" field, this issue could allow a malicious...

9.3CVSS0.00658EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/04 12:00 a.m.•9 views

CVE-2021-3656: Missing Authorization

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB virtual machine control block provided by the L1 guest to spawn/handle a nested guest L2. Due to improper validation of the "virtext" field, this issue could allow a malicious...

8.8CVSS7.4AI score0.00658EPSS
SaveExploits0References3
Rows per page
Query Builder