Lucene search
K

8 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-18780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Use After Free vulnerability in function newToken in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command...

5.5CVSS6.3AI score0.00032EPSS
Exploits1References2
Snyk
Snyk
added 2025/07/11 7:44 p.m.1 views

Use of Hard-coded Password

Overview Affected versions of this package are vulnerable to Use of Hard-coded Password via the NewToken function. An attacker can gain unauthorized access to sensitive information by exploiting the use of a hard-coded password in the JSON Web Token handling process. Remediation There is no fixed...

6.3CVSS6.9AI score0.0021EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2025/05/27 7:0 a.m.2 views

A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of service via the new_Token function in the modules/preprocs/nasm/nasm-pp:1512.

...

5.5CVSS4.5AI score0.00033EPSS
Exploits1
OSV
OSV
added 2024/01/18 9:15 p.m.12 views

CVE-2023-51258

A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of service via the newToken function in the modules/preprocs/nasm/nasm-pp:1512...

5.5CVSS6.4AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/01/18 12:0 a.m.2 views

PT-2024-14080

Name of the Vulnerable Software and Affected Versions YASM version 1.3.0 Description A memory leak issue allows a local attacker to cause a denial of service via the new Token function in the modules/preprocs/nasm/nasm-pp file. Recommendations For YASM version 1.3.0, as a temporary workaround,...

5.5CVSS4.8AI score0.00033EPSS
Exploits1References12
SUSE CVE
SUSE CVE
added 2023/08/24 2:30 a.m.4 views

SUSE CVE-2020-18780

A Use After Free vulnerability in function newToken in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command...

5.5CVSS6.8AI score0.00032EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/08/22 12:0 a.m.2 views

PT-2023-11507 · Nasm +2 · Nasm +2

Name of the Vulnerable Software and Affected Versions: nasm version 2.14.02 Description: A Use After Free issue in the new Token function in asm/preproc.c allows attackers to cause a denial of service via a crafted nasm command. Recommendations: For nasm version 2.14.02, consider disabling the ne...

7.8CVSS6AI score0.00374EPSS
Exploits9References32
CNNVD
CNNVD
added 2023/08/22 12:0 a.m.2 views

Nasm 资源管理错误漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in Nasm version 2.14.02, which stems from a post-release reuse vulnerability in the newToken function of asm/preproc.c. The vulnerability is caused by the use of the newToken functi...

5.5CVSS6.4AI score0.00032EPSS
Exploits1References2
Rows per page
Query Builder