Lucene search
+L

4863 matches found

OSV
OSV
added 2021/02/23 8:15 p.m.9 views

AZL-6492 CVE-2021-26927 affecting package jasper for versions less than 2.0.32-2

A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2decode in jp2dec.c may lead to program crash and denial of service...

5.5CVSS6.6AI score0.0109EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2021/02/19 12:0 a.m.10 views

PT-2021-7858 · Google +11 · Protocol Buffers +10

Name of the Vulnerable Software and Affected Versions: Protocol Buffers versions prior to 3.15.0 MySQL Server versions 8.0.28 and earlier Description: A nullptr dereference occurs when a null char is present in a proto symbol, leading to an unchecked call into the proto file's name during...

10CVSS6.1AI score0.87816EPSS
SaveExploits25References529
OSV
OSV
added 2021/02/16 5:15 p.m.2 views

DEBIAN-CVE-2021-23841

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

5.9CVSS9.1AI score0.07471EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/16 5:15 p.m.6 views

ALPINE-CVE-2021-23841

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

5.9CVSS6.9AI score0.07471EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/16 5:15 p.m.8 views

AZL-40768 CVE-2021-23841 affecting package shim-unsigned-x64 for versions less than 15.8-5

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

5.9CVSS6.6AI score0.07471EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/02/16 12:0 a.m.5 views

CVE-2021-23841

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

5.9CVSS6.7AI score0.07471EPSS
SaveExploits0References27
Cvelist
Cvelist
added 2021/02/15 4:10 a.m.32 views

CVE-2021-21702 Null Dereference in SoapClient

In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash...

5.3CVSS7.8AI score0.03179EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2021/02/11 12:0 a.m.16 views

PHP 7.3.x < 7.3.27 Null Dereference Vulnerability

According to its self-reported version number, the version of PHP installed on the remote host is 7.3.x prior to 7.3.27, 7.4.x prior to 7.4.15, or 8.x prior to 8.0.2. It is, therefore, affected by a null dereference when XML is provided to the SoapClient query function without an existing field...

7.5CVSS7.5AI score0.03179EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/02/11 12:0 a.m.24 views

PHP 8.x < 8.0.2 Null Dereference Vulnerability

According to its self-reported version number, the version of PHP installed on the remote host is 7.3.x prior to 7.3.27, 7.4.x prior to 7.4.15, or 8.x prior to 8.0.2. It is, therefore, affected by a null dereference when XML is provided to the SoapClient query function without an existing field...

7.5CVSS7.5AI score0.03179EPSS
SaveExploits0References2
OSV
OSV
added 2021/02/08 5:58 p.m.6 views

MGASA-2021-0076 Updated php packages fix a security vulnerability

The php packages are updated to version 7.3.27 to fix a Null Dereference in SoapClient SOAP. CVE-2021-21702. Note also php packages version 7.4.15-1.mga7 are available in backports/updates...

7.5CVSS7.4AI score0.03179EPSS
SaveExploits0References3
Mageia
Mageia
added 2021/02/08 5:58 p.m.54 views

Updated php packages fix a security vulnerability

The php packages are updated to version 7.3.27 to fix a Null Dereference in SoapClient SOAP. CVE-2021-21702. Note also php packages version 7.4.15-1.mga7 are available in backports/updates...

7.5CVSS3.5AI score0.03179EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/02/01 12:0 a.m.25 views

Cisco IOS XE SD-WAN DoS (cisco-sa-sdwan-dosmulti-48jJuEUP)

According to its self-reported version, Cisco IOS XE SD-WAN Software is affected by a denial of service DoS vulnerability in the UDP connection response due the presence of a null dereference in vDaemon. An unauthenticated, remote attacker can exploit this, by sending crafted traffic to an affect...

8.6CVSS7.8AI score0.01894EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/01/25 12:0 a.m.33 views

openSUSE Security Update : ovmf (openSUSE-2020-2314)

This update for ovmf fixes the following issues : - CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify bsc1177789. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

7.8CVSS6.5AI score0.00325EPSS
SaveExploits0References2
Prion
Prion
added 2021/01/18 8:15 a.m.33 views

Null pointer dereference

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack Crash, Exit, or Restart...

6.8CVSS7.4AI score0.02286EPSS
SaveExploits0References5Affected Software4
OSV
OSV
added 2021/01/15 12:0 a.m.14 views

OSV-2018-335 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10888 Crash type: Null-dereference READ Crash state: NULL...

7.2AI score
SaveExploits0References1
OSV
OSV
added 2020/12/26 5:22 p.m.9 views

OPENSUSE-SU-2020:2336-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify bsc1177789. This update was imported from the SUSE:SLE-15:Update update project...

7.8CVSS7.7AI score0.00325EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2020/12/26 12:0 a.m.38 views

Security update for ovmf (moderate)

openSUSE Security Update: Security update for ovmf Announcement ID: openSUSE-SU-2020:2336-1 Rating: moderate References: 1177789 Cross-References: CVE-2019-14584 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for ovmf fixes...

7.8CVSS6.6AI score0.00325EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/22 5:22 a.m.9 views

OPENSUSE-SU-2020:2314-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify bsc1177789. This update was imported from the SUSE:SLE-15-SP2:Update update project...

7.8CVSS7.7AI score0.00325EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2020/12/22 12:0 a.m.28 views

Security update for ovmf (moderate)

openSUSE Security Update: Security update for ovmf Announcement ID: openSUSE-SU-2020:2314-1 Rating: moderate References: 1177789 Cross-References: CVE-2019-14584 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for ovmf fixes...

7.8CVSS6.6AI score0.00325EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/12/21 12:0 a.m.25 views

SUSE SLES12 Security Update : ovmf (SUSE-SU-2020:3883-1)

This update for ovmf fixes the following issues : CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify bsc1177789. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

7.8CVSS6.6AI score0.00325EPSS
SaveExploits0References4
Rows per page
Query Builder