Lucene search
+L

7511 matches found

Positive Technologies
Positive Technologies
•added 2021/04/14 12:00 a.m.•25 views

PT-2021-3578

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.39 through 2.4.46 Description The issue exists due to insufficient input validation in the Apache HTTP Server. Exploitation of this issue may allow a remote attacker to impact the integrity of protected...

5.3CVSS7AI score0.52612EPSS
SaveExploits0References104
Apache Httpd
Apache Httpd
•added 2021/04/14 12:00 a.m.•122 views

Apache Httpd < 2.4.48 : Unexpected URL matching with 'MergeSlashes OFF'

Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'...

5.3CVSS7.5AI score0.52612EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2021/04/12 12:00 a.m.•175 views

openSUSE Security Update : the Linux Kernel (openSUSE-2021-532)

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to be 0 leading...

9.8CVSS6.6AI score0.02503EPSS
SaveExploits4References116
Wired Threat Level
Wired Threat Level
•added 2021/04/07 5:16 p.m.•45 views

Twitch Will Act on ‘Serious’ Offenses That Happen Off-Stream

The new policy holds streamers to account for what happens on other services and in real life...

2.7AI score
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2021/04/01 2:15 p.m.•14 views

UBUNTU-CVE-2021-20235

There's a flaw in the zeromq server in versions before 4.3.3 in src/decoderallocators.hpp. The decoder static allocator could have its sized changed, but the buffer would remain the same as it is a static buffer. A remote, unauthenticated attacker who sends a crafted request to the zeromq server...

8.1CVSS7.7AI score0.43862EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/03/30 6:15 p.m.•19 views

CVE-2021-21412

Potential for arbitrary code execution in npm package @thi.ng/egf gpg-tagged property values only if decrypt: true option is enabled. PR with patch has been submitted and will has been released as of v0.4.0 By default the EGF parse functions do NOT attempt to decrypt values since GPG only availab...

8.8CVSS6.4AI score0.01339EPSS
SaveExploits0References6Affected Software1
Microsoft CVE
Microsoft CVE
•added 2021/03/26 7:00 a.m.•12 views

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory aka CID-10d2bb2e6b1d.

...

6CVSS8.3AI score0.00577EPSS
SaveExploits0
NVD
NVD
•added 2021/03/20 10:15 p.m.•30 views

CVE-2020-27171

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error with a resultant integer underflow affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information...

6CVSS0.00577EPSS
SaveExploits0References9
osv_debian
osv_debian
•added 2021/03/20 10:15 p.m.•8 views

DEBIAN-CVE-2020-27171

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error with a resultant integer underflow affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information...

6CVSS6.7AI score0.00577EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2021/03/20 10:15 p.m.•25 views

AZL-6526 CVE-2020-27171 affecting package kernel for versions less than 5.10.78.1-1

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error with a resultant integer underflow affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information...

6CVSS6.9AI score0.00577EPSS
SaveExploits0References1
Prion
Prion
•added 2021/03/20 10:15 p.m.•48 views

Integer overflow

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error with a resultant integer underflow affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information...

3.6CVSS5.5AI score0.00577EPSS
SaveExploits0References9Affected Software4
attackerkb
attackerkb
•added 2021/03/20 10:15 p.m.•13 views

CVE-2020-27171

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error with a resultant integer underflow affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information...

6CVSS8.4AI score0.00577EPSS
SaveExploits0References13
Mend
Mend
•added 2021/03/20 9:41 p.m.•7 views

CVE-2020-27171

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error with a resultant integer underflow affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information...

6.8CVSS0.00577EPSS
SaveExploits0References15
Cvelist
Cvelist
•added 2021/03/20 9:41 p.m.•56 views

CVE-2020-27171

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error with a resultant integer underflow affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information...

6.8AI score0.00577EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/20 12:00 a.m.•8 views

CVE-2020-27171: Off-by-one Error

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error with a resultant integer underflow affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information...

6CVSS5.7AI score0.00577EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
•added 2021/03/19 12:00 a.m.•103 views

F5 Networks BIG-IP : Linux kernel vulnerability (K09604370)

A flaw in the way reply ICMP packets are limited in the Linux kernel functionality was found that allows to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentialit...

7.4CVSS6.8AI score0.06692EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2021/03/18 10:00 p.m.•18 views

UBUNTU-CVE-2020-27171

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error with a resultant integer underflow affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information...

6CVSS6.9AI score0.00577EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2021/03/18 10:00 p.m.•70 views

CVE-2020-27171

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error with a resultant integer underflow affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information...

6CVSS7AI score0.00577EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/03/17 12:00 a.m.•5 views

PT-2021-2498

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.11.8 Description: An issue in the Linux kernel affects the kernel/bpf/verifier.c file, causing an off-by-one error with a resultant integer underflow. This error leads to out-of-bounds speculation on pointer...

6.2CVSS0.00577EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2021/03/15 5:37 p.m.•245 views

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 Sudo Baron Samedit This repository is CVE-202...

7.8CVSS7.1AI score0.99962EPSS
SaveExploits83
Rows per page
Query Builder