Lucene search
+L

5363 matches found

BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.9 views

The vulnerability of the Microsoft Outlook email client, related to the execution of operations outside the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

10CVSS8.5AI score0.19059EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.9 views

The vulnerability of the Microsoft Outlook email client, related to the execution of operations outside the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

10CVSS8.5AI score0.19059EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.16 views

The vulnerability of the Media framework component of the Android operating system allows a hacker to enhance their privileges and execute arbitrary code.

The vulnerability of the Media framework component of the Android operating system relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges and execute arbitrary code...

10CVSS8AI score0.01428EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/12/07 12:0 a.m.37 views

Amazon Linux AMI : curl (ALAS-2018-1112)

curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...

10CVSS7.5AI score0.11115EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2018/12/04 12:0 a.m.15 views

The vulnerability of the VBScript script handler in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of VBScript script handlers in Windows operating systems arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, either through a specially crafted web page or a Microsoft...

7.6CVSS8.4AI score0.47556EPSS
SaveExploits4References5
BDU FSTEC
BDU FSTEC
added 2018/11/23 12:0 a.m.12 views

Vulnerability of the vorbis_book_decodev_set function in the Media Framework component of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the vorbisbookdecodevset function in the codebook.c file of the Media Framework component of the Android operating system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.1CVSS8.4AI score0.01203EPSS
SaveExploits0References4Affected Software1
RedHat Linux
RedHat Linux
added 2018/11/13 8:36 a.m.22 views

curl: IMAP FETCH response out of bounds read

A buffer overrun flaw was found in the IMAP handler of libcurl. By tricking an unsuspecting user into connecting to a malicious IMAP server, an attacker could exploit this flaw to potentially cause information disclosure or crash the application...

9.1CVSS7.4AI score0.06224EPSS
SaveExploits0References5
0day.today
0day.today
added 2018/11/09 12:0 a.m.246 views

OpenSLP 2.0.0 - Multiple Vulnerabilities

Exploit for linux platform in category local exploits OpenSLP 2.0.0 - Multiple Vulnerabilities ========================== I discovered some bugs in openslp-2.0.0 back in January, 2018. One of them I disclosed in June dumpco.re/blog/openslp-2.0.0-double-free, and today I'm disclosing two more. BUG...

7.5CVSS0.12463EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
added 2018/11/09 12:0 a.m.6 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

4.2CVSS8.4AI score0.14607EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/11/07 12:0 a.m.11 views

The vulnerability of the Internet Explorer browser, related to the execution of operations beyond the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

7.6CVSS8.3AI score0.13131EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/11/02 12:0 a.m.38 views

FreeBSD : curl -- multiple vulnerabilities (e0ab1773-07c1-46c6-9170-4c5e81c00927)

curl security problems : CVE-2018-16839: SASL password overflow via integer overflow libcurl contains a buffer overrun in the SASL authentication code. The internal function Curlauthcreateplainmessage fails to correctly verify that the passed in lengths for name and password aren't too long, then...

9.8CVSS7.3AI score0.05782EPSS
SaveExploits0References8
Prion
Prion
added 2018/10/31 6:29 p.m.21 views

Buffer overflow

Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service...

7.5CVSS9.3AI score0.05782EPSS
SaveExploits0References9Affected Software3
OSV
OSV
added 2018/10/31 6:29 p.m.34 views

CVE-2018-16839

Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service...

9.8CVSS9.5AI score0.05782EPSS
SaveExploits0References9
NVD
NVD
added 2018/10/31 6:29 p.m.22 views

CVE-2018-16839

Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service...

9.8CVSS6.9AI score0.05782EPSS
SaveExploits0References9
OSV
OSV
added 2018/10/31 6:29 p.m.3 views

ALPINE-CVE-2018-16839

Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service...

9.8CVSS7.4AI score0.05782EPSS
SaveExploits0References1
OSV
OSV
added 2018/10/31 6:29 p.m.3 views

DEBIAN-CVE-2018-16839

Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service...

9.8CVSS7.4AI score0.05782EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2018/10/31 6:0 p.m.4 views

CVE-2018-16839

Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service...

4.3CVSS6.1AI score0.05782EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2018/10/31 6:0 p.m.22 views

CVE-2018-16839

Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service...

4.3CVSS9.5AI score0.05782EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2018/10/31 6:0 p.m.40 views

CVE-2018-16839

Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service...

9.8CVSS7.3AI score0.05782EPSS
SaveExploits0
CVE
CVE
added 2018/10/31 6:0 p.m.303 views

CVE-2018-16839

Curl/libcurl versions 7.33.0–7.61.1 are vulnerable to a SASL authentication buffer overrun that may trigger a denial of service. Root cause: improper handling in the SASL code leads to overrun/overflow. Impact: denial of service; no explicit exploit details provided here. Remediation: upgrade to ...

9.8CVSS9.3AI score0.05782EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder