Lucene search
+L

9000 matches found

OSV
OSV
•added 2024/05/21 3:15 p.m.•5 views

DEBIAN-CVE-2021-47257

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: fix null deref in parse dev addr Fix a logic error that could result in a null deref if the user sets the mode incorrectly for the given addr type...

5.5CVSS5.7AI score0.00226EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/21 3:15 p.m.•17 views

UBUNTU-CVE-2021-47257

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: fix null deref in parse dev addr Fix a logic error that could result in a null deref if the user sets the mode incorrectly for the given addr type...

5.5CVSS6.4AI score0.00226EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
•added 2024/05/21 2:19 p.m.•24 views

CVE-2021-47257 net: ieee802154: fix null deref in parse dev addr

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: fix null deref in parse dev addr Fix a logic error that could result in a null deref if the user sets the mode incorrectly for the given addr type...

6.8AI score0.00226EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2024/05/21 2:19 p.m.•37 views

CVE-2021-47257 net: ieee802154: fix null deref in parse dev addr

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: fix null deref in parse dev addr Fix a logic error that could result in a null deref if the user sets the mode incorrectly for the given addr type...

6.4AI score0.00226EPSS
SaveExploits0References7
OSV
OSV
•added 2024/05/21 9:53 a.m.•21 views

CLSA-2024-1716272110 ncurses: Fix of CVE-2023-50495

CVE-2023-50495: check return value of ncsavestr from upstream patch 20230424, add validity checks in ncparseentry from upstream patch 20170826...

6.5CVSS6.6AI score0.00954EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/21 12:00 a.m.•2 views

CVE-2021-47257: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: fix null deref in parse dev addr Fix a logic error that could result in a null deref if the user sets the mode incorrectly for the given addr type...

5.5CVSS6.9AI score0.00226EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/21 12:00 a.m.•18 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a mac80211 module restriction to inject vhtmcs/nss in ieee80211parsetxradiotap...

5.5CVSS6.3AI score0.0024EPSS
SaveExploits0References9
OSV
OSV
•added 2024/05/20 6:31 p.m.•76 views

GHSA-5F97-H2C2-826Q json-schema-ref-parser Prototype Pollution issue

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions...

8.1CVSS7AI score0.00805EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/05/20 6:31 p.m.•54 views

json-schema-ref-parser Prototype Pollution issue

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions...

8.1CVSS8.1AI score0.00805EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2024/05/20 6:15 p.m.•48 views

CVE-2024-29651

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions...

8.1CVSS7.4AI score0.00805EPSS
SaveExploits0References1
Mend
Mend
•added 2024/05/20 5:15 p.m.•4 views

CVE-2024-29651

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle", "parse", "resolve", "dereference functions...

9.2CVSS0.00805EPSS
SaveExploits0References4
CVE
CVE
•added 2024/05/20 5:15 p.m.•172 views

CVE-2024-29651

The @apidevtools/json-schema-ref-parser Node.js module (versions v.11.0.0 and v.11.1.0 ) is vulnerable to a Prototype Pollution flaw. Inadequate input validation in the bundle(), parse(), resolve(), and dereference() functions allows a remote attacker to modify Object.prototype properties via __p...

8.1CVSS7.7AI score0.00805EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/20 12:00 a.m.•8 views

PT-2024-22951

Name of the Vulnerable Software and Affected Versions json-schema-ref-parser versions 11.0.0 through 11.1.0 Description A Prototype Pollution issue in API Dev Tools allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions. Recommendations For versio...

8.1CVSS6.5AI score0.00805EPSS
SaveExploits0References8
Amazon
Amazon
•added 2024/05/20 12:00 a.m.•22 views

Medium: kernel

Issue Overview: A flaw was found in the smb client in the Linux kernel. A potential out-of-bounds error was seen in the smb2parsecontexts function. Validate offsets and lengths before dereferencing create contexts in smb2parsecontexts. CVE-2023-52434 In the Linux kernel, the following vulnerabili...

8CVSS5.7AI score0.0102EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/20 12:00 a.m.•11 views

CVE-2024-29651: Improperly Controlled Modification of Object Prototype Attributes

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions...

8.1CVSS6.5AI score0.00805EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/16 6:30 p.m.•52 views

GHSA-3HVJ-2783-34X2 njwt Prototype Pollution vulnerability

njwt up to v0.4.0 was discovered to contain a prototype pollution in the Parser.prototype.parse method...

8.7CVSS5.8AI score0.00488EPSS
SaveExploits0References5
Ubuntu
Ubuntu
•added 2024/05/16 1:40 p.m.•55 views

USN-6773-1: .NET vulnerabilities

It was discovered that .NET did not properly handle memory in it's Double Parse routine. An attacker could possibly use this issue to achieve remote code execution. CVE-2024-30045 It was discovered that .NET did not properly handle the usage of a shared resource. An attacker could possibly use th...

6.3CVSS7AI score0.01688EPSS
SaveExploits0
OSV
OSV
•added 2024/05/16 1:40 p.m.•41 views

USN-6773-1 dotnet7, dotnet8 vulnerabilities

It was discovered that .NET did not properly handle memory in it's Double Parse routine. An attacker could possibly use this issue to achieve remote code execution. CVE-2024-30045 It was discovered that .NET did not properly handle the usage of a shared resource. An attacker could possibly use th...

6.3CVSS7AI score0.01688EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/05/16 12:00 a.m.•18 views

njwt 安全漏洞

njwt is the cleanest JSON Web Token JWT library for Node.js developers. A security vulnerability exists in njwt version v0.4.0 and earlier, which stems from the inclusion of a prototype contamination vulnerability found in the Parser.prototype.parse method...

5.9CVSS6.5AI score0.00488EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/05/16 12:00 a.m.•13 views

The vulnerability of the `taprio_parse_tc_entry()` function in the `net/sched/sch_taprio.c` module, part of the network scheduling subsystem of the Linux operating system, allows a attacker to trigger a service failure.

The vulnerability of the taprioparsetcentry function in the net/sched/schtaprio.c module, part of the network scheduling subsystem in the Linux operating system’s kernel, is related to incorrect comparisons. Exploiting this vulnerability could allow an attacker to cause service failures...

5.5CVSS6.2AI score0.00285EPSS
SaveExploits0References16Affected Software3
Rows per page
Query Builder