Lucene search
K

6687 matches found

OSV
OSV
added 2016/09/26 2:59 p.m.1 views

DEBIAN-CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

9.8CVSS8.1AI score0.07577EPSS
Exploits2References1
OSV
OSV
added 2016/09/26 2:59 p.m.2 views

UBUNTU-CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

9.8CVSS8AI score0.07577EPSS
Exploits2References4
ATTACKERKB
ATTACKERKB
added 2016/09/26 2:59 p.m.1 views

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

9.8CVSS6.5AI score0.07577EPSS
Exploits2References10
OSV
OSV
added 2016/09/21 2:25 p.m.1 views

DEBIAN-CVE-2016-4302

Heap-based buffer overflow in the parsecodes function in archivereadsupportformatrar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary...

7.8CVSS8.6AI score0.01463EPSS
Exploits2References1
OSV
OSV
added 2016/09/21 2:25 p.m.1 views

ALPINE-CVE-2016-4302

Heap-based buffer overflow in the parsecodes function in archivereadsupportformatrar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary...

7.8CVSS8.3AI score0.01463EPSS
Exploits2References1
OSV
OSV
added 2016/09/21 2:25 p.m.1 views

DEBIAN-CVE-2016-4301

Stack-based buffer overflow in the parsedevice function in archivereadsupportformatmtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file...

7.8CVSS9.1AI score0.01847EPSS
Exploits2References1
ATTACKERKB
ATTACKERKB
added 2016/09/21 2:25 p.m.1 views

CVE-2016-4302

Heap-based buffer overflow in the parsecodes function in archivereadsupportformatrar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary...

7.8CVSS6.4AI score0.01463EPSS
Exploits2References13
Prion
Prion
added 2016/09/21 2:25 p.m.23 views

Stack overflow

Stack-based buffer overflow in the parsedevice function in archivereadsupportformatmtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file...

6.8CVSS8.4AI score0.01847EPSS
Exploits2References8Affected Software1
OSV
OSV
added 2016/09/21 2:25 p.m.0 views

UBUNTU-CVE-2016-4301

Stack-based buffer overflow in the parsedevice function in archivereadsupportformatmtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file...

7.8CVSS7.8AI score0.01847EPSS
Exploits2References5
Vulnerability Lab
Vulnerability Lab
added 2016/09/07 12:0 a.m.26 views

Parse HTTP X-Forwarded Header Attack Redirect

Document Title: =============== Parse HTTP X-Forwarded Header Attack Redirect References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1944 PoC Video: https://www.youtube.com/watch?v=gpYe-hun8Xk Vulnerability Magazine:...

7.1AI score
Exploits0
Vulnerability Lab
Vulnerability Lab
added 2016/09/06 12:0 a.m.18 views

Parse HTTP X-Forwarded Header Attack Redirect

Document Title: =============== Parse HTTP X-Forwarded Header Attack Redirect References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1944 PoC Video: https://www.youtube.com/watch?v=gpYe-hun8Xk Vulnerability Magazine:...

7.4AI score
Exploits0
OSV
OSV
added 2016/08/19 9:59 p.m.1 views

ALPINE-CVE-2016-6254

Heap-based buffer overflow in the parsepacket function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted network packet...

9.1CVSS8.3AI score0.10839EPSS
Exploits0References1
OSV
OSV
added 2016/08/19 9:59 p.m.1 views

DEBIAN-CVE-2016-6254

Heap-based buffer overflow in the parsepacket function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted network packet...

9.1CVSS8.3AI score0.10839EPSS
Exploits0References1
OSV
OSV
added 2016/08/19 9:59 p.m.0 views

UBUNTU-CVE-2016-6254

Heap-based buffer overflow in the parsepacket function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted network packet...

9.1CVSS7.9AI score0.10839EPSS
Exploits0References3
OSV
OSV
added 2016/08/18 12:0 a.m.0 views

UBUNTU-CVE-2016-6835

The vmxnettxpktparseheaders function in hw/net/vmxnettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service buffer over-read by leveraging failure to check IP header length...

6CVSS6.7AI score0.00072EPSS
Exploits0References5
CNVD
CNVD
added 2016/08/03 12:0 a.m.2 views

collectd 'parse_packet()' function heap buffer overflow vulnerability

collectd is a daemon process used to collect system performance and provide a mechanism for storing different values in various storage methods. The collectd 'parsepacket' function is vulnerable to a heap buffer overflow vulnerability due to the program incorrectly handling incoming network...

9.1CVSS8AI score0.10839EPSS
Exploits0References1
OSV
OSV
added 2016/07/11 1:59 a.m.2 views

CVE-2016-3755

decoder/ih264dparsepslice.c in mediaserver in Android 6.x before 2016-07-01 does not properly select concealment frames, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28470138...

7.5CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2016/06/30 5:59 p.m.2 views

DEBIAN-CVE-2016-5301

The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast...

7.5CVSS7AI score0.01385EPSS
Exploits0References1
OSV
OSV
added 2016/06/30 5:59 p.m.0 views

UBUNTU-CVE-2016-5301

The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast...

7.5CVSS7.1AI score0.01385EPSS
Exploits0References3
OSV
OSV
added 2016/06/13 7:59 p.m.1 views

DEBIAN-CVE-2016-4579

Libksba before 1.3.4 allows remote attackers to cause a denial of service out-of-bounds read and crash via unspecified vectors, related to the "returned length of the object from ksbaberparsetl."...

7.5CVSS7.6AI score0.01327EPSS
Exploits0References1
Rows per page
Query Builder