Lucene search
+L

7425 matches found

CNVD
CNVD
added 2018/12/07 12:0 a.m.7 views

Google Android Double Release Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A double-release vulnerability exists in the MasteringMetadata::Parse of the mkvparser.cc file in Android, which can be exploited by remote attackers to execute code...

9.3CVSS8.4AI score0.01089EPSS
SaveExploits0References1
NVD
NVD
added 2018/12/06 2:29 p.m.24 views

CVE-2018-9553

In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1...

9.3CVSS8.5AI score0.01089EPSS
SaveExploits0References2
OSV
OSV
added 2018/12/06 2:29 p.m.8 views

CVE-2018-9553

In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1...

7.8CVSS6.3AI score0.01089EPSS
SaveExploits0References2
Prion
Prion
added 2018/12/06 2:29 p.m.20 views

Double free

In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1...

9.3CVSS7.8AI score0.01089EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/12/06 2:0 p.m.48 views

CVE-2018-9553

CVE-2018-9553 : In MasteringMetadata::Parse of mkvparser.cc, a double-free can occur due to an insecure default value, enabling remote code execution. Affected: Android devices/versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9. Exploitation requires user interaction (local attack). Evidence ties this CVE ...

9.3CVSS7.9AI score0.01089EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/12/06 2:0 p.m.28 views

CVE-2018-9553

In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1...

8AI score0.01089EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/11/27 12:0 a.m.46 views

dcraw floating point exception vulnerability (CNVD-2019-00790)

dcraw is a U.S. software developer David J. Coffin developed a set of open source for the camera to shoot the RAW film into PPM or TIFF format picture tool . A floating-point exception vulnerability exists in parsetiffifd in dcraw 9.28 and earlier versions, which can be exploited to cause an...

5.5CVSS6.3AI score0.00925EPSS
SaveExploits0References1
Prion
Prion
added 2018/11/26 8:29 p.m.24 views

Code injection

A floating point exception in parsetiffifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code...

4.3CVSS5.6AI score0.00925EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2018/11/26 8:29 p.m.12 views

UBUNTU-CVE-2018-19567

A floating point exception in parsetiffifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code...

5.5CVSS6.5AI score0.00925EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2018/11/16 9:45 p.m.167 views

Pastego - Scrape/Parse Pastebin Using GO And Expression Grammar (PEG)

Scrape/Parse Pastebin using GO and grammar expression PEG. Installation $ go get -u github.com/edoz90/pastego Usage Search keywords are case sensitive pastego -s "password,keygen,PASSWORD" You can use boolean operators to reduce false positive pastego -s "quake && earthquake, password && php ||...

7.7AI score
SaveExploits0References6
CNVD
CNVD
added 2018/11/16 12:0 a.m.8 views

Google Android Buffer Overflow Vulnerability (CNVD-2019-27587)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the ixheaacdmpsparse.c file of ixheaacdmpsgetstridemap in the Android 9 release, which stems from a lack of boundary detection in the...

8.8CVSS9.6AI score0.00727EPSS
SaveExploits0References1
OSV
OSV
added 2018/11/14 6:29 p.m.9 views

CVE-2018-9347

In function SMFParseMetaEvent of file eassmf.c there is incorrect input validation causing an infinite loop. This could lead to a remote temporary DoS with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1...

6.5CVSS5.9AI score0.00806EPSS
SaveExploits0References3
OSV
OSV
added 2018/11/12 7:29 p.m.6 views

DEBIAN-CVE-2018-19211

In ncurses 6.1, there is a NULL pointer dereference at function ncparseentry in parseentry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious character ' in name or alias field" detection...

5.5CVSS7AI score0.00856EPSS
SaveExploits1References1
OSV
OSV
added 2018/11/12 7:29 p.m.5 views

UBUNTU-CVE-2018-19211

In ncurses 6.1, there is a NULL pointer dereference at function ncparseentry in parseentry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious character ' in name or alias field" detection...

5.5CVSS6.3AI score0.00856EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2018/11/02 12:0 a.m.55 views

F5 Networks BIG-IP : Multiple Wireshark vulnerabilities (K34035645)

CVE-2018-7320 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by validating operand offsets. CVE-2018-7321 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a lar...

7.5CVSS7.3AI score0.02702EPSS
SaveExploits3References24
OSV
OSV
added 2018/10/29 12:29 p.m.8 views

ALPINE-CVE-2018-18751

An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in pogramparse in po-gram-gen.y, as demonstrated by lt-msgfmt...

9.8CVSS7.2AI score0.04257EPSS
SaveExploits1References1
OSV
OSV
added 2018/10/02 7:29 p.m.12 views

CVE-2018-9473

In ihevcdparseseipayload of ihevcdparseheaders.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Androi...

7.8CVSS6.4AI score0.01505EPSS
SaveExploits0References3
OSV
OSV
added 2018/10/01 8:29 a.m.6 views

CVE-2018-17847

The html package aka x/net/html through 2018-09-25 in Go mishandles , leading to a "panic: runtime error" index out of range in nodeStack.pop in node.go, called from parser.clearActiveFormattingElements, during an html.Parse call...

7.5CVSS5.8AI score0.02832EPSS
SaveExploits2References3
OSV
OSV
added 2018/10/01 8:29 a.m.6 views

CVE-2018-17848

The html package aka x/net/html through 2018-09-25 in Go mishandles , leading to a "panic: runtime error" index out of range in insertionModeStack.pop in node.go, called from inHeadIM, during an html.Parse call...

7.5CVSS5.8AI score0.02832EPSS
SaveExploits2References3
Veracode
Veracode
added 2018/10/01 7:49 a.m.28 views

Prototype Pollution

merge is vulnerable to prototype pollution. Properties of the Object prototype can be added or modified via JSON.parse, causing a denial of service condition or possibly remote code execution depending on the application...

7.5CVSS8.1AI score0.01678EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder