Lucene search
+L

7372 matches found

OSV
OSV
added 2017/10/05 1:29 a.m.6 views

UBUNTU-CVE-2017-15020

dwarf1.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, mishandles pointers, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted ELF file, related to parsedie and...

7.8CVSS7.2AI score0.02165EPSS
SaveExploits0References4
OSV
OSV
added 2017/09/22 7:29 a.m.7 views

UBUNTU-CVE-2017-14637

In sam2p 0.49.3, there is an invalid read of size 2 in the parsergb function in inxpm.cpp. However, this can also cause a write to an illegal address...

9.8CVSS7.3AI score0.01694EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2017/09/20 12:0 a.m.14 views

PT-2017-3151 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.6 Description: The issue is related to the cdc parse cdc header function in drivers/usb/core/message.c, which allows local users to cause a denial of service, including out-of-bounds read and system crash, ...

8.8CVSS8.2AI score0.92621EPSS
SaveExploits92References348
Snyk
Snyk
added 2017/09/17 11:29 p.m.3 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry function in XRef.cc via a crafted PDF document. Remediation A fix was pushed into the master branch but not yet published. References...

5.5CVSS6.8AI score0.01061EPSS
SaveExploits1References2
ossfuzz
ossfuzz
added 2017/09/17 8:0 p.m.22 views

dlplibs: Index-out-of-bounds in WKS4Chart::sendCharts

Detailed report: https://oss-fuzz.com/testcase?key=5151574194126848 Project: dlplibs Fuzzer: libFuzzerdlplibswksfuzzer Fuzz target binary: wksfuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: WKS4Chart::sendCharts WKS4Parser::par...

6.7AI score
SaveExploits0Affected Software1
OSV
OSV
added 2017/09/17 6:29 p.m.12 views

ALPINE-CVE-2017-14501

An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader...

6.5CVSS6.8AI score0.02147EPSS
SaveExploits0References1
OSV
OSV
added 2017/09/17 6:29 p.m.6 views

DEBIAN-CVE-2017-14501

An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader...

6.5CVSS6.8AI score0.02147EPSS
SaveExploits0References1
OSV
OSV
added 2017/09/17 12:0 a.m.3 views

UBUNTU-CVE-2017-14501

An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader...

6.5CVSS6.7AI score0.02147EPSS
SaveExploits0References3
OSV
OSV
added 2017/09/14 6:29 a.m.4 views

DEBIAN-CVE-2017-12987

The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-80211.c:parseelements...

9.8CVSS9.7AI score0.03284EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/09/14 12:0 a.m.6 views

Tcpdump IEEE 802.11 parser buffer overflow vulnerability (CNVD-2017-27744)

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.IEEE 802.11 parser is one of the IEEE 802.11 standard parsers. A...

9.8CVSS9.4AI score0.03354EPSS
SaveExploits0References1
OSV
OSV
added 2017/09/13 12:0 a.m.4 views

UBUNTU-CVE-2017-13008

The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-80211.c:parseelements...

9.8CVSS7AI score0.03354EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2017/09/08 1:30 p.m.294 views

Vision2 - Nmap's XML result parse and NVD's CPE correlation to search CVE

Nmap's XML result parse and NVD's CPE correlation to search CVE. You can use that to find public vulnerabilities in services... Nmap\s XML result parser and NVD's CPE correlation to search CVE Example: python vision2.py -f resultscan.xml -l 3 -o txt Coded by Mthbernades and CoolerVoid -...

9.8CVSS9.1AI score0.67718EPSS
SaveExploits25References1
CNVD
CNVD
added 2017/09/06 12:0 a.m.8 views

Gdk-Pixbuf tiff_image_parse function integer overflow vulnerability

Gdk-Pixbuf is a toolkit for image loading and pixel buffer processing. An integer overflow vulnerability exists in the tiffimageparse function in Gdk-Pixbuf version 2.36.6. A remote attacker can exploit this vulnerability to execute code by sending a file or URL...

8.8CVSS8.5AI score0.02612EPSS
SaveExploits2References1
OSV
OSV
added 2017/09/05 6:29 p.m.4 views

DEBIAN-CVE-2017-2870

An exploitable integer overflow vulnerability exists in the tiffimageparse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability...

7.8CVSS8.2AI score0.02612EPSS
SaveExploits2References1
Debian CVE
Debian CVE
added 2017/09/05 6:0 p.m.40 views

CVE-2017-2870

An exploitable integer overflow vulnerability exists in the tiffimageparse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability...

8.8CVSS8.5AI score0.02612EPSS
SaveExploits2
OSV
OSV
added 2017/09/05 12:0 a.m.10 views

UBUNTU-CVE-2017-2870

An exploitable integer overflow vulnerability exists in the tiffimageparse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability...

8.8CVSS7.5AI score0.02612EPSS
SaveExploits2References3
OSV
OSV
added 2017/08/29 6:29 a.m.5 views

UBUNTU-CVE-2017-13731

There is an illegal address access in the function postprocesstermcap in parseentry.c in ncurses 6.0 that will lead to a remote denial of service attack...

6.5CVSS6.8AI score0.02906EPSS
SaveExploits1References3
OSV
OSV
added 2017/08/29 6:29 a.m.4 views

DEBIAN-CVE-2017-13731

There is an illegal address access in the function postprocesstermcap in parseentry.c in ncurses 6.0 that will lead to a remote denial of service attack...

6.5CVSS9AI score0.02906EPSS
SaveExploits1References1
OSV
OSV
added 2017/08/18 9:29 p.m.3 views

DEBIAN-CVE-2017-12961

There is an assertion abort in the function parseattributes in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service...

7.5CVSS7AI score0.01262EPSS
SaveExploits0References1
OSV
OSV
added 2017/08/18 9:29 p.m.5 views

UBUNTU-CVE-2017-12961

There is an assertion abort in the function parseattributes in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service...

7.5CVSS7.2AI score0.01262EPSS
SaveExploits0References3
Rows per page
Query Builder