Lucene search
+L

8984 matches found

OSV
OSV
•added 2017/02/15 3:59 p.m.•11 views

UBUNTU-CVE-2015-8979

Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and earlier allows remote attackers to cause a denial of service segmentation fault via a long string sent to TCP port 4242...

7.5CVSS7.4AI score0.03906EPSS
SaveExploits2References5
CNVD
CNVD
•added 2017/02/10 12:00 a.m.•8 views

GStreamer gst_avi_demux_parse_ncdt function denial of service vulnerability

GStreamer is an open source multimedia framework. GStreamer has a security vulnerability in the gst-plugins-good/gst/avi/gstavidemux.c/gstavidemuxparsencdt function, which causes a denial of service for remote attackers...

7.5CVSS6.9AI score0.0382EPSS
SaveExploits0References1
OSV
OSV
•added 2017/02/09 3:59 p.m.•10 views

DEBIAN-CVE-2017-5840

The qtdemuxparsesamples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving the current stts index...

7.5CVSS7.3AI score0.04717EPSS
SaveExploits0References1
OSV
OSV
•added 2017/02/09 3:59 p.m.•13 views

ALPINE-CVE-2017-5840

The qtdemuxparsesamples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving the current stts index...

7.5CVSS6.8AI score0.04717EPSS
SaveExploits0References1
OSV
OSV
•added 2017/02/09 12:00 a.m.•16 views

UBUNTU-CVE-2017-5840

The qtdemuxparsesamples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving the current stts index...

7.5CVSS7.2AI score0.04717EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2017/02/09 12:00 a.m.•2 views

PT-2017-16710

Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-bad affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and crash. This is achieved through vectors involving PSM parsing,...

7.5CVSS0.04426EPSS
SaveExploits0References128
OSV
OSV
•added 2017/01/28 1:59 a.m.•10 views

DEBIAN-CVE-2017-5483

The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse...

9.8CVSS7.7AI score0.03198EPSS
SaveExploits0References1
OSV
OSV
•added 2017/01/28 1:59 a.m.•12 views

ALPINE-CVE-2017-5483

The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse...

9.8CVSS7.7AI score0.03198EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2017/01/27 12:00 a.m.•3 views

PT-2017-9420

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.0 Description The issue is related to a buffer overflow in the Juniper PPPoE ATM parser, specifically in the juniper parse header function within print-juniper.c. This overflow can occur in versions of tcpdump...

9.8CVSS0.05504EPSS
SaveExploits0References434
OSV
OSV
•added 2017/01/27 12:00 a.m.•12 views

UBUNTU-CVE-2017-5483

The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse...

9.8CVSS7.6AI score0.03198EPSS
SaveExploits0References4
OSV
OSV
•added 2017/01/27 12:00 a.m.•10 views

UBUNTU-CVE-2016-7929

The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniperparseheader...

9.8CVSS7.6AI score0.03198EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2017/01/24 12:00 a.m.•2 views

PT-2017-2398

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.30 PHP versions 7.0.x prior to 7.0.15 Description The issue is related to an off-by-one error in the phar parse pharfile function. This error can be exploited by remote attackers to cause a denial of service memory...

9.8CVSS0.07827EPSS
SaveExploits0References77
NVD
NVD
•added 2017/01/23 9:59 p.m.•33 views

CVE-2015-8858

The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service CPU consumption via crafted input in a parse call, aka a "regular expression denial of service ReDoS."...

7.8CVSS7.7AI score0.02358EPSS
SaveExploits1References3
OSV
OSV
•added 2017/01/23 9:59 p.m.•14 views

UBUNTU-CVE-2015-8858

The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service CPU consumption via crafted input in a parse call, aka a "regular expression denial of service ReDoS."...

7.5CVSS7.1AI score0.02358EPSS
SaveExploits1References2
OSV
OSV
•added 2017/01/23 9:59 p.m.•16 views

DEBIAN-CVE-2015-8858

The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service CPU consumption via crafted input in a parse call, aka a "regular expression denial of service ReDoS."...

7.5CVSS6.7AI score0.02358EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2017/01/23 9:00 p.m.•74 views

CVE-2015-8858

The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service CPU consumption via crafted input in a parse call, aka a "regular expression denial of service ReDoS."...

7.8CVSS7.3AI score0.02358EPSS
SaveExploits1
Mend
Mend
•added 2017/01/23 9:00 p.m.•3 views

CVE-2015-8858

The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service CPU consumption via crafted input in a parse call, aka a "regular expression denial of service ReDoS."...

8.7CVSS0.02358EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2017/01/23 12:00 a.m.•5 views

PT-2017-4098

Name of the Vulnerable Software and Affected Versions uglify-js versions prior to 2.6.0 Description The issue allows attackers to cause a denial of service CPU consumption via crafted input in a parse call, also known as a "regular expression denial of service ReDoS". This can be exploited by...

7.8CVSS0.02358EPSS
SaveExploits1References17
OSS-Fuzz
OSS-Fuzz
•added 2017/01/20 1:00 a.m.•27 views

libass: Attempting free in parse_events

Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5420800962199552 Project: libass Fuzzer: libFuzzerlibassfuzzer Fuzz target binary: libassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Attempting free Crash...

7AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2017/01/20 12:00 a.m.•2 views

PT-2017-4051

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.3 Description The issue is related to the gst avi demux parse ncdt function in the gst-plugins-good plugin of the GStreamer multimedia framework. It allows remote attackers to cause a denial of service due to a...

7.8CVSS0.04717EPSS
SaveExploits0References123
Rows per page
Query Builder