Lucene search
K

6926 matches found

NVD
NVD
added 2020/06/02 3:15 p.m.21 views

CVE-2019-14038

Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

7.1CVSS7.7AI score0.00186EPSS
Exploits0References1
Prion
Prion
added 2020/06/02 3:15 p.m.19 views

Buffer overflow

Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

3.6CVSS7.6AI score0.00186EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/06/02 3:5 p.m.27 views

CVE-2019-14038

Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

7.7AI score0.00186EPSS
Exploits0References1
CVE
CVE
added 2020/06/02 3:5 p.m.56 views

CVE-2019-14038

CVE-2019-14038 is a buffer over-read in the ADSP parse function caused by a missing check for sufficient data payload in a Qualcomm Snapdragon ADSP command response. Affected are Snapdragon products across multiple lines (Auto, Compute, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, We...

7.1CVSS7.6AI score0.00186EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2020/05/21 12:0 a.m.4 views

PT-2020-6913

Name of the Vulnerable Software and Affected Versions c-ares versions 1 16 1 through 1 17 0 Description The issue is related to a buffer overflow vulnerability in the ares parse soa reply function of the c-ares library, which handles asynchronous DNS requests. This vulnerability can be exploited ...

10CVSS7.3AI score0.00838EPSS
Exploits1References37
Positive Technologies
Positive Technologies
added 2020/05/09 12:0 a.m.2 views

PT-2020-6929

Name of the Vulnerable Software and Affected Versions libcroco versions 0.6.13 and earlier Description The issue is related to the cr parser parse any core function in the cr-parser.c component of the libcroco library, which is used for working with cascading style sheets css2. It is associated...

8.5CVSS6.5AI score0.02319EPSS
Exploits1References58
OSV
OSV
added 2020/05/06 7:32 p.m.23 views

GHSA-RC77-XXQ6-4MFF Command Injection in hot-formula-parser

Versions of hot-formula-parser prior to 3.0.1 are vulnerable to Command Injection. The package fails to sanitize values passed to the parse function and concatenates it in an eval call. If a value of the formula is supplied by user-controlled input it may allow attackers to run arbitrary commands...

9.8CVSS9.7AI score0.02107EPSS
Exploits0References6
OSV
OSV
added 2020/04/30 5:16 p.m.0 views

GHSA-GQGV-6JQ5-JJJ9 Prototype Pollution Protection Bypass in qs

Affected version of qs are vulnerable to Prototype Pollution because it is possible to bypass the protection. The qs.parse function fails to properly prevent an object's prototype to be altered when parsing arbitrary input. Input containing or may bypass the prototype pollution protection and alt...

7.5CVSS7.2AI score0.02395EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2020/04/30 12:0 a.m.9 views

PT-2020-3603 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.4.1 WordPress versions 5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33 Description: In affected versions of WordPress, some priva...

9.8CVSS7.3AI score0.4375EPSS
Exploits16References74
RedHat Linux
RedHat Linux
added 2020/04/28 3:44 p.m.3 views

LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp

There is a stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact...

8.8CVSS7.8AI score0.0207EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2020/04/28 3:34 p.m.8 views

liblouis: Stack-based buffer overflow in compileTranslationTable.c

Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440...

8.8CVSS5.9AI score0.03236EPSS
Exploits0References4
Samba
Samba
added 2020/04/28 12:0 a.m.81 views

LDAP Denial of Service (stack overflow) in

Description LDAP is encoded as ASN.1, and LDAP filters are defined recursively as Filter ::= CHOICE and 0 SET OF Filter, or 1 SET OF Filter, not 2 Filter, This recursion is mirrored in Samba's recursive decent parser, which consumes around 600 bytes of stack per filter sent by the client. In Samb...

7.5CVSS7.6AI score0.03455EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2020/04/23 3:33 a.m.19 views

CVE-2020-11958

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme...

6.8CVSS4.5AI score0.01656EPSS
Exploits0References3
NVD
NVD
added 2020/04/21 1:15 a.m.11 views

CVE-2020-11958

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme...

7.8CVSS7.7AI score0.01656EPSS
Exploits0References7
OSV
OSV
added 2020/04/21 1:15 a.m.24 views

CVE-2020-11958

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme...

7.8CVSS4.5AI score
Exploits0References7
Prion
Prion
added 2020/04/21 1:15 a.m.15 views

Heap overflow

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme...

6.8CVSS7.6AI score0.01656EPSS
Exploits0References7Affected Software2
OSV
OSV
added 2020/04/21 1:15 a.m.1 views

UBUNTU-CVE-2020-11958

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme...

7.8CVSS6.1AI score0.01656EPSS
Exploits0References5
CVE
CVE
added 2020/04/21 12:37 a.m.111 views

CVE-2020-11958

CVE-2020-11958 affects re2c 1.3. A heap-based buffer overflow in Scanner::fill (parse/scanner.cc) is triggered by a long lexeme. Impact: potential crashes/DoS. Affected component is re2c (dev-util/re2c) 1.3; Gentoo GLSA-202007-28 recommends upgrading to the latest (>= re2c-1.3-r1). NVD data as...

7.8CVSS7.6AI score0.01656EPSS
Exploits0References7Affected Software1
Cvelist
Cvelist
added 2020/04/21 12:37 a.m.21 views

CVE-2020-11958

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme...

7.7AI score0.01656EPSS
Exploits0References7
Debian CVE
Debian CVE
added 2020/04/21 12:37 a.m.23 views

CVE-2020-11958

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme...

7.8CVSS7.7AI score0.01656EPSS
Exploits0
Rows per page
Query Builder