Lucene search
+L

8983 matches found

OSV
OSV
•added 2022/04/29 11:15 a.m.•71 views

DEBIAN-CVE-2022-1534

Buffer Over-read at parserawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash...

7.1CVSS6.5AI score0.00347EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/04/29 12:00 a.m.•23 views

Libmobi 缓冲区错误漏洞

Libmobi is a C library . It is used to process Mobipocket/Kindle MOBI e-book format documents. A security vulnerability in parserawml.c:1416 in the GitHub library Libmobi before 0.11, which stems from a buffer error, can be exploited by an attacker to read sensitive information or cause a crash...

7.1CVSS7AI score0.00347EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/04/29 12:00 a.m.•3 views

PT-2022-13937

Name of the Vulnerable Software and Affected Versions libmobi versions prior to 0.11 Description The issue is a buffer over-read that occurs at parse rawml.c:1416 in the GitHub repository bfabiszewski/libmobi. This bug causes the program to read data past the end of the intended buffer, which can...

7.1CVSS0.00347EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2022/04/29 12:00 a.m.•16 views

PT-2022-6744 · Unknown +5 · Protobuf-C +5

Name of the Vulnerable Software and Affected Versions: Protobuf-c version 1.4.0 Description: The issue is related to an invalid arithmetic shift via the parse tag and wiretype function in protobuf-c/protobuf-c.c, which can cause a Denial of Service DoS via unspecified vectors. This is also...

7.8CVSS6.8AI score0.55367EPSS
SaveExploits22References39
BDU FSTEC
BDU FSTEC
•added 2022/04/27 12:00 a.m.•14 views

The vulnerability of the phar_parse_tarfile function in the PHP programming language allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the PHP interpreter extension is related to errors in number processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure using a specially created tar archive...

7.5CVSS8.2AI score0.42481EPSS
SaveExploits2References10Affected Software4
Positive Technologies
Positive Technologies
•added 2022/04/25 12:00 a.m.•14 views

PT-2022-13915

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 4.4.2 FFmpeg versions prior to 5.0.1 Description An integer overflow issue was discovered in the g729 parse function located in libavcodec/g729 parser.c when handling a specially crafted file. This issue can be trigger...

8.1CVSS6.4AI score0.00931EPSS
SaveExploits1References73
BDU FSTEC
BDU FSTEC
•added 2022/04/25 12:00 a.m.•12 views

The vulnerability of the phar_parse_metadata function (ext/phar/phar.c) in the PHP programming language allows a attacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the pharparsemetadata function ext/phar/phar.c in the PHP programming language is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to cause service interruptions or potentially other adverse effects...

7.5CVSS7.2AI score0.06655EPSS
SaveExploits1References12Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/04/25 12:00 a.m.•12 views

The vulnerability of the phar_parse_zipfile function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the pharparsezipfile function ext/phar/zip.c in the PHP programming language is related to errors in number processing. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

6.8CVSS7.5AI score0.08799EPSS
SaveExploits0References13Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/04/25 12:00 a.m.•14 views

The vulnerability of the phar_parse_tarfile function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the pharparsetarfile function ext/phar/tar.c in the PHP programming language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

5CVSS7.4AI score0.21256EPSS
SaveExploits1References19Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/04/25 12:00 a.m.•14 views

The vulnerability of the phar_parse_pharfile function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the pharparsepharfile function in the PHP programming language is caused by a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service interruptions...

7.8CVSS6.9AI score0.07681EPSS
SaveExploits0References12Affected Software3
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•3 views

PT-2022-29523

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.17.1 Description A potential issue exists due to a missing of node put in the wcd934x codec parse data function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-30498

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.4.189 Description A general protection fault issue exists in the legacy parse param function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•1 views

PT-2022-30073

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A general protection fault issue exists in the legacy parse param function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•1 views

PT-2022-29831

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.16.18 Description A potential issue exists due to a missing of node put in the wcd934x codec parse data function. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-29758

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A general protection fault issue was discovered in the legacy parse param function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-29438

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A general protection fault issue exists in the legacy parse param function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-30331

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A general protection fault issue was discovered in the legacy parse param function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-30142

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential issue exists due to a missing of node put in wcd934x codec parse data. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

5.7AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/04/20 12:00 a.m.•15 views

The vulnerability in the ext/date/lib/parse_date.c component of the PHP interpreter allows a attacker to compromise the confidentiality of information.

The vulnerability of the ext/date/lib/parsedate.c component of the PHP interpreter involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of sensitive information...

7.8CVSS6.7AI score0.26373EPSS
SaveExploits3References14Affected Software2
Positive Technologies
Positive Technologies
•added 2022/04/19 12:00 a.m.•2 views

PT-2025-8463

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free vulnerability has been identified in the Linux kernel, specifically in the si parse power table function. This issue arises when the allocation of array members fails,...

7.8CVSS5.9AI score0.00284EPSS
SaveExploits0
Rows per page
Query Builder