Lucene search
+L

179 matches found

OSV
OSV
added 2021/12/08 10:15 p.m.11 views

CVE-2021-43539

Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Thunderbird 91.4.0, Firefox...

8.8CVSS8.9AI score
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2021/05/24 12:0 a.m.13 views

PT-2022-4797 · Mariadb +9 · Mariadb +10

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.5.9 and earlier Description: The issue is related to errors in pointer handling, which can cause an application crash when a NULL value is encountered in the aggr variable within the sub select postjoin aggr function. This...

10CVSS7.2AI score0.70561EPSS
SaveExploits120References901
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.9 views

The vulnerability in the implementation of the show_transport_handle() function in Linux operating systems allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the showtransporthandle function in Linux operating systems is related to improper handling of pointers. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.4CVSS6.6AI score0.00711EPSS
SaveExploits1References20Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/12/24 12:0 a.m.10 views

The vulnerability of QEMU’s emulation software, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of QEMU’s emulation software-related hardware lies in the handling of the null pointer. Exploiting this vulnerability can allow an attacker to cause a system failure...

2.9CVSS6.6AI score0.00429EPSS
SaveExploits0References11Affected Software5
RedHat Linux
RedHat Linux
added 2020/11/04 1:47 a.m.19 views

varnish: not clearing pointer between two client requests leads to information disclosure

An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does not clear a pointer between the handling of one client request and the next request within the same connection. This sometimes causes information to be disclosed from the...

7.5CVSS7AI score0.01746EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/08/19 12:0 a.m.8 views

The vulnerability of the Coturn web server, related to the swapping of the zero pointer, allows attackers to trigger a service failure.

The vulnerability of the Coturn web server is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS6.7AI score0.06102EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:0 a.m.7 views

The vulnerability of the emulation software for hardware devices on various platforms, QEMU, allows a hacker to trigger a service failure.

The vulnerability of software for emulating hardware on various platforms under QEMU is related to deficiencies in the handling of zero pointer assignments. Exploiting this vulnerability can allow an attacker to cause a system failure...

3.3CVSS6.6AI score0.00307EPSS
SaveExploits0References6Affected Software4
Cvelist
Cvelist
added 2020/05/12 3:27 p.m.33 views

CVE-2020-5898

In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland. A local user on the Windows client system can send crafted DeviceIoControl requests to \.\urvpndrv device causing the Windows kernel to crash...

5.2AI score0.00261EPSS
SaveExploits0References1
Veracode
Veracode
added 2020/04/01 12:38 a.m.38 views

Denial Of Service (DoS)

squid is vulnerable to denial of service. The vulnerability exists due to incorrect pointer handling when processing ESI Responses which allows an attacker to crash the application via malicious input...

7.5CVSS7.2AI score0.07928EPSS
SaveExploits0References11Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.13 views

The vulnerability of Xen hypervisors, related to the swapping of the zero pointer, allows a attacker to trigger a service failure.

The vulnerability of Xen hypervisors is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

8.8CVSS6.9AI score0.00437EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.6 views

The vulnerability of Samba software, related to the handling of the null pointer, allows a perpetrator to trigger a service failure.

The vulnerability of Samba software is related to the handling of the null pointer. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

6.5CVSS6.7AI score0.02179EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/02/11 12:0 a.m.5 views

The vulnerability of the RouterOS operating system in MikroTik routers, related to the assignment of the zero pointer, allows a hacker to cause a service failure.

The vulnerability of the RouterOS operating system for MikroTik lies in the handling of the zero pointer. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created package...

6.3CVSS5.5AI score
SaveExploits0References1Affected Software1
OSV
OSV
added 2019/12/13 3:15 p.m.6 views

CVE-2019-5290

Huawei S5700 and S6700 have a DoS security vulnerability. Attackers with certain permissions perform specific operations on affected devices. Because the pointer in the program is not processed properly, the vulnerability can be exploited to cause the device to be abnormal...

6.5CVSS6.6AI score0.00634EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/12/05 12:0 a.m.6 views

Huawei S5700 and Huawei S6700 Denial of Service Vulnerabilities

The Huawei S5700 and Huawei S6700 are both enterprise-class switches from Huawei, a Chinese company. A denial of service vulnerability exists in the Huawei S5700 and S6700, which arises from a program's failure to reasonably handle pointers, and can be exploited by an attacker to cause a device...

6.5CVSS6.7AI score0.00634EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/12/04 12:0 a.m.6 views

PT-2019-17561 · Huawei · Huawei S5700 +2

Name of the Vulnerable Software and Affected Versions: Huawei S5700 and S6700 affected versions not specified Description: The issue is related to a DoS security vulnerability. Attackers with certain permissions can perform specific operations on affected devices, exploiting the vulnerability due...

6.5CVSS6.2AI score0.00634EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:0 a.m.8 views

The vulnerability of the SIP protocol implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to trigger a service failure.

The vulnerability of the SIP protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to the handling of the zero pointer. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted SIP packets...

8.6CVSS5.5AI score0.01984EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2019/09/24 9:16 p.m.29 views

CVE-2019-13527

In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized...

7.6AI score0.05289EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/12/17 12:0 a.m.45 views

Squid 3.x < 3.5.28 / 4.x < 4.0.23 Multiple Denial of Service Vulnerabilities (SQUID-2018:1) (SQUID-2018:2)

According to its banner, the version of Squid running on the remote host is 3.x prior to 3.5.28, or 4.x prior to 4.0.23. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability exists in the ESI response processing component due to incorrect pointer handlin...

7.5CVSS6.6AI score0.12912EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2018/12/17 12:0 a.m.34 views

Squid 3.1.12.2 <= 3.1.x <= 3.1.23 / 3.2.0.8 <= 3.2.x <= 3.2.14 / 3.3.x / 3.4.x / 3.5.x <= 3.5.27 / 4.x < 4.0.13 Denial of Service Vulnerability (SQUID-2018:3)

According to its banner, the version of Squid running on the remote host is 3.1.x after or equal to 3.1.12.2 and prior or equal to 3.1.23, 3.2.x after or equal to 3.2.0.8 and prior or equal to 3.2.0.8, 3.3.x, 3.4.x, 3.5.x prior or equal to 3.5.27, or 4.x prior to 4.0.13. It is, therefore, affecte...

5.9CVSS6.5AI score0.08611EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/09/20 12:0 a.m.41 views

Amazon Linux AMI : squid (ALAS-2018-1081)

The Squid Software Foundation Squid HTTP Caching Proxy contains a NULL pointer Dereference vulnerability in HTTP Response X-Forwarded-For header processing that can result in Denial of Service to all clients of the proxy. This attack appear to be exploitable via Remote HTTP server responding with...

7.5CVSS6.6AI score0.12912EPSS
SaveExploits0References3
Rows per page
Query Builder