Lucene search
K

520 matches found

vulnersOsv
vulnersOsv
added 2021/05/10 6:37 p.m.2 views

@amitport/koangular-users (=0.0.0), @antimatter-studios/dredd (>=14.1.0 <=15.0.11) +202 more potentially affected by CVE-2020-7709 via json-pointer (>=0.0.4 <=0.6.0)

json-pointer NPM version =0.0.4, =14.1.0, =0.0.1, =0.0.2, =0.0.1, =1.2.6, =2.7.2, =1.0.0, =0.0.0-development, =1.0.0, =2.21.3, =0.1.0, =1.0.1 - ajv-moment =1.0.0 and more Source cves: CVE-2020-7709 Source advisory: OSV:GHSA-7MG4-W3W5-X5PC...

7.2CVSS6.7AI score0.01029EPSS
Exploits1
CNVD
CNVD
added 2021/04/30 12:0 a.m.1 views

Null Pointer Reference Vulnerability in MiniWebBrowser.ocx Control of CenturyStar Configuration Software

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. is a real-time human-machine interface utility program generator, consisting of the CSMaker development system and CSViewer runtime system, the CSMaker development system is th...

7.2AI score
Exploits0
CNVD
CNVD
added 2021/04/12 12:0 a.m.3 views

Various Huawei products pointer double release vulnerability

Huawei CloudEngine 6800 and others are products of Huawei, China.CloudEngine 6800 is a 6800 series 10 Gigabit Ethernet switch for data centers.Huawei CloudEngine 12800 is a 12800 series data center switch.Huawei Cloudengine 5800 is a 5800 series data center switch. A pointer double-release...

7.5CVSS6.7AI score0.00182EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/03/25 12:0 a.m.3 views

Zetetic Sqlcipher 代码问题漏洞

Zetetic Sqlcipher is a SqlLite-based database from Zetetic USA. The database provides a SqlLite-like access API with numerous added security elements. A code issue vulnerability exists in Zetetic SQLCipher version 4.x prior to version 4.4.3, which stems from a null pointer dereference. An attacke...

7.5CVSS7.5AI score0.00603EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:0 a.m.3 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the manipulation of the null pointer. This vulnerability allows attackers to cause service interruptions.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the use of a null pointer. Exploiting these vulnerabilities can allow an attacker to cause service interruptions...

6.5CVSS7AI score0.00695EPSS
Exploits0References3
NVD
NVD
added 2021/02/23 4:15 a.m.9 views

CVE-2020-27819

An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files. A NULL pointer dereference vulnerability exists when parsing XLS cells in libxls/xls2csv.c:199. It could allow a remote attacker to cause a denial of service via crafted XLS file...

5.5CVSS0.00269EPSS
Exploits0References1
CNVD
CNVD
added 2021/01/13 12:0 a.m.1 views

JT2Go and Teamcenter Visualization Untrustworthy Pointer Vulnerability

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with existing JT, VFZ, CGM, TIF data.Teamcenter visualization software enables companies to enhance their Product Lifecycle Management PLM environments.The software gives business users access to documents in a...

8.8CVSS7.2AI score0.0101EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.5 views

Siemens Jt2go和Siemens Teamcenter Visualization 代码问题漏洞

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with existing JT, VFZ, CGM, TIF data.Teamcenter visualization software enables companies to enhance their Product Lifecycle Management PLM environments.The software gives business users access to documents in a...

8.8CVSS7.3AI score0.0101EPSS
Exploits0References11
UbuntuCve
UbuntuCve
added 2020/10/14 2:15 p.m.23 views

CVE-2020-9746

Adobe Flash Player version 32.0.0.433 and earlier are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default...

9.3CVSS7.4AI score0.02581EPSS
Exploits0References2
Prion
Prion
added 2020/10/14 2:15 p.m.14 views

Null pointer dereference

Adobe Flash Player version 32.0.0.433 and earlier are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default...

9.3CVSS8.7AI score0.02581EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/14 12:0 a.m.1 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the use of a null pointer pointer, which allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the use of a null pointer. Exploiting these vulnerabilities can allow an attacker...

10CVSS8.3AI score0.02789EPSS
Exploits0References3
Veracode
Veracode
added 2020/10/06 5:52 a.m.22 views

Prototype Pollution

json-pointer is vulnerable to prototype pollution. The vulnerability exists as it does not restrict the proto, constructor, and prototype header values to be set through the API...

7.2CVSS1.7AI score0.01029EPSS
Exploits1References4Affected Software1
CNVD
CNVD
added 2020/09/27 12:0 a.m.1 views

Null Pointer Vulnerability in INFRAWARE POLARIS OFFICE

POLARIS OFFICE is a mobile office software developed for mobile terminals by the Korean company INFRAWARE. INFRAWARE POLARIS OFFICE suffers from a null pointer vulnerability that can be exploited by attackers to cause a denial of service attack...

6.7AI score
Exploits0
OSV
OSV
added 2020/08/13 3:15 a.m.35 views

CVE-2020-16306

A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed in v9.51...

5.5CVSS6.4AI score
Exploits0References6
OSV
OSV
added 2020/08/13 3:15 a.m.1 views

ALPINE-CVE-2020-16293

A null pointer dereference vulnerability in composegroupnonknockoutnonblendisolatedallmaskcommon in base/gxblend.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

5.5CVSS6.6AI score0.00633EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2020/08/13 2:9 a.m.38 views

CVE-2020-16306

A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed in v9.51...

5.5CVSS5.8AI score0.01771EPSS
Exploits1
CNVD
CNVD
added 2020/07/08 12:0 a.m.2 views

Multiple Mitsubishi Electric Products Null Pointer Reference Vulnerability

Mitsubishi Electric GT27 and others are a GOT2000 series graphic operation terminal from Mitsubishi Electric Japan. A null pointer reference vulnerability exists in CoreOS Y and prior versions in the Mitsubishi Electric GT27, GT25, and GT23 GOT2000 series, which can be exploited by an attacker to...

7.5CVSS6.7AI score0.00265EPSS
Exploits0References1
OSV
OSV
added 2020/06/25 10:15 p.m.0 views

CVE-2020-9610

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have a null pointer vulnerability. Successful exploitation could lead to application denial-of-service...

5.5CVSS6.1AI score0.00875EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/06/25 9:21 p.m.17 views

CVE-2020-9610

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have a null pointer vulnerability. Successful exploitation could lead to application denial-of-service...

6.7AI score0.00875EPSS
Exploits0References1
CVE
CVE
added 2020/06/17 3:12 p.m.201 views

CVE-2020-14400

CVE-2020-14400 affects LibVNCServer up to version 0.9.12, where Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. Multiple security advisories (e.g., SUSE EulerOS/OpenVAS sources) list this CVE among a set of LibVNCServer issues and indicate fixes in newer relea...

7.5CVSS7.2AI score0.02462EPSS
Exploits0References9Affected Software1
Rows per page
Query Builder