Lucene search
K

540 matches found

CNNVD
CNNVD
added 2024/01/02 12:0 a.m.1 views

YASM Security Vulnerabilities

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in YASM version 1.3.0.86.g9def, which stems from a Denial of Service DOS vulnerability in the expandsmacro function in the /preprocs/nasm/nasm-pp.c component...

5.5CVSS6.8AI score0.00329EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/01/02 12:0 a.m.1 views

YASM Security Vulnerabilities

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in YASM version 1.3.0.86.g9def, which originated from allowing an attacker to cause a denial of service DOS via the expandmmacparams function in the /preprocs/nasm/nasm-pp.c component...

5.5CVSS6.6AI score0.00231EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2023/12/30 7:15 p.m.0 views

CVE-2023-52262

outdoorbits little-backup-box aka Little Backup Box before f39f91c allows remote attackers to execute arbitrary code because the PHP extract function is used for untrusted input...

9.8CVSS6.2AI score0.02032EPSS
Exploits0References3
Fedora
Fedora
added 2023/11/03 6:54 p.m.28 views

[SECURITY] Fedora 39 Update: libclc-17.0.2-1.fc39

libclc is an open source, BSD licensed implementation of the library requirements of the OpenCL C programming language, as specified by the OpenCL 1.1 Specification. The following sections of the specification impose library requirements: 6.1: Supported Data Types 6.2.3: Explicit Conversions...

5.5CVSS7.3AI score0.00137EPSS
Exploits0
CNNVD
CNNVD
added 2023/10/20 12:0 a.m.3 views

Number withdrawn

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. This CVE number has been withdrawn...

6.9AI score
Exploits2References3
WPVulnDB
WPVulnDB
added 2023/10/12 12:0 a.m.10 views

Instant CSS < 1.2.2 - Theme/CSS/Minify/Preprocessor Data Update via CSRF

Description The plugin does not have CSRF checks when updating its Theme, CSS, Minify and Preprocessor data, which could allow attackers to make logged in admins perform such actions via CSRF attacks...

8.8CVSS6.5AI score0.0007EPSS
Exploits0Affected Software1
OSV
OSV
added 2023/08/22 7:16 p.m.0 views

UBUNTU-CVE-2020-21686

A stack-use-after-scope issue discovered in expandmmacparams function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file...

5.5CVSS7.2AI score0.00229EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/08/22 12:0 a.m.1 views

PT-2023-11507 · Nasm +2 · Nasm +2

Name of the Vulnerable Software and Affected Versions: nasm version 2.14.02 Description: A Use After Free issue in the new Token function in asm/preproc.c allows attackers to cause a denial of service via a crafted nasm command. Recommendations: For nasm version 2.14.02, consider disabling the ne...

7.8CVSS6AI score0.00374EPSS
Exploits9References32
CNNVD
CNNVD
added 2023/08/22 12:0 a.m.1 views

nasm 安全漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability previously existed in nasm version 2.15.04, which stemmed from a buffer overflow problem found in the Expandmmacparams function of preproc.c. The vulnerability was caused by the use of the...

5.5CVSS6.7AI score0.00229EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/08/17 12:0 a.m.2 views

Juniper Networks Junos OS EX 安全漏洞

Juniper Networks Junos OS EX is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS EX, which is caused by a PHP external variab...

5.3CVSS7.2AI score0.94221EPSS
Exploits7References6
OSV
OSV
added 2023/05/17 3:15 p.m.1 views

DEBIAN-CVE-2023-31725

yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expandmmacparams at yasm/modules/preprocs/nasm/nasm-pp.c...

5.5CVSS5.6AI score0.00077EPSS
Exploits1References1
OSV
OSV
added 2023/05/17 3:15 p.m.1 views

AZL-26738 CVE-2023-31725 affecting package yasm 1.3.0-17

yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expandmmacparams at yasm/modules/preprocs/nasm/nasm-pp.c...

5.5CVSS6AI score0.00077EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/05/17 12:0 a.m.1 views

yasm 资源管理错误漏洞

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm version 1.3.0.55.g101bc, which originates from reuse after heap release via the function expandmmacparams in yasm/modules/preprocs/nasm/nasm-pp.c contains...

5.5CVSS5.6AI score0.00077EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/05/17 12:0 a.m.1 views

yasm 安全漏洞

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm version 1.3.0.55.g101bc, which stems from a segmentation violation via the inclusion of the function dodirective in /nasm/nasm-pp.c. The vulnerability is caused by the inclusion of...

7.8CVSS7.2AI score0.00081EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/05/17 12:0 a.m.2 views

yasm 安全漏洞

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm version 1.3.0.55.g101bc, which stems from a segmentation violation via the inclusion of the function expandmmacparams in /nasm/nasm-pp.c. The vulnerability is caused by the inclusio...

5.5CVSS5.6AI score0.00077EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2023/05/09 2:15 p.m.0 views

CVE-2023-31973

yasm v1.3.0 was discovered to contain a use after free via the function expandmmacparams at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

7.8CVSS5.8AI score0.00136EPSS
Exploits1References2
OSV
OSV
added 2023/04/12 4:15 p.m.3 views

DEBIAN-CVE-2023-29581

yasm 1.3.0.55.g101bc has a segmentation violation in the function deleteToken at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no security relevance because there is either supposed to ...

5.5CVSS5.6AI score0.00157EPSS
Exploits1References1
OSV
OSV
added 2023/04/12 4:15 p.m.1 views

AZL-35387 CVE-2023-29581 affecting package yasm 1.3.0-17

yasm 1.3.0.55.g101bc has a segmentation violation in the function deleteToken at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no security relevance because there is either supposed to ...

5.5CVSS6AI score0.00157EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2023/04/12 4:15 p.m.0 views

CVE-2023-29581

yasm 1.3.0.55.g101bc has a segmentation violation in the function deleteToken at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no security relevance because there is either supposed to ...

5.5CVSS6.1AI score0.00157EPSS
Exploits1References5
OSV
OSV
added 2023/04/12 4:15 p.m.0 views

AZL-26166 CVE-2023-29581 affecting package yasm 1.3.0-17

yasm 1.3.0.55.g101bc has a segmentation violation in the function deleteToken at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no security relevance because there is either supposed to ...

5.5CVSS6AI score0.00157EPSS
Exploits1References1
Rows per page
Query Builder