Lucene search
+L

618 matches found

OSV
OSV
•added 2024/01/03 12:15 a.m.•16 views

AZL-35393 CVE-2023-49554 affecting package yasm 1.3.0-17

Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the dodirective function in the modules/preprocs/nasm/nasm-pp.c component...

5.5CVSS5.9AI score0.00398EPSS
SaveExploits1References1
OSV
OSV
•added 2024/01/03 12:15 a.m.•15 views

UBUNTU-CVE-2023-49555

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandsmacro function in the modules/preprocs/nasm/nasm-pp.c component...

5.5CVSS5.8AI score0.00378EPSS
SaveExploits1References2
OSV
OSV
•added 2024/01/03 12:15 a.m.•21 views

UBUNTU-CVE-2023-49554

Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the dodirective function in the modules/preprocs/nasm/nasm-pp.c component...

5.5CVSS5.8AI score0.00398EPSS
SaveExploits1References2
OSV
OSV
•added 2024/01/03 12:15 a.m.•17 views

UBUNTU-CVE-2023-49558

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandmmacparams function in the modules/preprocs/nasm/nasm-pp.c component...

5.5CVSS5.8AI score0.00382EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/01/02 12:00 a.m.•11 views

PT-2024-2670 · Yasm +2 · Yasm +2

Name of the Vulnerable Software and Affected Versions: YASM version 1.3.0.86.g9def Description: The issue in YASM is related to the expand mmac params function, which is associated with an uncontrolled consumption of resources. Exploitation of this issue may allow an attacker to cause a denial of...

5.5CVSS4.8AI score0.00432EPSS
SaveExploits5References18
CNNVD
CNNVD
•added 2024/01/02 12:00 a.m.•15 views

YASM Security Vulnerabilities

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in YASM 1.3.0.86.g9def, which stems from the presence of a post-release reuse vulnerability. An attacker can exploit this vulnerability to cause a denial of service DOS via the dodirective...

5.5CVSS6.7AI score0.00398EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/02 12:00 a.m.•14 views

YASM Security Vulnerabilities

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in YASM version 1.3.0.86.g9def, which originated from allowing an attacker to cause a denial of service DOS via the expandmmacparams function in the /preprocs/nasm/nasm-pp.c component...

5.5CVSS6.6AI score0.00382EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/02 12:00 a.m.•16 views

YASM Security Vulnerabilities

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in YASM version 1.3.0.86.g9def, which stems from a Denial of Service DOS vulnerability in the expandsmacro function in the /preprocs/nasm/nasm-pp.c component...

5.5CVSS6.8AI score0.00378EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/01/02 12:00 a.m.•10 views

PT-2024-2674 · Yasm +2 · Yasm +2

Name of the Vulnerable Software and Affected Versions: YASM version 1.3.0.86.g9def Description: The issue is related to a Use After Free vulnerability in the do directive function, located in the modules/preprocs/nasm/nasm-pp.c component. This vulnerability allows a remote attacker to cause a...

5.5CVSS4.9AI score0.00432EPSS
SaveExploits4References17
attackerkb
attackerkb
•added 2023/12/30 7:15 p.m.•7 views

CVE-2023-52262

outdoorbits little-backup-box aka Little Backup Box before f39f91c allows remote attackers to execute arbitrary code because the PHP extract function is used for untrusted input...

9.8CVSS6.2AI score0.00926EPSS
SaveExploits0References3
Fedora
Fedora
•added 2023/11/03 6:54 p.m.•57 views

[SECURITY] Fedora 39 Update: libclc-17.0.2-1.fc39

libclc is an open source, BSD licensed implementation of the library requirements of the OpenCL C programming language, as specified by the OpenCL 1.1 Specification. The following sections of the specification impose library requirements: 6.1: Supported Data Types 6.2.3: Explicit Conversions...

5.5CVSS7.3AI score0.00215EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/01 12:00 a.m.•1 views

CVE-2023-20270: Improper Input Validation

A vulnerability in the interaction between the Server Message Block SMB protocol preprocessor and the Snort 3 detection engine for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the configured policies or cause a denial of service DoS conditi...

5.8CVSS6.2AI score0.00668EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/10/20 12:00 a.m.•14 views

Number withdrawn

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. This CVE number has been withdrawn...

6.9AI score
SaveExploits2References3
WPVulnDB
WPVulnDB
•added 2023/10/12 12:00 a.m.•11 views

Instant CSS < 1.2.2 - Theme/CSS/Minify/Preprocessor Data Update via CSRF

Description The plugin does not have CSRF checks when updating its Theme, CSS, Minify and Preprocessor data, which could allow attackers to make logged in admins perform such actions via CSRF attacks...

8.8CVSS6.5AI score0.00227EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2023/08/22 7:16 p.m.•22 views

UBUNTU-CVE-2020-21686

A stack-use-after-scope issue discovered in expandmmacparams function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file...

5.5CVSS7.2AI score0.00439EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/08/22 12:00 a.m.•16 views

nasm 安全漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability previously existed in nasm version 2.15.04, which stemmed from a buffer overflow problem found in the Expandmmacparams function of preproc.c. The vulnerability was caused by the use of the...

5.5CVSS6.7AI score0.00439EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/08/22 12:00 a.m.•10 views

PT-2023-11507 · Nasm +2 · Nasm +2

Name of the Vulnerable Software and Affected Versions: nasm version 2.14.02 Description: A Use After Free issue in the new Token function in asm/preproc.c allows attackers to cause a denial of service via a crafted nasm command. Recommendations: For nasm version 2.14.02, consider disabling the ne...

7.8CVSS6AI score0.01272EPSS
SaveExploits9References32
CNNVD
CNNVD
•added 2023/08/17 12:00 a.m.•19 views

Juniper Networks Junos OS EX 安全漏洞

Juniper Networks Junos OS EX is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS EX, which is caused by a PHP external variab...

5.3CVSS7.2AI score0.89958EPSS
SaveExploits6References6
OSV
OSV
•added 2023/05/17 3:15 p.m.•15 views

AZL-26738 CVE-2023-31725 affecting package yasm 1.3.0-17

yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expandmmacparams at yasm/modules/preprocs/nasm/nasm-pp.c...

5.5CVSS6AI score0.00287EPSS
SaveExploits1References1
OSV
OSV
•added 2023/05/17 3:15 p.m.•9 views

DEBIAN-CVE-2023-31725

yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expandmmacparams at yasm/modules/preprocs/nasm/nasm-pp.c...

5.5CVSS5.6AI score0.00287EPSS
SaveExploits1References1
Rows per page
Query Builder