Lucene search
+L

7025 matches found

UbuntuCve
UbuntuCve
added 2023/12/13 9:15 p.m.28 views

CVE-2023-50268

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue...

6.2CVSS6.6AI score0.00444EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2023/12/13 9:15 p.m.58 views

CVE-2023-50246

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue...

6.2CVSS6.9AI score0.00514EPSS
SaveExploits1References4
Prion
Prion
added 2023/12/13 9:15 p.m.25 views

Stack overflow

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue...

1.7CVSS7.4AI score0.00444EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2023/12/13 8:49 p.m.33 views

CVE-2023-50268 jq has stack-based buffer overflow in decNaNs

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue...

6.2CVSS6.2AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2023/12/13 8:49 p.m.69 views

CVE-2023-50268

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue...

6.2CVSS6.1AI score0.00444EPSS
SaveExploits1
CVE
CVE
added 2023/12/13 8:49 p.m.61 views

CVE-2023-50268

CVE-2023-50268 concerns jq, a command-line JSON processor. Multiple sources confirm: jq 1.7 is vulnerable to a stack-based buffer overflow in builds using decNumber; a patch is included in version 1.7.1. Practical impact is not elaborated beyond the buffer overflow description in the provided doc...

6.2CVSS6AI score0.00444EPSS
SaveExploits1References5Affected Software1
AlpineLinux
AlpineLinux
added 2023/12/13 8:49 p.m.66 views

CVE-2023-50268

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue...

6.2CVSS6.1AI score0.00444EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2023/12/13 8:43 p.m.15 views

CVE-2023-50246 jq has heap-buffer-overflow vulnerability in the function decToString in decNumber.c

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue...

6.2CVSS7.3AI score0.00514EPSS
SaveExploits1References4
CVE
CVE
added 2023/12/13 8:43 p.m.86 views

CVE-2023-50246

CVE-2023-50246 affects jq (command-line JSON processor). The connected OSSV entry specifies a heap-based buffer overflow in the decToString function of decNumber.c affecting version 1.7, with a patch released in version 1.7.1. The description confirms the vulnerability class and the fix, but does...

6.2CVSS6AI score0.00514EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2023/12/13 8:43 p.m.21 views

CVE-2023-50246 jq has heap-buffer-overflow vulnerability in the function decToString in decNumber.c

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue...

6.2CVSS6.2AI score
SaveExploits0References6
Cvelist
Cvelist
added 2023/12/13 8:43 p.m.49 views

CVE-2023-50246 jq has heap-buffer-overflow vulnerability in the function decToString in decNumber.c

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue...

6.2CVSS6.7AI score0.00514EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
added 2023/12/13 8:43 p.m.70 views

CVE-2023-50246

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue...

6.2CVSS6.1AI score0.00514EPSS
SaveExploits1
Fedora
Fedora
added 2023/12/13 1:34 a.m.30 views

[SECURITY] Fedora 38 Update: libreoffice-7.5.9.2-1.fc38

LibreOffice is an Open Source, community-developed, office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office suites...

8.8CVSS8.8AI score0.01017EPSS
SaveExploits0
NVD
NVD
added 2023/12/13 1:15 a.m.30 views

CVE-2023-43122

Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920 allow Information Disclosure in the Bootloader...

4.8CVSS0.00291EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/13 1:15 a.m.27 views

CVE-2023-42483

A TOCTOU race condition in Samsung Mobile Processor Exynos 9820, Exynos 980, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, and Exynos 1380 can cause unexpected termination of a system...

6.3CVSS0.00147EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/13 1:15 a.m.23 views

Race condition

A TOCTOU race condition in Samsung Mobile Processor Exynos 9820, Exynos 980, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, and Exynos 1380 can cause unexpected termination of a system...

1CVSS7.1AI score0.00147EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/13 12:0 a.m.5 views

jq Security Vulnerabilities

jq is jqlang open source a lightweight and flexible command-line JSON processor . A security vulnerability exists in jq version 1.7 that stems from the use of decNumber builds vulnerable to stack-based buffer overflows...

6.2CVSS7AI score0.00444EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/12/13 12:0 a.m.6 views

PT-2023-8957 · Jq +1 · Jq +1

Name of the Vulnerable Software and Affected Versions: jq version 1.7 Description: The issue is related to a heap-based buffer overflow in the jq command-line JSON processor. This can potentially allow an attacker to cause a denial of service. Recommendations: For version 1.7, update to version...

6.2CVSS7.2AI score0.00514EPSS
SaveExploits2References27
CNNVD
CNNVD
added 2023/12/13 12:0 a.m.9 views

jq Security Vulnerabilities

jq is jqlang open source a lightweight and flexible command line JSON processor . A security vulnerability exists in jq version 1.7, which stems from the function decToString in decNumber.c being susceptible to a heap-based buffer overflow...

6.2CVSS7.2AI score0.00514EPSS
SaveExploits1References4
OSV
OSV
added 2023/12/12 10:40 p.m.8 views

CLSA-2023-1702420812 microcode_ctl: Fix of CVE-2023-23583

Update Intel CPU microcode to microcode-20231114 release, addresses CVE-2023-23583 INTEL-SA-00950: - Addition of 06-ba-02/0xe0 microcode at revision 0x411c; - Addition of 06-ba-02/0xe0 microcode at revision 0x411c; - Addition of 06-ba-03/0xe0 microcode in intel-ucode/06-ba-02 at revision 0x411c;...

8.8CVSS5.7AI score0.01728EPSS
SaveExploits0References1
Rows per page
Query Builder