Lucene search
K

22 matches found

EUVD
EUVD
added 2026/05/01 12:0 a.m.4 views

EUVD-2026-26529

A stack-based buffer overflow in mangletohexlower and mangletohexupper in src/rpcpu.c in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted rule file, or via the -j or -k rule options used with password candidates of 128 or more...

9.8CVSS6.5AI score0.00108EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/05/01 12:0 a.m.23 views

CVE-2026-42482

A stack-based buffer overflow in mangletohexlower and mangletohexupper in src/rpcpu.c in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted rule file, or via the -j or -k rule options used with password candidates of 128 or more...

0.00108EPSS
Exploits1References1
EUVD
EUVD
added 2026/04/20 3:31 p.m.3 views

EUVD-2026-23859

OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in a custom WAF rule file during the file upload process...

9.3CVSS6.1AI score0.03371EPSS
Exploits4References2
ATTACKERKB
ATTACKERKB
added 2026/04/20 1:36 p.m.2 views

CVE-2026-4048

OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in a custom WAF rule file during the file upload process...

9.3CVSS6.1AI score0.03371EPSS
Exploits4References2Affected Software4
Positive Technologies
Positive Technologies
added 2026/04/20 12:0 a.m.2 views

PT-2026-33766

Name of the Vulnerable Software and Affected Versions Progress ADC Products affected versions not specified Description An OS Command Injection flaw in the user interface allows an authenticated attacker with "All" permissions to execute arbitrary commands on the LoadMaster appliance. This occurs...

9.3CVSS6.2AI score0.03371EPSS
Exploits4References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-4019

Malware in sbrugna...

7.8CVSS7.5AI score0.0018EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-4018

Malware in sbrugna...

7.8CVSS7.5AI score0.0018EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2018-12034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yrexecutecode in libyara/exec.c...

7.8CVSS7.3AI score0.0018EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 4:26 a.m.1 views

SUSE CVE-2018-12034

In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yrexecutecode in libyara/exec.c...

7.8CVSS7.5AI score0.0018EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/03/25 12:0 a.m.1 views

Apache SpamAssassin 操作系统命令注入漏洞

Apache SpamAssassin is an open source spam filter from the Apache USA Foundation. The product provides system administrators with a filter and support for categorizing email to block spam. An injection vulnerability exists in Apache SpamAssassin versions prior to 3.4.5 that allows configuration o...

10CVSS5.7AI score0.03407EPSS
Exploits0References18
Tenable Nessus
Tenable Nessus
added 2018/09/13 12:0 a.m.29 views

openSUSE Security Update : qemu (openSUSE-2018-996)

This update for qemu fixes the following issues : This security issue was fixed : - CVE-2018-12617: qmpguestfileread had an integer overflow that could have been exploited by sending a crafted QMP command including guest-file-read with a large count value to the agent via the listening socket...

7.5CVSS6.6AI score0.11739EPSS
Exploits5References6
OPENSUSE Linux
OPENSUSE Linux
added 2018/09/12 12:7 p.m.50 views

Security update for qemu (moderate)

This update for qemu fixes the following issues: This security issue was fixed: - CVE-2018-12617: qmpguestfileread had an integer overflow that could have been exploited by sending a crafted QMP command including guest-file-read with a large count value to the agent via the listening socket causi...

5CVSS0.9AI score0.11739EPSS
Exploits5References5
CNVD
CNVD
added 2018/06/20 12:0 a.m.1 views

YARA Buffer Overflow Vulnerability

YARA is a set of tools used to help software researchers identify and categorize malware samples. A security vulnerability exists in the 'yrexecutecode' function of the libyara/exec.c file in YARA. The vulnerability can be exploited by an attacker to execute code out-of-bounds writing with the he...

7.8CVSS7.6AI score0.0018EPSS
Exploits1References1
CNVD
CNVD
added 2018/06/20 12:0 a.m.2 views

YARA buffer overflow vulnerability (CNVD-2018-23867)

YARA is a set of tools used to help software researchers identify and categorize malware samples. An out-of-bounds read vulnerability exists in the 'yrexecutecode' function of the libyara/exec.c file in YARA. The vulnerability can be exploited by an attacker to execute code with the help of a...

7.8CVSS7.6AI score0.0018EPSS
Exploits1References1
OSV
OSV
added 2018/06/15 4:29 p.m.15 views

CVE-2018-12034

In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yrexecutecode in libyara/exec.c...

7.8CVSS7.8AI score
Exploits0References3
OSV
OSV
added 2018/06/15 4:29 p.m.0 views

UBUNTU-CVE-2018-12034

In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yrexecutecode in libyara/exec.c...

7.8CVSS7.1AI score0.0018EPSS
Exploits1References6
OSV
OSV
added 2018/06/15 4:29 p.m.0 views

UBUNTU-CVE-2018-12035

In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds write vulnerability in yrexecutecode in libyara/exec.c...

7.8CVSS7.1AI score0.0018EPSS
Exploits1References6
Cvelist
Cvelist
added 2018/06/15 4:0 p.m.15 views

CVE-2018-12035

In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds write vulnerability in yrexecutecode in libyara/exec.c...

7.6AI score0.0018EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2018/06/15 12:0 a.m.1 views

PT-2018-10955

Name of the Vulnerable Software and Affected Versions YARA versions prior to 3.7.1 Description The issue arises when parsing a specially crafted compiled rule file, leading to an out of bounds read in the yr execute code function located in libyara/exec.c. Recommendations For versions prior to...

9.1CVSS6.8AI score0.00614EPSS
Exploits12References28
OpenVAS
OpenVAS
added 2010/09/10 12:0 a.m.15 views

Ubuntu Update for mountall vulnerability USN-985-1

Ubuntu Update for Linux kernel vulnerabilities USN-985-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9851.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for mountall vulnerability USN-985-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

6.9CVSS0.1AI score0.00073EPSS
Exploits1References2
Rows per page
Query Builder