Lucene search
+L

368 matches found

OSV
OSV
added 2024/03/27 6:15 a.m.1 views

DEBIAN-CVE-2023-46052

Sane 1.2.1 heap bounds overwrite in initoptions from backend/test.c via a long initmode string in a configuration file. NOTE: this is disputed because there is no expectation that test.c code should be executed with an attacker-controlled configuration file...

7.1CVSS6.8AI score0.00364EPSS
SaveExploits1References1
OSV
OSV
added 2024/03/27 6:15 a.m.5 views

CVE-2023-46052

Sane 1.2.1 heap bounds overwrite in initoptions from backend/test.c via a long initmode string in a configuration file. NOTE: this is disputed because there is no expectation that test.c code should be executed with an attacker-controlled configuration file...

7.1CVSS6.9AI score
SaveExploits0References3
NVD
NVD
added 2024/03/27 6:15 a.m.15 views

CVE-2023-46052

Sane 1.2.1 heap bounds overwrite in initoptions from backend/test.c via a long initmode string in a configuration file. NOTE: this is disputed because there is no expectation that test.c code should be executed with an attacker-controlled configuration file...

7.1CVSS6.7AI score0.00364EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/27 6:15 a.m.10 views

UBUNTU-CVE-2023-46052

DISPUTED Sane 1.2.1 heap bounds overwrite in initoptions from backend/test.c via a long initmode string in a configuration file. NOTE: this is disputed because there is no expectation that test.c code should be executed with an attacker-controlled configuration file...

7.1CVSS5.8AI score0.00364EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2024/03/27 6:15 a.m.17 views

CVE-2023-46052

Sane 1.2.1 heap bounds overwrite in initoptions from backend/test.c via a long initmode string in a configuration file. NOTE: this is disputed because there is no expectation that test.c code should be executed with an attacker-controlled configuration file...

7.1CVSS5.9AI score0.00364EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/27 5:15 a.m.7 views

CVE-2023-46047

An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the saneiconfigureattach function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file...

7.3CVSS7.4AI score
SaveExploits0References3
NVD
NVD
added 2024/03/27 5:15 a.m.14 views

CVE-2023-46047

An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the saneiconfigureattach function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file...

7.3CVSS7.1AI score0.00372EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/27 5:15 a.m.6 views

DEBIAN-CVE-2023-46047

An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the saneiconfigureattach function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file...

7.3CVSS5.9AI score0.00372EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2024/03/27 5:15 a.m.17 views

CVE-2023-46047

An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the saneiconfigureattach function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file...

7.3CVSS6.1AI score0.00372EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/27 5:15 a.m.14 views

UBUNTU-CVE-2023-46047

DISPUTED An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the saneiconfigureattach function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file...

7.3CVSS6.1AI score0.00372EPSS
SaveExploits1References3
CVE
CVE
added 2024/03/27 12:0 a.m.56 views

CVE-2023-46052

Sane 1.2.1 is affected by a CVE-2023-46052 heap bounds overwrite in init_options() via a long init_mode string in a configuration file. The root cause is in backend/test.c. The description is disputed: there is no expectation that test.c runs with an attacker-controlled configuration file. Public...

7.1CVSS6.9AI score0.00364EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2024/03/27 12:0 a.m.6 views

SANE Backends 安全漏洞

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. A security vulnerability exists in SANE Backends version 1.2.1. An attacker can exploit this vulnerability to execute arbitrary code via...

7.3CVSS7.5AI score0.00372EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2024/03/27 12:0 a.m.47 views

CVE-2023-46047

An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the saneiconfigureattach function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file...

7.3CVSS7.3AI score0.00372EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2024/03/27 12:0 a.m.14 views

CVE-2023-46047

An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the saneiconfigureattach function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file...

7.7AI score0.00372EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/03/27 12:0 a.m.4 views

Sane 安全漏洞

SANE Backends is an application programming interface API and communication protocol used to regulate communication between software and digital imaging devices. A security vulnerability exists in Sane version 1.2.1 that stems from a heap boundary that can be overwritten via a long initmode strin...

7.1CVSS6.4AI score0.00364EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/03/27 12:0 a.m.8 views

CVE-2023-46052

Sane 1.2.1 heap bounds overwrite in initoptions from backend/test.c via a long initmode string in a configuration file. NOTE: this is disputed because there is no expectation that test.c code should be executed with an attacker-controlled configuration file...

7AI score0.00364EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/03/27 12:0 a.m.34 views

CVE-2023-46047

An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the saneiconfigureattach function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file...

7.4AI score0.00372EPSS
SaveExploits1References2
CVE
CVE
added 2024/03/27 12:0 a.m.61 views

CVE-2023-46047

CVE-2023-46047 : Affects Sane 1.2.1. Local attacker can trigger arbitrary code execution via a crafted file fed to the sanei_configure_attach() function. The vulnerability is disputed due to the expectation that the product should not start with an attacker-controlled configuration file. Connecte...

7.3CVSS7.4AI score0.00372EPSS
SaveExploits1References3Affected Software1
vulnersOsv
vulnersOsv
added 2024/02/13 3:31 p.m.6 views

@etalab/cadastre (>=0.14.0 <=0.21.0), @fmidev/smartmet-alert-client (>=3.0.0 <=3.8.8) +14 more potentially affected by CVE-2024-1163 via mapshaper (>=0.3.43 <=0.6.42)

mapshaper NPM version =0.3.43, =0.14.0, =3.0.0, =0.0.1, =0.1.9, =0.1.0, =0.0.1, =0.0.3, =2.1.0, =1.3.1, =0.0.1, =0.0.1, =0.1.0 - tile-maker =0.0.1 and more Source cves: CVE-2024-1163 Source advisory: OSV:GHSA-8M36-62RW-9MXW...

7.7CVSS6.8AI score0.00408EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2024/01/26 12:0 a.m.5 views

PT-2024-13320

Name of the Vulnerable Software and Affected Versions Sane version 1.2.1 Description An issue in Sane allows a local attacker to execute arbitrary code via a crafted file to the sanei configure attach function. This issue is disputed because there is no expectation that the product should be...

7.3CVSS7.6AI score0.00372EPSS
SaveExploits2References19
Rows per page
Query Builder