Lucene search
+L

8585 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/04 12:00 a.m.•9 views

CVE-2019-20827: Out-of-bounds Write

An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption because of interaction between ICC-Based color space and Alternate color space...

9.8CVSS5.8AI score0.01761EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/06/04 12:00 a.m.•3 views

PT-2020-5651

Name of the Vulnerable Software and Affected Versions QEMU version 4.2.0 Description The issue is related to an out-of-bounds access in the PCI configuration space and a buffer overflow in the ati mm read function. This could allow an attacker to cause a denial of service. Recommendations For QEM...

5.5CVSS0.00398EPSS
SaveExploits0References20
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/04 12:00 a.m.•5 views

CVE-2020-13791: Out-of-bounds Read

hw/pci/pci.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access by providing an address near the end of the PCI configuration space...

5.5CVSS5.8AI score0.00398EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/06/03 12:00 a.m.•94 views

QEMU Code Issue Vulnerability

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A code issue vulnerability exists in the addressspacemap of the exec.c file in QEMU version 4.2.0. A local attacker can explo...

2.5CVSS7.5AI score0.00429EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2020/06/02 1:15 p.m.•16 views

UBUNTU-CVE-2020-13659

addressspacemap in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer...

2.5CVSS6.7AI score0.00429EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2020/06/02 12:00 a.m.•16 views

Linux kernel Load Aout Binary Bypass ASLR

The vulnerability of the loadaoutbinary function in the Linux operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection mechanism in programs with setuid a.out...

2.5CVSS6.5AI score0.00499EPSS
SaveExploits1References32Affected Software4
Fedora
Fedora
•added 2020/05/28 4:15 a.m.•43 views

[SECURITY] Fedora 32 Update: dpdk-19.11.1-2.fc32

The Data Plane Development Kit is a set of libraries and drivers for fast packet processing in the user space...

7.7CVSS3.8AI score0.02213EPSS
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2020/05/24 12:00 a.m.•17 views

UBUNTU-CVE-2005-1514

commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SMTP command without a space character, which causes an array to be referenced with a negative index...

5CVSS7.5AI score0.06572EPSS
SaveExploits2References5
CNVD
CNVD
•added 2020/05/21 12:00 a.m.•61 views

SANE Backends epsonds component input validation error vulnerability

SANE Backends is an application programming interface API and communication protocol for regulating communication between software and digital imaging devices. An input validation error vulnerability exists in the 'epsondsnetread' function in SANE Backends versions prior to 1.0.30. An attacker...

4.3CVSS6.8AI score0.01204EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2020/05/20 8:15 a.m.•35 views

CVE-2019-11048

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleanin...

5.3CVSS6.7AI score0.06264EPSS
SaveExploits1References13
osv_debian
osv_debian
•added 2020/05/20 8:15 a.m.•16 views

DEBIAN-CVE-2019-11048

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleanin...

5.3CVSS7AI score0.06264EPSS
SaveExploits1References1
Prion
Prion
•added 2020/05/20 8:15 a.m.•29 views

Design/Logic Flaw

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleanin...

5CVSS6.1AI score0.06264EPSS
SaveExploits1References13Affected Software1
osv_ubuntu
osv_ubuntu
•added 2020/05/20 8:15 a.m.•17 views

UBUNTU-CVE-2019-11048

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleanin...

5.3CVSS6.7AI score0.06264EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2020/05/20 8:15 a.m.•50 views

CVE-2019-11048

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleanin...

5.3CVSS6.8AI score0.06264EPSS
SaveExploits1References2
Mend
Mend
•added 2020/05/20 7:15 a.m.•7 views

CVE-2019-11048

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleanin...

6.9CVSS0.06264EPSS
SaveExploits1References14
AlpineLinux
AlpineLinux
•added 2020/05/20 7:15 a.m.•36 views

CVE-2019-11048

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleanin...

5.3CVSS6.6AI score0.06264EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/05/20 7:15 a.m.•60 views

CVE-2019-11048

Removed by vendor...

5.3CVSS6.7AI score0.06264EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/20 12:00 a.m.•5 views

CVE-2019-11048: Uncontrolled Resource Consumption

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleanin...

5.3CVSS6.4AI score0.06264EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2020/05/20 12:00 a.m.•47 views

Huawei Data Communication: DoS Vulnerability in Huawei Switches (huawei-sa-20161130-01-switch)

There is a denial of service DoS vulnerability in Huawei switches due to improper management of system resources. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

6.8CVSS6.5AI score0.01334EPSS
SaveExploits0References1
NVD
NVD
•added 2020/05/15 6:15 p.m.•40 views

CVE-2020-12888

The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space...

5.3CVSS6AI score0.00404EPSS
SaveExploits0References13
Rows per page
Query Builder