Lucene search
+L

7653 matches found

Veracode
Veracode
•added 2022/02/03 8:11 a.m.•22 views

Denial Of Service (DoS)

itext7-core is vulnerable to denial of service. The vulnerability exists in the writeFloats component in OutputStream.java file which allows an attacker to crash the system using stack-based buffer overflow via a crafted PDF file...

6.5CVSS3.9AI score0.01502EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2022/02/02 12:01 a.m.•143 views

GHSA-C32G-2MGR-CFQ7 Out-of-bounds Write in iText

iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service DoS via a crafted PDF file...

6.5CVSS6.4AI score0.01502EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2022/02/01 3:34 p.m.•27 views

CVE-2021-45832

A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 at at hdf5/src/H5Eint.c, which causes a Denial of Service context-dependent...

5.5CVSS4.1AI score0.00666EPSS
SaveExploits1References3
Talos
Talos
•added 2022/02/01 12:00 a.m.•105 views

Sealevel Systems, Inc. SeaConnect 370W LLMNR/NBNS stack-based buffer overflow vulnerabilities

Summary A stack-based buffer overflow vulnerability exists in both the LLMNR and NBNS functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted network packet can lead to remote code execution. An attacker can send a malicious packet to trigger either of the...

10CVSS9.6AI score0.02639EPSS
SaveExploits2
Talos
Talos
•added 2022/02/01 12:00 a.m.•54 views

Sealevel Systems, Inc. SeaConnect 370W OTA update task out-of-bounds write vulnerability

Summary An out-of-bounds write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. Tested...

7.1CVSS6.3AI score0.00744EPSS
SaveExploits1
CVE
CVE
•added 2022/02/01 12:00 a.m.•118 views

CVE-2022-24197

CVE-2022-24197 affects iText 7.1.17, where a stack-based buffer overflow in ByteBuffer.append during PDF parsing can cause a Denial of Service. A fix is available in iText 7.1.18; organizations should upgrade to 7.1.18 to mitigate.

6.5CVSS6.4AI score0.01502EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2022/02/01 12:00 a.m.•47 views

CVE-2022-24197

iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service DoS via a crafted PDF file...

6.7AI score0.01502EPSS
SaveExploits1References3
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•49 views

Bentley MicroStation CONNECT DGN File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.7AI score0.02068EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•58 views

Bentley View DGN File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN...

7.8CVSS6AI score0.01981EPSS
SaveExploits0References1
CVE
CVE
•added 2022/01/30 12:00 a.m.•294 views

CVE-2022-0408

CVE-2022-0408 is a Vim/vim prior to 8.2 stack-based buffer overflow. Astra/Amazon/Cloud advisory entries describe a stack-based overflow in vim that could let an attacker supply a crafted file to crash Vim or, per advisories, potentially execute code. Affected product is Vim; root cause is a stac...

8.4CVSS8.2AI score0.01499EPSS
SaveExploits1References7Affected Software1
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•25 views

Mageia: Security Advisory (MGASA-2018-0001)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.04876EPSS
SaveExploits1References5
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•17 views

Mageia: Security Advisory (MGASA-2021-0331)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.02571EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•25 views

Mageia: Security Advisory (MGASA-2020-0116)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.01241EPSS
SaveExploits4References5
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•19 views

Mageia: Security Advisory (MGASA-2014-0242)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.8AI score0.05605EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•11 views

Mageia: Security Advisory (MGASA-2014-0041)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References5
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•26 views

Mageia: Security Advisory (MGASA-2022-0033)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.07349EPSS
SaveExploits4References4
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•32 views

Mageia: Security Advisory (MGASA-2018-0293)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.07051EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•18 views

Mageia: Security Advisory (MGASA-2019-0150)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.02656EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•20 views

Mageia: Security Advisory (MGASA-2020-0460)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00982EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•32 views

Mageia: Security Advisory (MGASA-2015-0176)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.5AI score0.06776EPSS
SaveExploits0References4
Rows per page
Query Builder