Lucene search
+L

35 matches found

Cvelist
Cvelist
added 2025/09/29 11:32 p.m.31 views

CVE-2025-59952 minio-java Client XML Tag is Vulnerable to Value Substitution

MinIO Java SDK is a Simple Storage Service aka S3 client to perform bucket and object operations to any Amazon S3 compatible object storage service. In minio-java versions prior to 8.6.0, XML tag values containing references to system properties or environment variables were automatically...

8.7CVSS0.00491EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:19 a.m.8 views

SUSE CVE-2004-1187

Heap-based buffer overflow in the pnmgetchunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNATAG values, a different vulnerability than CVE-2004-1188...

10CVSS8.4AI score0.05178EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:15 a.m.10 views

SUSE CVE-2015-6246

The dissectwapayload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values, which allows remote attackers to cause a denial of service application crash via a crafted packet...

4.3CVSS6.8AI score0.02963EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:56 a.m.8 views

SUSE CVE-2016-9297

The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via crafted TIFFSETGETC16ASCII or TIFFSETGETC32ASCII tag values...

7.5CVSS6.9AI score0.05953EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 4:55 a.m.9 views

SUSE CVE-2016-9448

The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service NULL pointer dereference and crash by setting the tags TIFFSETGETC16ASCII or TIFFSETGETC32ASCII to values that access 0-byte arrays. NOTE: this vulnerability exists because of an incomplete fix f...

7.5CVSS7AI score0.04873EPSS
SaveExploits0References7
OSV
OSV
added 2020/05/24 6:15 p.m.8 views

UBUNTU-CVE-2020-13430

Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource...

6.1CVSS6.9AI score0.01835EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2017/08/01 3:34 p.m.27 views

gstreamer-plugins-good: Out of bounds read in qtdemux_tag_add_str_full

The qtdemuxtagaddstrfull function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted tag value...

7.5CVSS7.4AI score0.04146EPSS
SaveExploits0References4
Prion
Prion
added 2017/01/18 5:59 p.m.34 views

Out-of-bounds

The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via crafted TIFFSETGETC16ASCII or TIFFSETGETC32ASCII tag values...

5CVSS7.3AI score0.05953EPSS
SaveExploits0References6Affected Software1
UbuntuCve
UbuntuCve
added 2017/01/18 12:00 a.m.44 views

CVE-2016-9297

The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via crafted TIFFSETGETC16ASCII or TIFFSETGETC32ASCII tag values...

7.5CVSS6.9AI score0.05953EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2015/11/19 6:03 a.m.15 views

wireshark: WaveAgent dissector crash (wnpa-sec-2015-26)

The dissectwapayload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values, which allows remote attackers to cause a denial of service application crash via a crafted packet...

4.3CVSS7.2AI score0.02963EPSS
SaveExploits0References5
OSV
OSV
added 2015/08/24 11:59 p.m.7 views

DEBIAN-CVE-2015-6246

The dissectwapayload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values, which allows remote attackers to cause a denial of service application crash via a crafted packet...

4.3CVSS5.1AI score0.02963EPSS
SaveExploits0References1
OSV
OSV
added 2015/08/24 11:59 p.m.11 views

UBUNTU-CVE-2015-6246

The dissectwapayload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values, which allows remote attackers to cause a denial of service application crash via a crafted packet...

4.3CVSS6.4AI score0.02963EPSS
SaveExploits0References5
CNVD
CNVD
added 2015/01/06 12:00 a.m.13 views

Exiv riffvideo.cpp Buffer Overflow Vulnerability

Exiv2 is a C++ class library for extracting EXIF, LPTC and XMP metadata information from images. A buffer overflow vulnerability in the RiffVideo::infoTagsHandler function in Exiv2 riffvideo.cpp allows an attacker to construct an AVI file containing extra-long IKEY INFO tagged values, tricking th...

5CVSS7.2AI score0.03802EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2009/05/05 12:00 a.m.51 views

HP-UX Update for BIND v920 HPSBUX00290

Check for the Version of BIND v920 OpenVAS Vulnerability Test HP-UX Update for BIND v920 HPSBUX00290 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

10CVSS0.2AI score0.87499EPSS
SaveExploits1References2
Exploit DB
Exploit DB
added 2004/12/14 12:00 a.m.34 views

Adobe Acrobat / Acrobat Reader 6.0 - '.ETD' File Parser Format String

source: https://www.securityfocus.com/bid/11934/info Adobe Acrobat/Acrobat Reader is reported prone to a remote format string vulnerability. The vulnerability is present in the ETD file parser when processing tag values. Reports indicate that the values supplied for certain tags are used as the...

5.8AI score
SaveExploits0
Rows per page
Query Builder