Lucene search
+L

6407 matches found

OSV
OSV
added 2024/03/06 6:15 p.m.7 views

DEBIAN-CVE-2023-50716

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely...

9.8CVSS6.9AI score0.00724EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/06 6:15 p.m.10 views

UBUNTU-CVE-2023-50716

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely...

9.8CVSS5.8AI score0.00724EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/03/06 5:23 p.m.21 views

CVE-2023-50716 Invalid DATA_FRAG Submessage causes a bad-free error

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely...

9.6CVSS6.7AI score0.00724EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/06 5:23 p.m.38 views

CVE-2023-50716 Invalid DATA_FRAG Submessage causes a bad-free error

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely...

9.6CVSS9.4AI score0.00724EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2024/03/06 5:23 p.m.59 views

CVE-2023-50716

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely...

9.8CVSS9.3AI score0.00724EPSS
SaveExploits0
OSV
OSV
added 2024/03/06 5:23 p.m.12 views

CVE-2023-50716 Invalid DATA_FRAG Submessage causes a bad-free error

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely...

9.6CVSS9AI score
SaveExploits0References3
OSV
OSV
added 2024/03/06 11:19 a.m.25 views

BIT-TENSORFLOW-2021-29552 CHECK-failure in `UnsortedSegmentJoin`

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by controlling the values of numsegments tensor argument for UnsortedSegmentJoin. This is because the...

5.5CVSS5.4AI score0.00189EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/06 11:19 a.m.19 views

BIT-TENSORFLOW-2021-29563 CHECK-fail in `tf.raw_ops.RFFT`

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by exploiting a CHECK-failure coming from the implementation of tf.rawops.RFFT. Eigen code operating on an empty matrix can trigger on an assertion and will cause program termination...

5.5CVSS5.5AI score0.00189EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/06 11:9 a.m.20 views

BIT-WILDFLY-2020-14317

It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - Continuous Delivery EAP-CD introducing regression. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script ...

5.5CVSS5AI score0.00192EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/06 11:4 a.m.44 views

BIT-REDIS-2023-25155 Integer Overflow in several Redis commands can lead to denial of service.

Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer overflow, resulting in a runtime assertion and termination of the Redis server process. This problem affects all Redis...

6.5CVSS6.2AI score0.00902EPSS
SaveExploits0References6
OSV
OSV
added 2024/03/06 11:1 a.m.37 views

BIT-NODE-2023-30588

When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate API a non-expect termination occurs making it susceptible to DoS attacks when the attacker could force interruptions of application processing, as the process terminates when accessing public key inf...

5.3CVSS6.3AI score0.01157EPSS
SaveExploits0References4
OSV
OSV
added 2024/03/06 11:0 a.m.26 views

BIT-OPENPROJECT-2023-31140

OpenProject is open source project management software. Starting with version 7.4.0 and prior to version 12.5.4, when a user registers and confirms their first two-factor authentication 2FA device for an account, existing logged in sessions for that user account are not terminated. Likewise, if a...

6.5CVSS5.8AI score0.00891EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/03/06 12:0 a.m.15 views

eProsima Fast DDS Security Vulnerability

eProsima Fast DDS is the C++ implementation of eProsima's OMG Object Management Group DDS Data Distribution Service standard. A security vulnerability exists in eProsima Fast DDS Fast RTPS versions prior to 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, which stems from an invalid DATAFRAG sub-messag...

9.8CVSS6.7AI score0.00724EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/06 12:0 a.m.12 views

PT-2024-13956 · Eprosima +1 · Eprosima Fast Dds +1

Name of the Vulnerable Software and Affected Versions: eProsima Fast DDS versions prior to 2.13.0 eProsima Fast DDS versions prior to 2.12.2 eProsima Fast DDS versions prior to 2.11.3 eProsima Fast DDS versions prior to 2.10.3 eProsima Fast DDS versions prior to 2.6.7 Description: The issue is...

9.8CVSS6.7AI score0.00724EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2024/03/02 12:0 a.m.14 views

PT-2024-7869 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel's qcom component, specifically with the termination of frequency table arrays. The arrays are supposed to be terminated with an empty element t...

9.1CVSS6.6AI score0.01635EPSS
SaveExploits0References675
OSV
OSV
added 2024/03/01 1:15 p.m.25 views

CVE-2023-48674

Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentially send malicious data to the device in order to cause some services to cease to function...

4.9CVSS5.8AI score0.00493EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/01 12:35 p.m.13 views

CVE-2023-48674

Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentially send malicious data to the device in order to cause some services to cease to function...

6.8CVSS6.8AI score0.00493EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/01 12:35 p.m.119 views

CVE-2023-48674

CVE-2023-48674 affects Dell Platform BIOS. Described as an improper NULL termination vulnerability that could allow a high-privilege user with network access to send malicious data to the device, potentially causing some services to cease functioning (DoS). Documented impact includes availability...

6.8CVSS6.4AI score0.00493EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/01 12:35 p.m.60 views

CVE-2023-48674

Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentially send malicious data to the device in order to cause some services to cease to function...

6.8CVSS6.7AI score0.00493EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/01 12:0 a.m.27 views

Dell BIOS Security Vulnerability

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. A security vulnerability exists in Dell BIOS that stems from the inclusion of an incorrect null termination vulnerability...

6.8CVSS6.8AI score0.00493EPSS
SaveExploits0References2
Rows per page
Query Builder