Lucene search
+L

6444 matches found

Debian
Debian
added 2020/08/03 3:08 p.m.52 views

[SECURITY] [DSA 4739-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4739-1 [email protected] https://www.debian.org/security/ Alberto Garcia August 03, 2020 https://www.debian.org/security/faq -...

9.8CVSS9.1AI score0.04491EPSS
SaveExploits0
OSV
OSV
added 2020/07/29 12:00 a.m.5 views

UBUNTU-CVE-2020-9895

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected...

9.8CVSS7AI score0.04491EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2020/07/29 12:00 a.m.30 views

CVE-2020-9894

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected applicati...

4.3CVSS6.9AI score0.02837EPSS
SaveExploits0References3
Apple
Apple
added 2020/07/28 5:31 a.m.62 views

About the security content of tvOS 13 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

10CVSS0.4AI score0.06927EPSS
SaveExploits9Affected Software1
OSV
OSV
added 2020/07/27 11:15 p.m.22 views

CVE-2020-12460

OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarcxmlparse that can result in a one-byte heap overflow in opendmarcxml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a '\0' byte...

9.8CVSS7.2AI score
SaveExploits0References7
OSV
OSV
added 2020/07/27 11:15 p.m.3 views

DEBIAN-CVE-2020-12460

OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarcxmlparse that can result in a one-byte heap overflow in opendmarcxml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a '\0' byte...

9.8CVSS8.7AI score0.03684EPSS
SaveExploits1References1
OSV
OSV
added 2020/07/27 11:15 p.m.6 views

UBUNTU-CVE-2020-12460

OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarcxmlparse that can result in a one-byte heap overflow in opendmarcxml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a '\0' byte...

9.8CVSS7.4AI score0.03684EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2020/07/27 10:52 p.m.46 views

CVE-2020-12460

OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarcxmlparse that can result in a one-byte heap overflow in opendmarcxml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a '\0' byte...

9.7AI score0.03684EPSS
SaveExploits1References7
CNVD
CNVD
added 2020/07/20 12:00 a.m.3 views

Multiple Apple Products WebKit Component Use After Release Vulnerability (CNVD-2020-51500)

Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart televisions. webKit is a component of the one of the web browser engine...

9.8CVSS9.5AI score0.04491EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/20 12:00 a.m.6 views

Multiple Apple Products WebKit Component Use After Release Vulnerability

Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart televisions. webKit is a component of the one of the web browser engine...

8.8CVSS9.6AI score0.02949EPSS
SaveExploits0References1
Veracode
Veracode
added 2020/07/15 6:26 a.m.32 views

Denial Of Service (DoS)

freewvs is vulnerable to denial of service. An attacker is able to terminate the scan process by creating a large file that would potentially cause an application crash upon parsing...

3.3CVSS3.8AI score0.00337EPSS
SaveExploits0References2Affected Software1
Apple
Apple
added 2020/07/15 12:00 a.m.77 views

About the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra

About the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra This document describes the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. About Apple security updates F...

10CVSS9.7AI score0.08036EPSS
SaveExploits13References1Affected Software3
PyPA
PyPA
added 2020/07/14 8:15 p.m.13 views

PYSEC-2020-232

In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, which will terminate a scan process. This has been patched in 0.1.1...

3.3CVSS6.8AI score0.00337EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/07/14 8:15 p.m.34 views

PYSEC-2020-232

In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, which will terminate a scan process. This has been patched in 0.1.1...

3.3CVSS1.1AI score0.00337EPSS
SaveExploits0References2
CVE
CVE
added 2020/07/14 7:15 p.m.52 views

CVE-2020-15100

The CVE affects freewvs prior to 0.1.1 where a user can craft a large file that freewvs reads, causing the scan process to terminate. Root cause: uncontrolled reading of large input leading to process termination. Impact: denial of service on the scanning process (partial availability impact per ...

3.3CVSS3.5AI score0.00337EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:00 a.m.18 views

The vulnerability in the cross-platform library LibVNCServer’s component libvncclient/sockets.c allows a attacker to cause a service failure.

The vulnerability in the libvncclient/sockets.c component of the cross-platform library LibVNCServer relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failure due to incorrect termination of the TCP...

7.8CVSS7.6AI score0.02756EPSS
SaveExploits0References7Affected Software4
Tenable Nessus
Tenable Nessus
added 2020/07/01 12:00 a.m.60 views

EulerOS Virtualization 3.0.6.0 : samba (EulerOS-SA-2020-1746)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U MS-SFU Kerbero...

7.5CVSS6.7AI score0.03151EPSS
SaveExploits0References7
Apple
Apple
added 2020/06/25 7:44 a.m.91 views

About the security content of iOS 12.4 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.8CVSS0.1AI score0.13806EPSS
SaveExploits27Affected Software1
Apple
Apple
added 2020/06/22 4:31 a.m.64 views

About the security content of watchOS 6.1.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.3CVSS1.3AI score0.145EPSS
SaveExploits2Affected Software1
NVD
NVD
added 2020/06/17 11:15 a.m.17 views

CVE-2020-11908

The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP...

4.3CVSS0.01899EPSS
SaveExploits1References9
Rows per page
Query Builder