Lucene search
+L

768 matches found

Github Security Blog
Github Security Blog
added 2021/08/25 8:43 p.m.28 views

Integer underflow in untrusted

A mistake in error handling in untrusted before 0.6.2 could lead to an integer underflow and panic if a user of the crate didn't properly check for errors returned by untrusted. Combination of these two programming errors one in untrusted and another by user of this crate could lead to a panic an...

7.5CVSS7AI score0.01375EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2021/08/11 12:00 a.m.9 views

Intel Ethernet Adapters 800 处理逻辑错误漏洞

Intel Ethernet Adapters 800 is an Ethernet Adapter from Intel Corporation. A Processing Logic Error vulnerability exists in the Intel Ethernet Adapters 800 family of devices, which can be exploited by an attacker to cause a denial of service because the product does not properly catch certain...

4.4CVSS5.3AI score0.0023EPSS
SaveExploits0References5
OSV
OSV
added 2021/07/13 10:15 p.m.19 views

CVE-2020-19722

An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial of service DOS...

6.5CVSS6.8AI score
SaveExploits0References1
CVE
CVE
added 2021/07/13 9:33 p.m.88 views

CVE-2020-19722

Bento4 library vulnerability CVE-2020-19722 affects version 1.5.1-628, caused by an unhandled memory allocation failure in Core/Ap4Atom.cpp that leads to a NULL pointer dereference and denial of service. The connected sources provide no patch/version remediation details or exploit status. No info...

6.5CVSS6.3AI score0.01031EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2021/06/25 1:15 p.m.11 views

CVE-2021-27042

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code...

7.8CVSS7.5AI score0.01797EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/25 1:15 p.m.25 views

CVE-2021-27042

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code...

7.8CVSS0.01797EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2021/06/25 1:15 p.m.8 views

CVE-2021-27042

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code...

7.8CVSS8AI score0.01797EPSS
SaveExploits0References4
Prion
Prion
added 2021/06/25 1:15 p.m.26 views

Code injection

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code...

6.8CVSS7.8AI score0.01797EPSS
SaveExploits0References1Affected Software10
Cvelist
Cvelist
added 2021/06/25 12:41 p.m.36 views

CVE-2021-27042

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code...

8.1AI score0.01797EPSS
SaveExploits0References1
Citrix
Citrix
added 2021/06/22 12:00 a.m.19 views

Unable to open the StoreFront console, error “MMC has detected an error in a snap-in and will unload it”

• The customer is unable to open the StoreFront Store console in one StoreFront SF server • When opening the console, he gets the option to view stores or create new stores • If clicking on Server group on the left menu, he can see the member servers with no problems • When clicking ‘View Stores’...

7.2AI score
SaveExploits0
CNNVD
CNNVD
added 2021/06/10 12:00 a.m.11 views

JerryScript 代码问题漏洞

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in JerryScript 2.4.0, which originates from a SEGV in mainprintunhandledexception in the main-utils.c file.No detailed vulnerability details are available at this time...

6.5CVSS5.5AI score0.00856EPSS
SaveExploits1References1
Code423n4
Code423n4
added 2021/05/19 12:00 a.m.23 views

Unhandled return value of transferFrom in timeLockERC20() could lead to fund loss for recipients

Handle 0xRajeev Vulnerability details Impact ERC20 implementations are not always consistent. Some implementations of transfer and transferFrom could return ‘false’ on failure instead of reverting. It is safer to wrap such calls into require statements or use safe wrapper functions implementing...

6.9AI score
SaveExploits0
CVE
CVE
added 2021/04/28 8:23 p.m.68 views

CVE-2020-22781

The CVE-2020-22781 vulnerability affects Etherpad Lite versions older than 1.8.3. A specially crafted URI can trigger an unhandled exception in Etherpad’s cache mechanism, leading to a denial of service (instance crash). This conclusion is supported by multiple sources in both CVE records and ext...

7.5CVSS7.3AI score0.01111EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/04/28 12:00 a.m.10 views

Etherpad SQL注入漏洞

Etherpad-Lite is a web-based open source document editor from the Etherpad Foundation. A security vulnerability exists in Etherpad versions prior to 1.8.3, which stems from a specially designed URI that raises an unhandled exception in the caching mechanism and results in a denial of service...

7.5CVSS7.3AI score0.01111EPSS
SaveExploits1References2
OSV
OSV
added 2021/04/13 8:15 p.m.10 views

CVE-2021-23372

All versions of package mongo-express are vulnerable to Denial of Service DoS when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash...

7.5CVSS7.1AI score0.00878EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/13 8:15 p.m.20 views

CVE-2021-23372

All versions of package mongo-express are vulnerable to Denial of Service DoS when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash...

7.5CVSS0.00878EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/13 8:15 p.m.22 views

Design/Logic Flaw

All versions of package mongo-express are vulnerable to Denial of Service DoS when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash...

5CVSS7.5AI score0.00878EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/04/13 3:20 p.m.37 views

CVE-2021-23372 Denial of Service (DoS)

All versions of package mongo-express are vulnerable to Denial of Service DoS when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash...

4.4CVSS7.7AI score0.00878EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2021/04/13 3:17 p.m.6 views

CVE-2021-23372

All versions of package mongo-express are vulnerable to Denial of Service DoS when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash...

7.5CVSS5.3AI score0.00878EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/04/13 12:00 a.m.10 views

mongo-express 代码问题漏洞

mongo-express is a lightweight, web-based management interface for interactively managing MongoDB databases. A security vulnerability exists in all versions of mongo-express that stems from an unhandled exception...

7.5CVSS7.3AI score0.00878EPSS
SaveExploits0References2
Rows per page
Query Builder