Lucene search
+L

5655 matches found

OSV
OSV
added 2021/05/30 12:0 a.m.19 views

DLA-2671-1 rxvt-unicode - security update

Bulletin has no description...

8.8CVSS8.6AI score0.04089EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2021/05/26 12:0 a.m.49 views

ICU: Multiple vulnerabilities

Background ICU is a mature, widely used set of C/C++ and Java libraries providing Unicode and Globalization support for software applications. Description Multiple vulnerabilities have been discovered in ICU. Please review the upstream bugs referenced below for details. Impact Remote attackers...

4.3AI score
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2021/05/26 12:0 a.m.46 views

rxvt-unicode: User-assisted execution of arbitrary code

Background rxvt-unicode urxvt is a clone of the rxvt terminal emulator. Description It was discovered that rxvt-unicode did not properly handle certain escape sequences. Impact A remote attacker could entice a user to run a program where attacker controls the output inside a rxvt terminal window,...

8.8CVSS3.8AI score0.04089EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/05/25 12:0 a.m.8 views

Google Chrome资源管理错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A double-release vulnerability exists in ICU in versions prior to Google Chrome 91.0.4472.77, which can be exploited by a remote attacker to potentially exploit hea...

8.8CVSS8.4AI score0.01128EPSS
SaveExploits1References12
CNVD
CNVD
added 2021/05/24 12:0 a.m.60 views

Unspecified vulnerability in rxvt-unicode

rxvt-unicode is an application. A customizable terminal branching from rxvt. A security vulnerability exists in rxvt-unicode 9.22 that allows code execution because certain escape sequences ESC G Q are mishandled. The response is terminated by a line feed. No detailed vulnerability details are...

8.8CVSS7.1AI score0.04089EPSS
SaveExploits1References1
Veracode
Veracode
added 2021/05/22 12:40 a.m.29 views

Arbitrary Code Execution

rxvt-unicode is vulneralbe to arbitrary code execution. Improper handling of certain escape sequences allows an attacker to execute arbitrary code on the host OS...

8.8CVSS3.8AI score0.04089EPSS
SaveExploits1References27Affected Software4
OSV
OSV
added 2021/05/21 2:24 p.m.4 views

GHSA-59Q2-X2QC-4C97 Heap OOB access in unicode ops

Impact An attacker can access data outside of bounds of heap allocated array in tf.rawops.UnicodeEncode: python import tensorflow as tf inputvalues = tf.constant58, shape=1, dtype=tf.int32 inputsplits = tf.constant81, 101, 0, shape=3, dtype=tf.int32 outputencoding = "UTF-8" tf.rawops.UnicodeEncod...

2.5CVSS5.8AI score0.00198EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2021/05/21 2:24 p.m.41 views

Heap OOB access in unicode ops

Impact An attacker can access data outside of bounds of heap allocated array in tf.rawops.UnicodeEncode: python import tensorflow as tf inputvalues = tf.constant58, shape=1, dtype=tf.int32 inputsplits = tf.constant81, 101, 0, shape=3, dtype=tf.int32 outputencoding = "UTF-8" tf.rawops.UnicodeEncod...

7.1CVSS1.3AI score0.00198EPSS
SaveExploits1References7Affected Software3
NVD
NVD
added 2021/05/20 8:15 p.m.17 views

CVE-2021-33477

rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow potentially remote code execution because of improper handling of certain escape sequences ESC G Q. A response is terminated by a newline...

8.8CVSS0.04089EPSS
SaveExploits1References20
OSV
OSV
added 2021/05/20 8:15 p.m.7 views

DEBIAN-CVE-2021-33477

rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow potentially remote code execution because of improper handling of certain escape sequences ESC G Q. A response is terminated by a newline...

8.8CVSS8.4AI score0.04089EPSS
SaveExploits1References1
OSV
OSV
added 2021/05/20 8:15 p.m.7 views

ALPINE-CVE-2021-33477

rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow potentially remote code execution because of improper handling of certain escape sequences ESC G Q. A response is terminated by a newline...

8.8CVSS7.7AI score0.04089EPSS
SaveExploits1References1
Prion
Prion
added 2021/05/20 8:15 p.m.23 views

Remote code execution

rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow potentially remote code execution because of improper handling of certain escape sequences ESC G Q. A response is terminated by a newline...

6.5CVSS8.7AI score0.04089EPSS
SaveExploits1References20Affected Software6
OSV
OSV
added 2021/05/20 8:15 p.m.7 views

UBUNTU-CVE-2021-33477

rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow potentially remote code execution because of improper handling of certain escape sequences ESC G Q. A response is terminated by a newline...

8.8CVSS6.2AI score0.04089EPSS
SaveExploits1References10
UbuntuCve
UbuntuCve
added 2021/05/20 8:15 p.m.29 views

CVE-2021-33477

rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow potentially remote code execution because of improper handling of certain escape sequences ESC G Q. A response is terminated by a newline...

8.8CVSS7.6AI score0.04089EPSS
SaveExploits1References9
CVE
CVE
added 2021/05/20 7:16 p.m.128 views

CVE-2021-33477

The CVE-2021-33477 entry affects rxvt-unicode (9.22), rxvt (2.7.10), mrxvt (0.5.4) and Eterm (0.9.7). Root cause: improper handling of certain escape sequences (ESC G Q) that can terminate a response with a newline, enabling potentially remote code execution. Public advisories confirm this across...

8.8CVSS8.7AI score0.04089EPSS
SaveExploits1References20Affected Software4
Debian CVE
Debian CVE
added 2021/05/20 7:16 p.m.55 views

CVE-2021-33477

rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow potentially remote code execution because of improper handling of certain escape sequences ESC G Q. A response is terminated by a newline...

8.8CVSS8.9AI score0.04089EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2021/05/20 7:16 p.m.88 views

CVE-2021-33477

rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow potentially remote code execution because of improper handling of certain escape sequences ESC G Q. A response is terminated by a newline...

8.8CVSS9AI score0.04089EPSS
SaveExploits1References19
CNNVD
CNNVD
added 2021/05/20 12:0 a.m.11 views

rxvt-unicode 安全漏洞

rxvt-unicode is an application. A customizable terminal branching from rxvt. A security vulnerability exists in rxvt-unicode 9.22 that allows code execution because certain escape sequences ESC G Q are mishandled. The response is terminated by a line feed. No detailed vulnerability details are...

8.8CVSS8.3AI score0.04089EPSS
SaveExploits1References25
OpenVAS
OpenVAS
added 2021/05/20 12:0 a.m.8 views

Ubuntu: Security Advisory (USN-4961-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References3
OSV
OSV
added 2021/05/19 10:47 a.m.10 views

USN-4961-1 python-pip vulnerability

It was discovered that pip incorrectly handled unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository...

5.8AI score
SaveExploits0References2
Rows per page
Query Builder