Lucene search
K

1102 matches found

OSV
OSV
added 2017/10/29 5:29 p.m.2 views

DEBIAN-CVE-2017-15996

elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service excessive memory allocation or possibly have unspecified other impact via a crafted ELF file that triggers a "buffer overflow on fuzzed archive header," related to an uninitialized variable, an improper...

7.8CVSS8AI score0.02357EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2017/10/29 5:0 p.m.28 views

CVE-2017-15996

elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service excessive memory allocation or possibly have unspecified other impact via a crafted ELF file that triggers a "buffer overflow on fuzzed archive header," related to an uninitialized variable, an improper...

7.8CVSS7.8AI score0.02357EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.4 views

The vulnerability of the TrustZone component of the Android operating system from the CAF repository, which allows a perpetrator to gain unauthorized access to protected memory.

The vulnerability of the TrustZone component of the Android operating system from the CAF repository relates to the use of an uninitialized variable during system calls. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected memor...

10CVSS7.8AI score0.00836EPSS
Exploits0References3
Prion
Prion
added 2017/08/18 6:29 p.m.15 views

Design/Logic Flaw

In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call potentially leading to the compromise of secure memory...

10CVSS7AI score0.00836EPSS
Exploits0References2
Cvelist
Cvelist
added 2017/08/18 6:0 p.m.18 views

CVE-2014-9979

In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call potentially leading to the compromise of secure memory...

8.4AI score0.00836EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2017/08/18 12:0 a.m.54 views

openSUSE Security Update : openldap2 (openSUSE-2017-936)

This update for openldap2 fixes the following issues : - Let OpenLDAP read system wide certificate directory by default and avoid hiding the error if user specified CA location cannot be read boo1009470. - Fix CVE-2017-9287: openldap2: Double free vulnerability with patch boo1041764 - Fix an...

6.5CVSS6.8AI score0.07143EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2017/08/18 12:0 a.m.2 views

The vulnerability of the Oniguruma library, related to the use of an uninitialized variable, which allows for memory corruption to occur.

The vulnerability of the Oniguruma library arises from an incorrect change in the state of the parsecharclass function. This allows for the use of an uninitialized variable during writing to the buffer. Exploiting this vulnerability could enable a malicious actor to cause memory corruption by...

7.5CVSS7.3AI score0.06261EPSS
Exploits1References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2017/08/18 12:0 a.m.5 views

The vulnerability of the Oniguruma library, which arises from the use of an uninitialized variable, allows a hacker to perform read operations beyond the buffer boundary in dynamic memory.

The vulnerability of the Oniguruma library exists due to incorrect processing of reg-dmin in the forwardsearchrange function. This allows the use of an uninitialized variable during data reading from the buffer. Exploiting this vulnerability could enable a malicious actor to read beyond the...

7.5CVSS6.7AI score0.06265EPSS
Exploits1References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2017/08/18 12:0 a.m.2 views

The vulnerability of the Oniguruma library, which arises from the use of an uninitialized variable and allows for memory corruption to occur.

The vulnerability of the Oniguruma library arises from an improper change in the state of the parsecharclass function. This allows for the use of an uninitialized variable during writing to the buffer. Exploiting this vulnerability could enable a malicious actor to cause memory corruption by...

7.5CVSS7.3AI score0.06261EPSS
Exploits1References3Affected Software2
Debian
Debian
added 2017/08/04 9:0 p.m.34 views

[SECURITY] [DSA 3926-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3926-1 [email protected] https://www.debian.org/security/ Michael Gilbert August 04, 2017 https://www.debian.org/security/faq -...

6.8CVSS0.6AI score0.15513EPSS
Exploits0
Debian
Debian
added 2017/08/04 9:0 p.m.41 views

[SECURITY] [DSA 3926-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3926-1 [email protected] https://www.debian.org/security/ Michael Gilbert August 04, 2017 https://www.debian.org/security/faq -...

8.8CVSS8.4AI score0.15513EPSS
Exploits0
OpenVAS
OpenVAS
added 2017/08/04 12:0 a.m.36 views

Debian Security Advisory DSA 3926-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2017-5087 Ned Williamson discovered a way to escape the sandbox. CVE-2017-5088 Xiling Gong discovered an out-of-bounds read issue in the v8 javascript library. CVE-2017-5089 Michal Bentkowski discovered a spoofing issue...

6.8CVSS0.4AI score0.15513EPSS
Exploits0References1
OSV
OSV
added 2017/06/15 1:29 p.m.0 views

UBUNTU-CVE-2017-9670

An uninitialized stack variable vulnerability in loadticseries in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service Segmentation fault and Memory Corruption or possibly have unspecified other impact when a victim opens a specially crafted file...

7.8CVSS6.7AI score0.0087EPSS
Exploits0References2
Cvelist
Cvelist
added 2017/06/15 1:0 p.m.22 views

CVE-2017-9670

An uninitialized stack variable vulnerability in loadticseries in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service Segmentation fault and Memory Corruption or possibly have unspecified other impact when a victim opens a specially crafted file...

8.1AI score0.0087EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2017/06/15 12:0 a.m.2 views

PT-2017-19106 · Gnu +1 · Gnuplot +1

Name of the Vulnerable Software and Affected Versions: gnuplot version 5.2.rc1 Description: The issue is related to an uninitialized stack variable vulnerability in the load tic series function in set.c. This vulnerability can be exploited when a victim opens a specially crafted file, potentially...

9.8CVSS7AI score0.02528EPSS
Exploits5References30
OSV
OSV
added 2017/06/14 2:33 p.m.5 views

SUSE-SU-2017:1567-1 Security update for openldap2

This update for openldap2 fixes the following issues: Security issues fixed: - CVE-2017-9287: A double free vulnerability in the mdb backend during search with page size 0 was fixed bsc1041764 Non security bugs fixed: - Let OpenLDAP read system-wide certificates by default and don't hide the erro...

6.5CVSS6.8AI score0.07143EPSS
Exploits1References6
Cvelist
Cvelist
added 2017/06/06 2:0 p.m.19 views

CVE-2014-9942

In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vulnerability could potentially exist...

7.3AI score0.0046EPSS
Exploits0References2
OSV
OSV
added 2017/05/24 3:29 p.m.3 views

ALPINE-CVE-2017-9228

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitsetsetrange during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect...

9.8CVSS7.2AI score0.06261EPSS
Exploits1References1
OSV
OSV
added 2017/05/24 3:29 p.m.27 views

CVE-2017-9228

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitsetsetrange during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect...

9.8CVSS9.4AI score
Exploits0References3
Debian CVE
Debian CVE
added 2017/05/24 3:0 p.m.27 views

CVE-2017-9228

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitsetsetrange during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect...

9.8CVSS8.1AI score0.06261EPSS
Exploits1
Rows per page
Query Builder