Lucene search
+L

1630 matches found

Tenable Nessus
Tenable Nessus
added 2021/03/04 12:00 a.m.43 views

RHEL 7 : java-1.7.1-ibm (RHSA-2021:0733)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0733 advisory. IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IB...

9.8CVSS7AI score0.03186EPSS
SaveExploits0References7
OSV
OSV
added 2021/03/02 10:33 p.m.10 views

MGASA-2021-0094 Updated xterm package fixes security vulnerability

xterm through Patch 365 allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafted UTF-8 character sequence. CVE-2021-27135...

9.8CVSS9.7AI score0.07541EPSS
SaveExploits1References5
Mageia
Mageia
added 2021/03/02 10:33 p.m.44 views

Updated xterm package fixes security vulnerability

xterm through Patch 365 allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafted UTF-8 character sequence. CVE-2021-27135...

9.8CVSS7.3AI score0.07541EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2021/02/23 12:00 a.m.14 views

Debian: Security Advisory (DSA-4861-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.09147EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2021/02/23 12:00 a.m.26 views

Debian DSA-4861-1 : screen - security update

Felix Weinmann reported a flaw in the handling of combining characters in screen, a terminal multiplexer with VT100/ANSI terminal emulation, which can result in denial of service, or potentially the execution of arbitrary code via a specially crafted UTF-8 character sequence. C Tenable Network...

9.8CVSS7.5AI score0.09147EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2021/02/22 12:00 a.m.29 views

Debian DLA-2570-1 : screen security update

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence. For Debian 9 stretch, this problem has been fixed in version 4.5.0-6+deb9u1. We...

9.8CVSS7.5AI score0.09147EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2021/02/22 12:00 a.m.38 views

EulerOS 2.0 SP2 : libksba (EulerOS-SA-2021-1317)

According to the versions of the libksba package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The appendutf8value function in the DN decoder dn.c in Libksba before 1.3.3 allows remote attackers to cause a denial of service out-of-bounds...

7.5CVSS7.4AI score0.03205EPSS
SaveExploits0References4
Debian
Debian
added 2021/02/21 8:31 a.m.49 views

[SECURITY] [DSA 4861-1] screen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4861-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 21, 2021 https://www.debian.org/security/faq -...

7.5CVSS2.5AI score0.09147EPSS
SaveExploits1
Debian
Debian
added 2021/02/21 8:31 a.m.99 views

[SECURITY] [DSA 4861-1] screen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4861-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 21, 2021 https://www.debian.org/security/faq -...

9.8CVSS9.7AI score0.09147EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2021/02/14 9:28 p.m.31 views

CVE-2020-27221

In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding...

9.8CVSS4.7AI score0.01532EPSS
SaveExploits0References3
Veracode
Veracode
added 2021/02/12 6:11 a.m.22 views

Denial Of Service (DoS)

xterm is vulnerable to denial of service. A remote attacker is able to crash the application via a segmentation fault using a malicious UTF-8 character sequence...

9.8CVSS3.8AI score0.07541EPSS
SaveExploits1References15Affected Software1
Veracode
Veracode
added 2021/02/11 12:01 p.m.25 views

Denial Of Service (DoS)

screen is vulnerable to denial of service DoS. The vulnerability exists in encoding.c through an invalid write access via a crafted UTF-8 character sequence...

9.8CVSS2.8AI score0.09147EPSS
SaveExploits1References12Affected Software3
RedhatCVE
RedhatCVE
added 2021/02/11 1:34 a.m.59 views

CVE-2021-27135

A flaw was found in xterm. A specially crafted sequence of combining characters causes an out of bounds write leading to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Mitigation This vulnerability can be...

9.8CVSS2.2AI score0.07541EPSS
SaveExploits1References3
NVD
NVD
added 2021/02/10 4:15 p.m.24 views

CVE-2021-27135

xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...

9.8CVSS0.07541EPSS
SaveExploits1References13
OSV
OSV
added 2021/02/10 4:15 p.m.26 views

CVE-2021-27135

xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...

9.8CVSS9.6AI score
SaveExploits0References13
UbuntuCve
UbuntuCve
added 2021/02/10 4:15 p.m.42 views

CVE-2021-27135

xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...

9.8CVSS7.5AI score0.07541EPSS
SaveExploits1References5
Prion
Prion
added 2021/02/10 4:15 p.m.26 views

Design/Logic Flaw

xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...

7.5CVSS9.4AI score0.07541EPSS
SaveExploits1References13Affected Software3
CVE
CVE
added 2021/02/10 3:51 p.m.405 views

CVE-2021-27135

CVE-2021-27135 affects the xterm terminal emulator. A crafted sequence of combining UTF-8 characters can cause an out-of-bounds write, potentially enabling arbitrary code execution or denial of service. Affected versions include xterm prior to the patch/fix; multiple vendor advisories note a fix ...

9.8CVSS9.6AI score0.07541EPSS
SaveExploits1References13Affected Software1
Cvelist
Cvelist
added 2021/02/10 3:51 p.m.30 views

CVE-2021-27135

xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...

9.8AI score0.07541EPSS
SaveExploits1References13
Debian CVE
Debian CVE
added 2021/02/10 3:51 p.m.34 views

CVE-2021-27135

xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence...

9.8CVSS7.6AI score0.07541EPSS
SaveExploits1
Rows per page
Query Builder