Lucene search
K

1070 matches found

OSV
OSV
added 2023/08/18 12:15 a.m.14 views

CVE-2023-39125

NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmprw.c because a file's width, height, and BPP are not validated. NOTE: the vendor's perspective is "this main application was not intended to be a well tested program, it's just something to demonstrate it works and fo...

7.5CVSS7.4AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/08/17 12:0 a.m.3 views

PT-2023-26793 · Ntsc-Crt · Ntsc-Crt

Name of the Vulnerable Software and Affected Versions: NTSC-CRT version 2.2.1 Description: The issue is related to an integer overflow and out-of-bounds write in the loadBMP function in bmp rw.c. This occurs because the file's width, height, and BPP are not validated. The vendor notes that the ma...

7.5CVSS7.5AI score0.00079EPSS
Exploits1References7
Cvelist
Cvelist
added 2023/08/17 12:0 a.m.12 views

CVE-2023-39125

NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmprw.c because a file's width, height, and BPP are not validated. NOTE: the vendor's perspective is "this main application was not intended to be a well tested program, it's just something to demonstrate it works and fo...

7.9AI score0.00079EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/08/05 2:1 a.m.1 views

SUSE CVE-2023-29407

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size width height appearing to be zero...

6.5CVSS9.1AI score0.00257EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2023/08/02 9:30 p.m.26 views

Golang TIFF decoder vulnerable to excessive CPU consumption

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size width height appearing to be zero...

6.5CVSS7AI score0.00257EPSS
Exploits0References9Affected Software1
OSV
OSV
added 2023/08/02 9:30 p.m.17 views

GHSA-J3P8-6MRQ-6G7H Golang TIFF decoder vulnerable to excessive CPU consumption

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size width height appearing to be zero...

6.5CVSS6.4AI score0.00257EPSS
Exploits0References8
OSV
OSV
added 2023/08/02 8:15 p.m.1 views

DEBIAN-CVE-2023-29407

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size width height appearing to be zero...

6.5CVSS6.8AI score0.00257EPSS
Exploits0References1
OSV
OSV
added 2023/08/02 8:15 p.m.17 views

CVE-2023-29407

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size width height appearing to be zero...

6.5CVSS7AI score
Exploits0References7
OSV
OSV
added 2023/08/02 8:15 p.m.0 views

UBUNTU-CVE-2023-29407

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size width height appearing to be zero...

6.5CVSS5.8AI score0.00257EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/07/28 12:0 a.m.3 views

PT-2023-4680 · Freerdp +8 · Freerdp +8

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.11.0 FreeRDP versions prior to 3.0.0-beta3 Description: The issue is related to an invalid offset validation leading to Out Of Bound Write in FreeRDP, a free implementation of the Remote Desktop Protocol RDP. This...

9.8CVSS6.5AI score0.06359EPSS
Exploits25References304
OSV
OSV
added 2023/06/12 8:15 p.m.1 views

DEBIAN-CVE-2023-3161

A flaw was found in the Framebuffer Console fbcon in the Linux Kernel. When providing font-width and font-height greater than 32 to fbconsetfont, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service...

5.5CVSS6.3AI score0.00013EPSS
Exploits0References1
OSV
OSV
added 2023/06/12 8:15 p.m.6 views

AZL-27192 CVE-2023-3161 affecting package kernel for versions less than 5.15.116.1-2

A flaw was found in the Framebuffer Console fbcon in the Linux Kernel. When providing font-width and font-height greater than 32 to fbconsetfont, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service...

5.5CVSS6.7AI score0.00013EPSS
Exploits0References1
OSV
OSV
added 2023/06/12 8:15 p.m.1 views

UBUNTU-CVE-2023-3161

A flaw was found in the Framebuffer Console fbcon in the Linux Kernel. When providing font-width and font-height greater than 32 to fbconsetfont, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service...

5.5CVSS6.6AI score0.00013EPSS
Exploits0References7
CNNVD
CNNVD
added 2023/06/12 12:0 a.m.5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a buffer overflow vulnerability that stems from a flaw in the frame buffer console fbcon that fails to properly check fbconsetfont when provided...

5.5CVSS6.7AI score0.00013EPSS
Exploits0References9
SUSE CVE
SUSE CVE
added 2023/06/10 2:55 a.m.5 views

SUSE CVE-2023-3161

A flaw was found in the Framebuffer Console fbcon in the Linux Kernel. When providing font-width and font-height greater than 32 to fbconsetfont, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service...

5.5CVSS6.5AI score0.00013EPSS
Exploits0References26
Positive Technologies
Positive Technologies
added 2023/06/07 12:0 a.m.2 views

PT-2023-11367 · WordPress · Coming Soon/Maintenance Mode Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: WordPress Coming Soon Page & Maintenance Mode plugin versions up to, and including, 1.8.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated...

7.2CVSS6AI score0.00801EPSS
Exploits1References7
OSV
OSV
added 2023/05/10 8:15 a.m.0 views

CVE-2023-24392

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Full Width Banner Slider Wp plugin = 1.1.7 versions...

6.1CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2023/05/10 8:15 a.m.11 views

CVE-2023-24392

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Full Width Banner Slider Wp plugin = 1.1.7 versions...

7.1CVSS6.2AI score0.00289EPSS
Exploits0References1
CVE
CVE
added 2023/05/10 7:1 a.m.39 views

CVE-2023-24392

CVE-2023-24392 affects the WordPress plugin I Thirteen Web Solution Full Width Banner Slider WP (versions ≤ 1.1.7). It is a unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability exposed via parameters like search_term and setacrionpage. Patch information in Patchstack indicates the ...

7.1CVSS6AI score0.00289EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/10 7:1 a.m.22 views

CVE-2023-24392 WordPress Full Width Banner Slider Wp Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Full Width Banner Slider Wp plugin = 1.1.7 versions...

7.1CVSS6.3AI score0.00289EPSS
Exploits0References1
Rows per page
Query Builder