Lucene search
K

40 matches found

Github Security Blog
Github Security Blog
added 2021/10/12 10:21 p.m.25 views

NULL Pointer Dereference in OpenCV.

An issue was discovered in OpenCV before 4.1.1 OpenCV-Python before 4.1.1.26. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...

7.5CVSS2.1AI score0.00167EPSS
Exploits1References5Affected Software4
OpenVAS
OpenVAS
added 2020/06/05 12:0 a.m.15 views

Huawei Data Communication: Several Vulnerabilities in XMLparser Module of Huawei Products (huawei-sa-20180418-01-xmlparser)

There are two memory leak vulnerabilities in XMLparser module of Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

0.2AI score
Exploits0References1
Veracode
Veracode
added 2019/08/06 5:53 a.m.23 views

Denial Of Service (DoS)

OpenCV is vulnerable to denial of service DoS. The attack is due to lack of proper memory handling in the function cv::XMLParser::parse at persistencexml.cpp, leading to a null-pointer-dereference...

7.5CVSS2.5AI score0.00167EPSS
Exploits1References3Affected Software1
CNVD
CNVD
added 2019/08/02 12:0 a.m.1 views

OpenCV Null Pointer Dereference Vulnerability

OpenCV is a cross-platform computer vision library. A null pointer dereference vulnerability exists in the cv::XMLParser::parse function in modules/core/src/persistence.cpp in versions of OpenCV prior to 4.1.1. An attacker could exploit this vulnerability to cause a denial of service...

7.5CVSS6.7AI score0.00167EPSS
Exploits1References1
NVD
NVD
added 2019/08/01 5:15 p.m.15 views

CVE-2019-14493

An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...

7.5CVSS7.4AI score0.00167EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2019/08/01 5:15 p.m.19 views

CVE-2019-14493

An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...

7.5CVSS6.8AI score0.00167EPSS
Exploits1References5
Prion
Prion
added 2019/08/01 5:15 p.m.17 views

Null pointer dereference

An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...

5CVSS7.4AI score0.00167EPSS
Exploits1References3Affected Software2
OSV
OSV
added 2019/08/01 5:15 p.m.0 views

UBUNTU-CVE-2019-14493

An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...

7.5CVSS6.8AI score0.00167EPSS
Exploits1References6
Debian CVE
Debian CVE
added 2019/08/01 4:5 p.m.24 views

CVE-2019-14493

An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...

7.5CVSS6.3AI score0.00167EPSS
Exploits1
Cvelist
Cvelist
added 2019/08/01 4:5 p.m.20 views

CVE-2019-14493

An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...

7.5AI score0.00167EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2019/07/23 12:0 a.m.1 views

PT-2019-6434 · Intel +3 · Opencv +3

Name of the Vulnerable Software and Affected Versions: OpenCV versions prior to 4.1.1 Description: An issue was discovered in the function cv::XMLParser::parse at modules/core/src/persistence.cpp, which is related to errors in pointer dereferencing. This issue can be exploited by a remote attacke...

8.8CVSS6.2AI score0.03513EPSS
Exploits9References90
Cvelist
Cvelist
added 2018/10/08 1:0 p.m.8 views

CVE-2018-17889

In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior when parsing project files, the XMLParser that ships with Wecon PIStudio is vulnerable to a XML external entity injection attack, which may allow sensitive information disclosure...

5.2AI score0.00265EPSS
Exploits0References1
Prion
Prion
added 2018/10/08 12:29 p.m.12 views

Xxe

In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior when parsing project files, the XMLParser that ships with Wecon PIStudio is vulnerable to a XML external entity injection attack, which may allow sensitive information disclosure...

4.3CVSS5.4AI score0.00265EPSS
Exploits0References1Affected Software2
NVD
NVD
added 2018/10/08 12:29 p.m.10 views

CVE-2018-17889

In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior when parsing project files, the XMLParser that ships with Wecon PIStudio is vulnerable to a XML external entity injection attack, which may allow sensitive information disclosure...

5.3CVSS6.2AI score0.00265EPSS
Exploits0References1
Cvelist
Cvelist
added 2017/10/14 9:0 p.m.22 views

CVE-2017-12629

Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML extern...

9.8AI score0.93891EPSS
Exploits11References24
Check Point Advisories
Check Point Advisories
added 2015/11/10 12:0 a.m.5 views

Microsoft .NET Information Disclosure (MS15-118: CVE-2015-6096)

An information disclosure vulnerability exists in Microsoft .NET Framework. The specific vulnerability involves DTD problem in the underlying calls to XmlParser. An attacker who successfully exploited this vulnerability could gain read access to local files on the target system...

4.3CVSS6.3AI score0.2786EPSS
Exploits0
Cvelist
Cvelist
added 2013/12/13 7:0 p.m.18 views

CVE-2013-7095

The XML parser crmflexdata in SAP Customer Relationship Management CRM 7.02 EHP 2 has unknown impact and attack vectors related to an XML External Entity XXE issue...

6.5AI score0.01273EPSS
Exploits0References7
NVD
NVD
added 2011/06/22 10:55 p.m.16 views

CVE-2011-2206

XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service CPU and memory consumption, via an XML external entity declaration in conjunction with an entity reference, a different...

5.5CVSS6.5AI score0.00725EPSS
Exploits0References5
Prion
Prion
added 2011/06/22 10:55 p.m.19 views

Xxe

XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service CPU and memory consumption, via an XML external entity declaration in conjunction with an entity reference, a different...

5.5CVSS6.8AI score0.00725EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2009/06/06 6:0 p.m.34 views

CVE-2009-1955

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

7.1AI score0.02329EPSS
Exploits2References60
Rows per page
Query Builder