Lucene search
+L

6691 matches found

F5 Networks
F5 Networks
•added 2023/02/21 8:00 p.m.•53 views

K20001553: Libgcrypt vulnerability CVE-2018-0495

Security Advisory Description Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the...

4.7CVSS5.6AI score0.00887EPSS
SaveExploits1Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 7:57 p.m.•53 views

K05032915: GNU Binutils vulnerability CVE-2019-1010204

Security Advisory Description GNU binutils gold gold v1.11-v1.16 GNU binutils v2.21-v2.31.1 is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcppfile.h:644. The attack vect...

5.5CVSS6.5AI score0.01115EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:57 p.m.•53 views

K05535399: Linux kernel vulnerability CVE-2017-17855

Security Advisory Description kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging improper use of pointers in place of scalars. CVE-2017-17855 Impact There is no impact; ...

7.8CVSS6.8AI score0.00418EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:57 p.m.•53 views

K63525027: Memcached vulnerability CVE-2018-1000115

Security Advisory Description Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume Network Amplification, CWE-406 vulnerability in the UDP support of the memcached server that can result in denial of service via network flood traffic amplification of 1:50,000 has bee...

7.5CVSS6.7AI score0.88114EPSS
SaveExploits5
F5 Networks
F5 Networks
•added 2023/02/21 7:56 p.m.•53 views

K40264570: Java SE vulnerabilities CVE-2019-2987, CVE-2019-2988, and CVE-2019-2992

Security Advisory Description CVE-2019-2987 Vulnerability in the Java SE product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

4.3CVSS5AI score0.03467EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:56 p.m.•53 views

K29421535: Intel processor vulnerability CVE-2021-33117

Security Advisory Description Improper access control for some 3rd Generation IntelR XeonR Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access. CVE-2021-33117 Impact This vulnerability may potentially allow a local...

5.5CVSS5.2AI score0.00314EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 7:55 p.m.•53 views

K67190282: MySQL X plugin vulnerabilities CVE-2017-3637 and CVE-2017-3646

Security Advisory Description CVE-2017-3637 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: X Plugin. Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols...

5.3CVSS5AI score0.0245EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:53 p.m.•53 views

K52697522: libarchive vulnerability CVE-2016-8689

Security Advisory Description The readHeader function in archivereadsupportformat7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service out-of-bounds read via multiple EmptyStream attributes in a header in a 7zip archive. CVE-2016-8689 Impact For BIG-IP and VIPRION...

7.5CVSS7.5AI score0.03283EPSS
SaveExploits0Affected Software10
F5 Networks
F5 Networks
•added 2023/02/21 7:52 p.m.•53 views

K15623: GnuTLS vulnerability CVE-2009-5138

Security Advisory Description GnuTLS before 2.7.6, when the GNUTLSVERIFYALLOWX509V1CACRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new...

5.8CVSS6.8AI score0.01814EPSS
SaveExploits1Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 7:50 p.m.•53 views

K15902: Apache vulnerability CVE-2010-1623

Security Advisory Description Memory leak in the aprbrigadesplitline function in buckets/aprbrigade.c in the Apache Portable Runtime Utility library aka APR-util before 1.3.10, as used in the modreqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a...

5CVSS6.4AI score0.20167EPSS
SaveExploits0Affected Software19
F5 Networks
F5 Networks
•added 2023/02/21 7:49 p.m.•53 views

K13217575: Session data may be exposed when using a proxy to multiplex connections to the BIG-IP APM system

Security Advisory Description This issue occurs when all of the following conditions are met: The BIG-IP APM system is configured to perform NTLM SSO authentication to back-end servers. A proxy in front of the BIG-IP APM system multiplexes connections from different users. Impact Users may be...

7AI score
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:49 p.m.•54 views

K16441: MIT Kerberos 5 vulnerability CVE-2014-9423

Security Advisory Description The svcauthgssacceptseccontext function in lib/rpc/svcauthgss.c in MIT Kerberos 5 aka krb5 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive...

5CVSS7.8AI score0.0389EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:47 p.m.•53 views

K17335: GnuTLS vulnerability CVE-2015-6251

Security Advisory Description Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName DN entry in a certificate. CVE-2015-6251 Impact This vulnerability allows disruption of service. Security Adviso...

5CVSS7.5AI score0.1903EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 7:46 p.m.•53 views

K9109: Apache Tomcat cross-site scripting vulnerability CVE-2008-1947

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

4.3CVSS4.5AI score0.09776EPSS
SaveExploits2
F5 Networks
F5 Networks
•added 2023/02/21 7:45 p.m.•53 views

K13463: FirePass SQL injection vulnerability CVE-2012-1777

Security Advisory Description F5 has identified a possible SQL injection vulnerability for FirePass. FirePass may not perform adequate user input validation of particular fields. CVE-2012-1777 Impact An unauthenticated attacker may be able to exploit the vulnerability via SQL injection. Security...

7.5CVSS7.7AI score0.02301EPSS
SaveExploits2Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 7:40 p.m.•53 views

K36488941: OpenSSL vulnerability CVE-2016-2106

Security Advisory Description Integer overflow in the EVPEncryptUpdate function in crypto/evp/evpenc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service heap memory corruption via a large amount of data. CVE-2016-2106 Impact A successful attack...

7.5CVSS8.2AI score0.27261EPSS
SaveExploits1Affected Software23
F5 Networks
F5 Networks
•added 2023/02/21 7:29 p.m.•53 views

K15652: SASL vulnerability CVE-2009-0688

Security Advisory Description Description Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via strings that are used as input to the saslencode64 function in lib/saslutil.c...

7.5CVSS5.8AI score0.08206EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:27 p.m.•53 views

K73761475: MySQL Memcached vulnerability CVE-2017-3633

Security Advisory Description Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Memcached. Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

6.5CVSS6.2AI score0.02952EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:25 p.m.•53 views

K17449: Apache Struts 2 vulnerability CVE-2015-5169

Security Advisory Description Cross-site scripting XSS vulnerability in Apache Struts before 2.3.20. CVE-2015-5169 When debug mode is switched on in Apache Struts, under certain conditions, an arbitrary script may be executed in the 'Problem Report' screen. Affected versions are Struts 2.0.0 -...

6.1CVSS6.3AI score0.07533EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:05 p.m.•53 views

K10550253: ImageMagick vulnerability CVE-2016-3715

Security Advisory Description The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image. CVE-2016-3715 Note : This vulnerability is one of the series of vulnerabilities known as ImageTragick. Impact Exploiting...

5.8CVSS6.3AI score0.75383EPSS
SaveExploits5Affected Software10
F5 Networks
F5 Networks
•added 2023/02/21 7:04 p.m.•53 views

K16837: tcpdump before 4.7.2 vulnerabilities CVE-2015-0261, CVE-2015-0261, CVE-2015-2153, CVE-2015-2154, CVE-2015-2155

Security Advisory Description Description CVE-2015-0261 Integer signedness error in the mobilityoptprint function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service out-of-bounds read and crash or possibly execute arbitrary code via a negativ...

7.5CVSS8.7AI score0.19028EPSS
SaveExploits5Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 7:00 p.m.•53 views

K35981055: glibc vulnerability CVE-2018-11237

Security Advisory Description An AVX-512-optimized implementation of the mempcpy function in the GNU C Library aka glibc or libc6 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in mempcpyavx512novzeroupper. CVE-2018-11237 Impact There is no impact; F5...

7.8CVSS7.8AI score0.0088EPSS
SaveExploits3
F5 Networks
F5 Networks
•added 2023/02/21 7:00 p.m.•53 views

K59836191: GnuTLS vulnerabilities CVE-2017-5335, CVE-2017-5336, and CVE-2017-5337

Security Advisory Description CVE-2017-5335 The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service out-of-memory error and crash via a crafted OpenPGP certificate. CVE-2017-5336 Stack-based buffe...

9.8CVSS9.5AI score0.08009EPSS
SaveExploits0Affected Software2
F5 Networks
F5 Networks
•added 2023/02/21 6:59 p.m.•53 views

K81556107: Intel processors vulnerabilities CVE-2019-0123 and CVE-2019-0124

Security Advisory Description CVE-2019-0123 Insufficient memory protection in IntelR 6th Generation Core Processors and greater, supporting SGX, may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2019-0124 Insufficient memory protection in IntelR 6th...

7.8CVSS7.8AI score0.00375EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:55 p.m.•53 views

K13074505: libarchive vulnerability CVE-2016-8687

Security Advisory Description Stack-based buffer overflow in the safefprintf function in tar/util.c in libarchive 3.2.1 allows remote attackers to cause a denial of service via a crafted non-printable multibyte character in a filename. CVE-2016-8687 Impact For BIG-IP and VIPRION platforms that ar...

7.5CVSS7.8AI score0.05258EPSS
SaveExploits0Affected Software11
F5 Networks
F5 Networks
•added 2023/02/21 6:55 p.m.•53 views

K21571420: Multiple Samba vulnerabilities

Security Advisory Description CVE-2022-2031 A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets. A user who has been requested to change their password, can exploit this...

8.8CVSS6.1AI score0.01235EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:54 p.m.•53 views

K53345784: Linux kernel vulnerability CVE-2017-16912

Security Advisory Description The "getpipe" function drivers/usb/usbip/stubrx.c in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service out-of-bounds read via a specially crafted USB over IP packet. CVE-2017-16912 Impact This vulnerability allo...

7.1CVSS6.4AI score0.04069EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 6:54 p.m.•53 views

K12109859: Mozilla NSS vulnerability CVE-2017-5461

Security Advisory Description Mozilla Network Security Services NSS before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact by leveraging...

9.8CVSS9.8AI score0.04741EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:53 p.m.•53 views

K45012029: OpenJDK vulnerability CVE-2020-14796, CVE-2020-14798, CVE-2020-14803

Security Advisory Description CVE-2020-14796 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows...

5.3CVSS4.6AI score0.03186EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:53 p.m.•53 views

K39512927: tcpdump vulnerabilities CVE-2016-7928, CVE-2016-7929, CVE-2016-7930, CVE-2016-7931, and CVE-2016-7933

Security Advisory Description CVE-2016-7928 The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcompprint. CVE-2016-7929 The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniperparseheader. CVE-2016-7930 The LLC/SNAP...

9.8CVSS8.6AI score0.03383EPSS
SaveExploits0Affected Software22
F5 Networks
F5 Networks
•added 2023/02/21 6:53 p.m.•53 views

K54337315: Linux kernel vulnerability CVE-2019-12614

Security Advisory Description An issue was discovered in dlparparseccproperty in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup of prop-name, which might allow an attacker to cause a denial of service NULL pointer dereference and system...

4.7CVSS5.9AI score0.00648EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:53 p.m.•53 views

K34120074: PostgreSQL vulnerability CVE-2020-1720

Security Advisory Description A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to...

6.5CVSS6.7AI score0.01183EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 6:53 p.m.•53 views

K62318311: glibc vulnerability CVE-2017-17426

Security Advisory Description The malloc function in the GNU C Library aka glibc or libc6 2.26 could return a memory block that is too small if an attempt is made to allocate an object whose size is close to SIZEMAX, potentially leading to a subsequent heap overflow. This occurs because the...

8.1CVSS8.9AI score0.01597EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2023/02/21 6:53 p.m.•53 views

K39272405: OpenSSL vulnerability CVE-2016-7052

Security Advisory Description crypto/x509/x509vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service NULL pointer dereference and application crash by triggering a CRL operation. CVE-2016-7052 Impact There is no impact; F5 products are not affected by this vulnerability...

7.5CVSS7.8AI score0.30216EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2023/02/21 6:50 p.m.•53 views

K5534: Apache mod_proxy message format vulnerability CAN-2004-0700

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

7.5CVSS7AI score0.05802EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:50 p.m.•53 views

K05046514: NTP vulnerability CVE-2015-7979

Security Advisory Description NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service client-server association tear down by sending broadcast packets with invalid authentication to a broadcast client. CVE-2015-7979 Impact An attacker may exploit this...

7.5CVSS7.8AI score0.11887EPSS
SaveExploits0Affected Software22
F5 Networks
F5 Networks
•added 2023/02/21 6:49 p.m.•53 views

K42793451: MySQL vulnerabilities CVE-2019-2634, CVE-2019-2635, CVE-2019-2636, CVE-2019-2644, and CVE-2019-2681

Security Advisory Description CVE-2019-2634 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure...

5.1CVSS4.9AI score0.02278EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:49 p.m.•53 views

K69232741: Linux kernel vulnerability CVE-2019-20934

Security Advisory Description An issue was discovered in the Linux kernel before 5.2.6. On NUMA systems, the Linux fair scheduler has a use-after-free in shownumastats because NUMA fault statistics are inappropriately freed, aka CID-16d51a590a8c. CVE-2019-20934 Impact There is no impact; F5...

5.4CVSS6.2AI score0.00317EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:48 p.m.•53 views

K16914: OpenSSL vulnerability CVE-2015-1791

Security Advisory Description Race condition in the ssl3getnewsessionticket function in ssl/s3clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service double fre...

6.8CVSS8.5AI score0.15968EPSS
SaveExploits0Affected Software19
F5 Networks
F5 Networks
•added 2023/02/21 6:48 p.m.•53 views

K27228191: Node.js vulnerability CVE-2018-7159

Security Advisory Description The HTTP parser in all current versions of Node.js ignores spaces in the Content-Length header, allowing input such as Content-Length: 1 2 to be interpreted as having a value of 12. The HTTP specification does not allow for spaces in the Content-Length value and the...

5.3CVSS7.6AI score0.03621EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:48 p.m.•53 views

K51213246: BIG-IP APM AD authentication vulnerability CVE-2021-23008

Security Advisory Description BIG-IP APM AD Active Directory authentication can be bypassed using a spoofed AS-REP Kerberos Authentication Service Response response sent over a hijacked KDC Kerberos Key Distribution Center connection, or from an AD server compromised by an attacker.CVE-2021-23008...

9.8CVSS8.3AI score0.01326EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 6:48 p.m.•53 views

K57774767: Linux kernel vulnerability CVE-2021-45469

Security Advisory Description In f2fssetxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry. CVE-2021-45469 Impact There is no impact; F5 products are not affected by this vulnerability. Security...

7.8CVSS6.4AI score0.00549EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2023/02/21 6:47 p.m.•53 views

K91327225: Linux sudo process vulnerability CVE-2019-18634

Security Advisory Description In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many othe...

7.8CVSS7.9AI score0.19426EPSS
SaveExploits14Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 6:47 p.m.•53 views

K02219239: PCRE vulnerability CVE-2020-14155

Security Advisory Description libpcre in PCRE before 8.44 allows an integer overflow via a large number after a ?C substring. CVE-2020-14155 Impact An attacker may be able cause an integer overflow that negatively impacts applications. Security Advisory Status F5 Product Development has assigned ...

5.3CVSS6.8AI score0.04182EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 6:47 p.m.•53 views

K24624116: OpenSSL vulnerability CVE-2021-23840

Security Advisory Description Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function ca...

7.5CVSS7AI score0.50732EPSS
SaveExploits0Affected Software19
F5 Networks
F5 Networks
•added 2023/02/21 6:47 p.m.•53 views

K01294982: Oracle Java SE vulnerability CVE-2018-2811

Security Advisory Description Vulnerability in the Java SE component of Oracle Java SE subcomponent: Install. Supported versions that are affected are Java SE: 8u162 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes ...

7.7CVSS6.6AI score0.00498EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:47 p.m.•53 views

K32562850: jackson-databind vulnerabilities CVE-2019-16943 and CVE-2019-17531

Security Advisory Description CVE-2019-16943 A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint and the service has the p6spy 3.8.6 jar in t...

9.8CVSS8AI score0.05373EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:47 p.m.•53 views

K82747025: GraphicsMagick vulnerability CVE-2016-5118

Security Advisory Description The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | pipe character at the start of a filename. CVE-2016-5118 Impact A remote attacker may be able to execute arbitrary code on the...

10CVSS8AI score0.49982EPSS
SaveExploits1Affected Software11
F5 Networks
F5 Networks
•added 2023/02/21 6:46 p.m.•53 views

K30683410: systemd vulnerability CVE-2018-16866

Security Advisory Description An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable. CVE-2018-16866 Impact There is n...

4.3CVSS6.4AI score0.01051EPSS
SaveExploits2
F5 Networks
F5 Networks
•added 2023/02/21 6:35 p.m.•53 views

K37236006: SQLite vulnerabilities CVE-2015-3414 and CVE-2015-3415

Security Advisory Description CVE-2015-3414 SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact...

7.5CVSS8AI score0.04663EPSS
SaveExploits0Affected Software2
Total number of security vulnerabilities5000