Sun, Sep 25 · 10:59 AM CDTCVE-2016-4658
9.8/10 · Must read/watchNVDvuln
Summary
xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption)
CVECVE-2016-4658
SeverityCRITICAL
TypeUPDATED
PublishedSun, Sep 25 · 10:59 AM CDT
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2017-16931
9.8/10 · Must read/watchNVDvuln
Summary
parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.
CVECVE-2017-16931
SeverityCRITICAL
TypeUPDATED
PublishedThu, Nov 23 · 09:29 PM CST
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2017-7375
9.8/10 · Must read/watchNVDvuln
Summary
A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD attributes). Depending on the context, this may expose a higher-risk attack surface in libxml2 not usually reachable with
CVECVE-2017-7375
SeverityCRITICAL
TypeUPDATED
PublishedMon, Feb 19 · 07:29 PM CST
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2017-7376
9.8/10 · Must read/watchNVDvuln
Summary
Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.
CVECVE-2017-7376
SeverityCRITICAL
TypeUPDATED
PublishedMon, Feb 19 · 07:29 PM CST
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2018-18928
9.8/10 · Must read/watchNVDvuln
Summary
International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.
CVECVE-2018-18928
SeverityCRITICAL
TypeUPDATED
PublishedSun, Nov 04 · 08:29 PM CST
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2019-1010022
9.8/10 · Must read/watchNVDvuln
Summary
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate "this is being treated as a n
CVECVE-2019-1010022
SeverityCRITICAL
TypeUPDATED
PublishedMon, Jul 15 · 04:15 AM CDT
ModifiedWed, Oct 14 · 09:17 AM CDT
CVE-2019-10160
9.8/10 · Must read/watchNVDvuln
Summary
A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application par
CVECVE-2019-10160
SeverityCRITICAL
TypeUPDATED
PublishedFri, Jun 07 · 06:29 PM CDT
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2019-12900
9.8/10 · Must read/watchNVDvuln
Summary
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
CVECVE-2019-12900
SeverityCRITICAL
TypeUPDATED
PublishedWed, Jun 19 · 11:15 PM CDT
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2019-18224
9.8/10 · Must read/watchNVDvuln
Summary
idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.
CVECVE-2019-18224
SeverityCRITICAL
TypeUPDATED
PublishedMon, Oct 21 · 05:15 PM CDT
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2019-19317
9.8/10 · Must read/watchNVDvuln
Summary
lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.
CVECVE-2019-19317
SeverityCRITICAL
TypeUPDATED
PublishedThu, Dec 05 · 02:15 PM CST
ModifiedWed, Oct 14 · 08:16 AM CDT
CVE-2019-19646
9.8/10 · Must read/watchNVDvuln
Summary
pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.
CVECVE-2019-19646
SeverityCRITICAL
TypeUPDATED
PublishedMon, Dec 09 · 07:15 PM CST
ModifiedWed, Oct 14 · 08:16 AM CDT
CVE-2019-5481
9.8/10 · Must read/watchNVDvuln
Summary
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
CVECVE-2019-5481
SeverityCRITICAL
TypeUPDATED
PublishedMon, Sep 16 · 07:15 PM CDT
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2019-5482
9.8/10 · Must read/watchNVDvuln
Summary
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
CVECVE-2019-5482
SeverityCRITICAL
TypeUPDATED
PublishedMon, Sep 16 · 07:15 PM CDT
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2019-8457
9.8/10 · Must read/watchNVDvuln
Summary
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
CVECVE-2019-8457
SeverityCRITICAL
TypeUPDATED
PublishedThu, May 30 · 04:29 PM CDT
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2019-9169
9.8/10 · Must read/watchNVDvuln
Summary
In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.
CVECVE-2019-9169
SeverityCRITICAL
TypeUPDATED
PublishedTue, Feb 26 · 02:29 AM CST
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2019-9636
9.8/10 · Must read/watchNVDvuln
Summary
Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.par
CVECVE-2019-9636
SeverityCRITICAL
TypeUPDATED
PublishedFri, Mar 08 · 09:29 PM CST
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2020-11656
9.8/10 · Must read/watchNVDvuln
Summary
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
CVECVE-2020-11656
SeverityCRITICAL
TypeUPDATED
PublishedThu, Apr 09 · 03:15 AM CDT
ModifiedWed, Oct 14 · 10:17 AM CDT
CVE-2019-20367
9.1/10 · Must read/watchNVDvuln
Summary
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
CVECVE-2019-20367
SeverityCRITICAL
TypeUPDATED
PublishedWed, Jan 08 · 05:15 PM CST
ModifiedWed, Oct 14 · 08:17 AM CDT
CVE-2019-3859
9.1/10 · Must read/watchNVDvuln
Summary
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
CVECVE-2019-3859
SeverityCRITICAL
TypeUPDATED
PublishedThu, Mar 21 · 04:01 PM CDT
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2019-9948
9.1/10 · Must read/watchNVDvuln
Summary
urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call.
CVECVE-2019-9948
SeverityCRITICAL
TypeUPDATED
PublishedSat, Mar 23 · 06:29 PM CDT
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2016-5131
8.8/10 · Worth your timeNVDvuln
Summary
Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.
CVECVE-2016-5131
SeverityHIGH
TypeUPDATED
PublishedSat, Jul 23 · 07:59 PM CDT
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2017-17512
8.8/10 · Worth your timeNVDvuln
Summary
sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.
CVECVE-2017-17512
SeverityHIGH
TypeUPDATED
PublishedMon, Dec 11 · 06:29 AM CST
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2019-3855
8.8/10 · Worth your timeNVDvuln
Summary
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVECVE-2019-3855
SeverityHIGH
TypeUPDATED
PublishedThu, Mar 21 · 09:29 PM CDT
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2019-3856
8.8/10 · Worth your timeNVDvuln
Summary
An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVECVE-2019-3856
SeverityHIGH
TypeUPDATED
PublishedMon, Mar 25 · 07:29 PM CDT
ModifiedWed, Oct 14 · 07:16 AM CDT
CVE-2019-3857
8.8/10 · Worth your timeNVDvuln
Summary
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVECVE-2019-3857
SeverityHIGH
TypeUPDATED
PublishedMon, Mar 25 · 07:29 PM CDT
ModifiedWed, Oct 14 · 07:16 AM CDT
