Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 102

Export CSV
CVE-2019-12402

apache-commons-compress: Infinite loop in name encoding algorithm

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.

CVSS 3.1 · 7.5 High EPSS 16.2% KEV · Not listed
Vendors
Apache Fedoraproject Oracle and 1 more
Products
Commons Compress Fedora Banking Payments and 17 more
CVE-2018-14550

libpng: Stack-based buffer overflow in contrib/pngminus/pnm2png.c:get_token() potentially leading to arbitrary code execution

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.

CVSS 3.1 · 8.8 High EPSS 3.5% KEV · Not listed
Vendors
Libpng Netapp Oracle
Products
Libpng Active Iq Unified Manager Oncommand Api Services and 2 more