Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

three project three vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2020-28496
This affects the package three prior to 0.125.0. This can happen when handling rgb or hsl colors. PoC: var three = require('three') function build_blank (n) { var ret = "rgb(" for (var i = 0; i < n; i++) { ret += " " } return ret + ""; }...
Three Project Three
4.3
CVSSv2
CVE-2012-1147
readfilemap.c in expat prior to 2.1.0 allows context-dependent malicious users to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
Apple Mac Os X 10.11.1Apple Mac Os X 10.11.0Libexpat Project Libexpat 2.0.0Libexpat Project Libexpat 1.95.8Libexpat Project Libexpat 1.95.7Libexpat Project Libexpat 1.95.6Libexpat Project Libexpat 1.95.5Libexpat Project Libexpat 1.95.4Libexpat Project Libexpat 1.95.2Libexpat Project Libexpat 1.95.1Libexpat Project Libexpat
5
CVSSv2
CVE-2012-1148
Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat prior to 2.1.0 allows context-dependent malicious users to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expandi...
Libexpat Project Libexpat 2.0.0Libexpat Project Libexpat 1.95.8Libexpat Project LibexpatLibexpat Project Libexpat 1.95.5Libexpat Project Libexpat 1.95.4Libexpat Project Libexpat 1.95.7Libexpat Project Libexpat 1.95.6Libexpat Project Libexpat 1.95.2Libexpat Project Libexpat 1.95.1Apple Mac Os X
5
CVSSv2
CVE-2018-17145
Bitcoin Core 0.16.x prior to 0.16.2 and Bitcoin Knots 0.16.x prior to 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INVDoS. NOTE: this can also affect other cryptocurrencies, e.g., if they were forked from Bitcoin C...
Bcoin BcoinBitcoin Bitcoin CoreBitcoinknots Bitcoin KnotsBtcd Project Btcd 0.3.0Btcd Project Btcd 0.3.1Btcd Project Btcd 0.3.2Btcd Project Btcd 0.3.3Btcd Project Btcd 0.4.0Btcd Project Btcd 0.5.0Btcd Project Btcd 0.6.0Btcd Project Btcd 0.7.0Btcd Project Btcd 0.8.0Btcd Project Btcd 0.9.0Btcd Project Btcd 0.10.0Btcd Project Btcd 0.11.0Btcd Project Btcd 0.11.1Btcd Project Btcd 0.12.0Btcd Project Btcd 0.13.0Btcd Project Btcd 0.20.0Btcd Project Btcd 0.20.1Decred DcrdLitecoin Litecoin
6.4
CVSSv2
CVE-2015-8397
The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM (aka GDCM) prior to 2.6.2 allows remote malicious users to obtain sensitive information from process memory or cause a denial of service (application crash) via an embedded...
Grassroots Dicom Project Grassroots Dicom
7.5
CVSSv2
CVE-2001-0318
Format string vulnerability in ProFTPD 1.2.0rc2 may allow malicious users to execute arbitrary commands by shutting down the FTP server while using a malformed working directory (cwd).
Proftpd Project Proftpd 1.2.0 Rc2
NA
CVE-2022-36083
JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js, Browser, Cloudflare Workers, Electron, and Deno. The PBKDF2-based JWE key management algorithms expect a JOSE Header Parameter named ...
Jose Project Jose
10
CVSSv2
CVE-2012-5958
Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) prior to 1.6.18 allows remote malicious users to execute arbitrary code via a UDP p...
Libupnp Project Libupnp 1.6.12Libupnp Project Libupnp 1.6.11Libupnp Project Libupnp 1.6.4Libupnp Project Libupnp 1.6.3Libupnp Project Libupnp 1.4.3Libupnp Project Libupnp 1.4.2Libupnp Project Libupnp 1.6.16Libupnp Project Libupnp 1.6.15Libupnp Project Libupnp 1.6.8Libupnp Project Libupnp 1.6.7Libupnp Project Libupnp 1.6.0Libupnp Project Libupnp 1.4.7Libupnp Project Libupnp 1.6.14Libupnp Project Libupnp 1.6.13Libupnp Project Libupnp 1.6.6Libupnp Project Libupnp 1.6.5Libupnp Project Libupnp 1.4.6Libupnp Project Libupnp 1.4.5Libupnp Project Libupnp 1.4.4Libupnp Project LibupnpLibupnp Project Libupnp 1.6.10Libupnp Project Libupnp 1.6.9
4.3
CVSSv2
CVE-2012-0876
The XML parser (xmlparse.c) in expat prior to 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent malicious users to cause a denial of service (CPU consumption) via an XML file with many identifiers wit...
Libexpat Project LibexpatPython PythonDebian Debian Linux 7.0Debian Debian Linux 6.0Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 11.10Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 12.04Oracle Solaris 11.3Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Server Aus 6.2Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Desktop 5.0Redhat Storage 2.0Redhat Enterprise Linux Eus 6.2
6.8
CVSSv2
CVE-2018-19027
Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
Omron Cx-oneOmron Cx-protocol
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook