Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service (child hang) or execute arbitrary code. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 32.8%.
Denial Of Service
RCE
Buffer Overflow
Hylafax
NVD
Exploit-DB
VulDB
CVSS 2.0
6.8
EPSS
32.8%
The RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned RESTWS permissions, allows. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
Denial Of Service
Restful Web Services
NVD
VulDB
CVSS 2.0
4.3
EPSS
0.5%