Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Integer Overflow
Denial Of Service
Linux
Buffer Overflow
Linux Kernel
+4
NVD
GitHub
CVSS 3.1
7.3
EPSS
8.6%
The CDetailView widget in Yii PHP Framework 1.1.14 allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.
RCE
PHP
Code Injection
Yiiframework
NVD
CVSS 2.0
7.5
EPSS
0.6%