Lucene search
K

5836 matches found

Vulnrichment
Vulnrichment
added 2023/11/01 5:13 p.m.8 views

CVE-2023-5482

Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

6.6AI score0.07094EPSS
Exploits0References9
Cvelist
Cvelist
added 2023/11/01 5:13 p.m.23 views

CVE-2023-5482

Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

8.3AI score0.07094EPSS
Exploits0References9
Debian CVE
Debian CVE
added 2023/11/01 5:13 p.m.40 views

CVE-2023-5482

Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.9AI score0.07094EPSS
Exploits0
CVE
CVE
added 2023/11/01 5:13 p.m.222 views

CVE-2023-5482

CVE-2023-5482 affects Google Chrome/Chromium before 119.0.6045.105 due to insufficient data validation in USB handling, enabling a remote attacker to trigger out-of-bounds memory access via a crafted HTML page. Impact is described as high, with potential memory corruption or crash; exploitation s...

8.8CVSS7.9AI score0.07094EPSS
Exploits0References9Affected Software1
CNNVD
CNNVD
added 2023/10/31 12:0 a.m.3 views

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that originates from insufficient data validation in the USB module...

8.8CVSS6.6AI score0.07094EPSS
Exploits0References8
FreeBSD
FreeBSD
added 2023/10/31 12:0 a.m.37 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This update includes 15 security fixes: 1492698 High CVE-2023-5480: Inappropriate implementation in Payments. Reported by Vsevolod Kokorin Slonser of Solidlab on 2023-10-14 1492381 High CVE-2023-5482: Insufficient data validation in USB. Reported by DarkNavy on 2023-10-13...

8.8CVSS6.9AI score0.07094EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/10/27 12:56 a.m.2 views

SUSE CVE-2023-40477

RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS7.5AI score0.1308EPSS
Exploits1References5
NVD
NVD
added 2023/10/26 8:15 p.m.11 views

CVE-2023-39427

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build 1204.77, the affected applications lack proper validation of user-supplied data when parsing XE files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code ...

7.8CVSS7.8AI score0.00202EPSS
Exploits0References1
Prion
Prion
added 2023/10/26 8:15 p.m.14 views

Design/Logic Flaw

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build 1204.77, the affected applications lack proper validation of user-supplied data when parsing XE files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code ...

4.4CVSS7.8AI score0.00202EPSS
Exploits0References1Affected Software5
CNNVD
CNNVD
added 2023/10/26 12:0 a.m.3 views

Ashlar Incorporated Ashlar-Vellum Graphite Buffer Error Vulnerability

Ashlar Incorporated Ashlar-Vellum is the development platform for Ashlar Incorporated's computer-aided design CAD and 3D modeling software. A security vulnerability exists in Ashlar Incorporated Ashlar-Vellum Graphite version v13.0.48, which stems from a lack of proper validation of user-supplied...

7.8CVSS6.8AI score0.0026EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/10/26 12:0 a.m.3 views

PT-2023-7352 · Ashlar Vellum · Ashlar-Vellum Graphite

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Graphite version 13.0.48 Description: The issue is related to a lack of proper validation of user-supplied data when parsing VC6 files, which could lead to an out-of-bounds read. This may allow an attacker to execute arbitrary...

7.8CVSS7.8AI score0.0026EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2023/10/23 12:0 a.m.4 views

The vulnerability of the Oracle Database Recovery Manager component of the Oracle Database Server database management system allows a perpetrator to trigger a service failure.

The vulnerability of the Oracle Database Recovery Manager component of the Oracle Database Server management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

6.8CVSS5.6AI score0.0058EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2023/10/19 6:15 p.m.2 views

CVE-2023-35986

Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process...

7.8CVSS6.5AI score0.00205EPSS
Exploits0References1
Prion
Prion
added 2023/10/19 6:15 p.m.19 views

Design/Logic Flaw

Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process...

4.4CVSS7.8AI score0.00201EPSS
Exploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/10/19 12:0 a.m.28 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00222EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/19 12:0 a.m.19 views

Siemens Tecnomatix Plant Simulation STP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00213EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.4 views

The vulnerability of the Packet Forwarding Engine (PFE) module in Junos OS and Junos OS Evolved operating systems allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Junos OS and Junos OS Evolved operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.5CVSS7.1AI score0.00515EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.2 views

The vulnerability of the DirectMusic component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the DirectMusic component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00955EPSS
Exploits0References2
Nextcloud
Nextcloud
added 2023/10/16 7:22 a.m.37 views

Inviting excessive long email addresses to a calendar event makes the server unresponsive

None...

4.3CVSS4.8AI score0.00386EPSS
Exploits1References2Affected Software1
Veracode
Veracode
added 2023/10/13 1:8 p.m.32 views

Denial Of Service (DoS)

libfrr.so is vulnerable to Denial of service attack. The vulnerability is caused by a lack of validation of the contents of stream data. Availability of the system is impacted as a results of exploitation of this vulnerability...

7.5CVSS6.7AI score0.02152EPSS
Exploits1References7Affected Software1
Rows per page
Query Builder