Lucene search
+L

7542 matches found

Positive Technologies
Positive Technologies
added 2024/02/04 12:00 a.m.12 views

PT-2024-18490 · Tvapi · Tvapi

Name of the Vulnerable Software and Affected Versions: TVAPI affected versions not specified Description: The issue is related to a possible out of bounds write in TVAPI due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User...

6.7CVSS6.4AI score0.00112EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/02/04 12:00 a.m.14 views

PT-2024-18501 · Mediatek +1 · Mt6580 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing bounds check in keyInstall, which could lead to an out of bounds write. This might result in local escalation of...

6.7CVSS6.5AI score0.00112EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/02/04 12:00 a.m.12 views

PT-2024-18499 · Unknown · Alac Decoder

Name of the Vulnerable Software and Affected Versions: alac decoder affected versions not specified Description: In the alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges neede...

9.8CVSS9AI score0.00446EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/02/04 12:00 a.m.20 views

PT-2024-18494 · Mediatek +3 · Mt2713 +7

Name of the Vulnerable Software and Affected Versions: In da affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interactio...

6.7CVSS6.8AI score0.00223EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/02/04 12:00 a.m.11 views

PT-2024-18489 · Tvapi · Tvapi

Name of the Vulnerable Software and Affected Versions: TVAPI affected versions not specified Description: The issue is related to a possible out of bounds write in TVAPI due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User...

6.7CVSS6.5AI score0.00107EPSS
SaveExploits0References6
Veracode
Veracode
added 2024/02/02 10:25 a.m.20 views

Buffer Overflow

Vyper is vulnerable to Buffer Overflow Vulnerability. The vulnerability is due to the improper bounds check for slices because it does not account for the potential overflow of start + length when non-literal values are used. This issue can be exploited by an attacker to perform out of bounds...

9.8CVSS7.2AI score0.00902EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2024/02/01 8:51 p.m.102 views

GHSA-9X7F-GWXQ-6F2C Vyper's bounds check on built-in `slice()` function can be overflowed

Summary The bounds check for slices does not account for the ability for start + length to overflow when the values aren't literals. If a slice function uses a non-literal argument for the start or length variable, this creates the ability for an attacker to overflow the bounds check. This issue...

9.8CVSS9.7AI score0.00902EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2024/02/01 8:51 p.m.32 views

Vyper's bounds check on built-in `slice()` function can be overflowed

Summary The bounds check for slices does not account for the ability for start + length to overflow when the values aren't literals. If a slice function uses a non-literal argument for the start or length variable, this creates the ability for an attacker to overflow the bounds check. This issue...

9.8CVSS9.7AI score0.00902EPSS
SaveExploits1References6Affected Software1
NVD
NVD
added 2024/02/01 5:15 p.m.56 views

CVE-2024-24561

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In versions 0.3.10 and earlier, the bounds check for slices does not account for the ability for start + length to overflow when the values aren't literals. If a slice function uses a non-literal argument for the start ...

9.8CVSS9.6AI score0.00902EPSS
SaveExploits1References3
Prion
Prion
added 2024/02/01 5:15 p.m.26 views

Design/Logic Flaw

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In versions 0.3.10 and earlier, the bounds check for slices does not account for the ability for start + length to overflow when the values aren't literals. If a slice function uses a non-literal argument for the start ...

7.5CVSS7.3AI score0.00902EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/01 4:37 p.m.4 views

CVE-2024-24561 Vyper bounds check on built-in `slice()` function can be overflowed

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In versions 0.3.10 and earlier, the bounds check for slices does not account for the ability for start + length to overflow when the values aren't literals. If a slice function uses a non-literal argument for the start ...

9.8CVSS7.3AI score0.00902EPSS
SaveExploits1References3
OSV
OSV
added 2024/02/01 4:37 p.m.26 views

CVE-2024-24561 Vyper bounds check on built-in `slice()` function can be overflowed

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In versions 0.3.10 and earlier, the bounds check for slices does not account for the ability for start + length to overflow when the values aren't literals. If a slice function uses a non-literal argument for the start ...

9.8CVSS9.2AI score
SaveExploits0References5
Cvelist
Cvelist
added 2024/02/01 4:37 p.m.66 views

CVE-2024-24561 Vyper bounds check on built-in `slice()` function can be overflowed

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In versions 0.3.10 and earlier, the bounds check for slices does not account for the ability for start + length to overflow when the values aren't literals. If a slice function uses a non-literal argument for the start ...

9.8CVSS9.8AI score0.00902EPSS
SaveExploits1References3
OSV
OSV
added 2024/02/01 12:00 a.m.11 views

PUB-A-309407679

there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.1AI score0.00089EPSS
SaveExploits0References1
zdt
zdt
added 2024/01/31 12:00 a.m.361 views

glibc qsort() Out-Of-Bounds Read / Write Exploit

Qualys discovered a memory corruption in the glibc's qsort function, due to a missing bounds check. To be vulnerable, a program must call qsort with a nontransitive comparison function a function cmpint a, int b that returns a - b, for example and with a large number of attacker-controlled elemen...

8.4CVSS6.9AI score0.04794EPSS
SaveExploits7
Ubuntu
Ubuntu
added 2024/01/30 12:42 p.m.385 views

USN-6616-1: OpenLDAP vulnerability

It was discovered that OpenLDAP was not properly performing bounds checks when executing functions related to LDAP URLs. An attacker could possibly use this issue to cause a denial of service...

7.5CVSS7AI score0.01947EPSS
SaveExploits0
OSV
OSV
added 2024/01/18 3:15 a.m.10 views

CVE-2023-48356

In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

4.4CVSS5.9AI score0.00082EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/18 3:15 a.m.8 views

CVE-2023-48355

In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

4.4CVSS5.9AI score0.00082EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/18 3:15 a.m.32 views

CVE-2023-48355

In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

4.4CVSS4.8AI score0.00082EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/18 3:15 a.m.26 views

CVE-2023-48356

In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

4.4CVSS4.8AI score0.00082EPSS
SaveExploits0References1
Rows per page
Query Builder