Lucene search
+L

6415 matches found

BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.20 views

The vulnerability of the ImfDwaCompressor.cpp library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels. This vulnerability stems from reading data beyond the allowable buffer size, allowing attackers to cause system failures.

The vulnerability of the ImfDwaCompressor.cpp library, a software component for image storage with wide dynamic range brightness in OpenEXR format, lies in the execution of operations that exceed the allowable buffer data size limits. Exploiting this vulnerability could allow an attacker to cause...

6.5CVSS7.1AI score0.01807EPSS
SaveExploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.12 views

The vulnerability of the fetch_interval_quantifier function in the Oniguruma library, related to reading data beyond the allowable buffer size, allows a hacker to trigger a service failure.

The vulnerability of the fetchintervalquantifier function in the Oniguruma library relates to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS6.8AI score0.06889EPSS
SaveExploits1References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.10 views

The vulnerability of the `str_lower_case_match` component in the Oniguruma regular expression library, which involves reading data beyond the allowed buffer limits, allows attackers to cause service interruptions.

The vulnerability of the strlowercasematch component in the Oniguruma regular expression library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS6.7AI score0.02942EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.22 views

The vulnerability of the library for simplifying project migration in Libbsd, related to reading beyond the permissible buffer data limits, allows attackers to gain access to confidential data and also trigger service failures.

The vulnerability of the library for simplifying project migration in Libbsd is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures...

9.1CVSS7.7AI score0.02805EPSS
SaveExploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.16 views

The vulnerability of the `license_read_new_or_upgrade_license_packet` component in the FreeRDP remote desktop protocol, related to reading data beyond the allowed boundaries of the buffer, allows a intruder to access confidential data and also trigger a service failure.

The vulnerability of the licensereadneworupgradelicensepacket component in the FreeRDP remote desktop protocol relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data and also cause servic...

6.5CVSS7.4AI score0.02114EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.13 views

The vulnerability of the ImfTileOffsets.cpp library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from reading data beyond the allowable buffer size. This allows attackers to cause system failures.

The vulnerability of the ImfTileOffsets.cpp library in software for storing images with wide dynamic range brightness in OpenEXR is related to the operation being performed within acceptable buffer data limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

6.5CVSS6.9AI score0.01793EPSS
SaveExploits1References11Affected Software3
CNNVD
CNNVD
added 2021/07/13 12:00 a.m.13 views

Siemens Jt2go 和 Siemens Teamcenter Visualization 缓冲区错误漏洞

Siemens Jt2go is a JT file viewer.Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios. A buffer over-read vulnerability exists in Siemens JT2Go versions prior to 13.2 and Teamcenter Visualization versions prior to 13.2. The...

5.5CVSS5.8AI score0.01217EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:00 a.m.14 views

The vulnerability of the PALM image encoding engine in the ImageMagick console-based graphics editor allows an attacker to trigger a service failure by exceeding the allowed buffer data size.

The vulnerability of the PALM image encoding engine in the ImageMagick graphics editor involves reading data beyond the acceptable buffer limits. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

5.3CVSS6.9AI score0.01016EPSS
SaveExploits1References14Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:00 a.m.8 views

The vulnerability of the `xmlEncodeEntitiesInternal` function in the `libxml2/entities.c` file of the Libxml2 library involves reading data beyond the allowed buffer limits. This allows attackers to access confidential data and also trigger a denial-of-service attack.

The vulnerability of the xmlEncodeEntitiesInternal function in the libxml2/entities.c file of the Libxml2 library is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service interruptions...

6.5CVSS7.1AI score0.03774EPSS
SaveExploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:00 a.m.15 views

The vulnerability of the ReadTIFFImage function in the coders/tiff.c component of the console-based image editing tool ImageMagick, which involves reading data beyond the allowable buffer limits, allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ReadTIFFImage function in the coders/tiff.c component of the console-based image editing tool ImageMagick is related to an incorrect memory allocation limit. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and...

8.8CVSS6.6AI score0.04246EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/06 12:00 a.m.12 views

The vulnerability of the WriteOnePNGImage() function in the ImageMagick console graphics editor’s coders/png.c component allows a attacker to cause a service failure by reading data beyond the allowed buffer limits.

The vulnerability of the WriteOnePNGImage function in the ImageMagick console graphics editor’s coders/png.c file is related to an incorrect condition for exiting a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created file...

5.3CVSS6.7AI score0.01016EPSS
SaveExploits1References14Affected Software4
CNNVD
CNNVD
added 2021/07/05 12:00 a.m.12 views

qualcomm 芯片缓冲区错误漏洞

Qualcomm MDM9206 and others are products of Qualcomm Incorporated Qualcomm.The MDM9206 is a central processing unit CPU product.The APQ8053 is a central processing unit CPU product.The SDX55 is a modem. The qualcomm chips have a buffer error vulnerability that stems from an incorrect overflow che...

4.6CVSS5.5AI score0.00142EPSS
SaveExploits0References3
Rosalinux
Rosalinux
added 2021/07/02 4:39 p.m.72 views

Advisory ROSA-SA-2021-1832

Software: exempi 2.2.0 OS: Cobalt 7.9 CVE-ID: CVE-2017-18235 CVE-Crit: MEDIUM CVE-DESC: An issue was discovered in Exempi before 2.4.3. The VPXChunk class in XMPFiles / source / FormatSupport / WEBPSupport.cpp does not guarantee non-zero width and height values, allowing remote attackers to cause...

5.5CVSS7.5AI score0.0132EPSS
SaveExploits5
BDU FSTEC
BDU FSTEC
added 2021/07/02 12:00 a.m.13 views

The vulnerability of the `virgl_cmd_get_capset` function in the `hw/display/virtio-gpu-3d.c` component of the QEMU hardware emulation software occurs due to reading data beyond the buffer’s acceptable limits. This allows an attacker to trigger a service failure.

The vulnerability of the virglcmdgetcapset function in the hw/display/virtio-gpu-3d.c component of the QEMU hardware emulation software is related to reading data from a buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to trigger a service failure using the...

5.5CVSS7.1AI score0.00429EPSS
SaveExploits0References7Affected Software2
OSV
OSV
added 2021/07/01 3:15 a.m.9 views

UBUNTU-CVE-2021-36087

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmapmatchany called indirectly from cilcheckneverallow. This occurs because there is sometimes a lack of checks for invalid statements in an optional block...

3.3CVSS6.9AI score0.00457EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2021/06/30 12:00 a.m.11 views

The vulnerability of the vgacon subsystem in the Linux operating system allows a attacker to compromise the accessibility of protected information.

The vulnerability of the vgacon subsystem in the Linux operating system exists due to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

5.9CVSS6.6AI score0.00519EPSS
SaveExploits1References18Affected Software3
OSV
OSV
added 2021/06/29 3:15 p.m.10 views

CVE-2021-31512

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS7.5AI score0.01811EPSS
SaveExploits0References3
OSV
OSV
added 2021/06/29 3:15 p.m.9 views

CVE-2021-31510

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS6.1AI score0.01811EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/06/29 3:15 p.m.8 views

CVE-2021-31510

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS7.2AI score0.01811EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/06/29 3:15 p.m.7 views

CVE-2021-31512

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS7.2AI score0.01811EPSS
SaveExploits0References2
Rows per page
Query Builder