Lucene search
+L

6412 matches found

BDU FSTEC
BDU FSTEC
added 2021/06/29 12:00 a.m.10 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to reading beyond the buffer memory boundaries, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the boundaries of the memory buffer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted PDF file...

10CVSS7.8AI score0.05751EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/25 12:00 a.m.12 views

The vulnerability in the `arch/arm/mach-footbridge/personal-pci.c` component of the Linux operating system allows a attacker to disclose sensitive information or cause service failures.

The vulnerability in the arch/arm/mach-footbridge/personal-pci.c component of the Linux operating system relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

7.1CVSS6.7AI score0.00552EPSS
SaveExploits1References10Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/25 12:00 a.m.11 views

Vulnerability of the pfkey_dump function (af_key.c) in the Android operating system, allowing a hacker to increase their privileges

The vulnerability of the pfkeydump function afkey.c in the Android operating system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.4CVSS6.7AI score0.00201EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:00 a.m.12 views

The vulnerability of the CODESYS Control V2 Linux SysFile software suite for industrial automation systems allows a intruder to trigger a service failure.

The vulnerability of the CODESYS Control V2 Linux SysFile software suite for industrial automation exists due to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.4AI score0.0718EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:00 a.m.15 views

The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software suite allows a perpetrator to disclose protected information and cause service interruptions.

The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software system exists due to the reading of data beyond the specified buffer limits. Exploiting this vulnerability can allow a malicious actor to disclose protected information and cause service...

9.4CVSS8.1AI score0.01151EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/06/18 12:00 a.m.11 views

Contiki-NG 缓冲区错误漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT devices. An out-of-bounds read vulnerability exists in the 6LoWPAN implementation in Contiki-NG 4.6 and earlier. The vulnerability stems from the IPv6 header decompression function not performing proper boundary...

9.1CVSS5.6AI score0.0123EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:00 a.m.9 views

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which involves reading beyond the buffer in memory, allows attackers to access confidential information.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information by creating a specially crafted file...

4.2CVSS7.9AI score0.02302EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:00 a.m.9 views

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which involves reading beyond the buffer in memory, allows attackers to access confidential information.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information by creating a specially crafted file...

4.2CVSS7.9AI score0.02051EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:00 a.m.10 views

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which involves reading beyond the buffer in memory, allows attackers to access confidential information.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information by creating a specially crafted file...

4.2CVSS7.9AI score0.0223EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:00 a.m.10 views

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which involves reading beyond the buffer in memory, allows attackers to access confidential information.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information by creating a specially crafted file...

4.2CVSS7.9AI score0.021EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:00 a.m.12 views

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which involves reading beyond the buffer in memory, allows attackers to access confidential information.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information by creating a specially crafted file...

4.2CVSS7.9AI score0.02051EPSS
SaveExploits0References10Affected Software3
ATTACKERKB
ATTACKERKB
added 2021/06/16 12:15 p.m.6 views

CVE-2021-20093

A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server...

9.1CVSS7.8AI score0.33304EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2021/06/15 12:00 a.m.14 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain full control over the application...

6CVSS6.7AI score0.00563EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2021/06/15 12:00 a.m.11 views

PT-2021-19396 · Opentext · Opentext Brava! Desktop

Name of the Vulnerable Software and Affected Versions: OpenText Brava! Desktop version 16.6.4.55 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

7.8CVSS7.7AI score0.01811EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2021/06/10 12:00 a.m.15 views

The vulnerability of the Cortado ThinPrint component (JPEG2000 Parser) in the VMware Workstation hypervisor and the VMware Horizon Client for Windows virtualization client allows a malicious individual to disclose protected information.

The vulnerability of the Cortado ThinPrint component JPEG2000 Parser in the VMware Workstation hypervisor and the VMware Horizon Client for Windows virtualization client system relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow an attacker to...

4CVSS6.5AI score0.00453EPSS
SaveExploits0References4Affected Software2
CNNVD
CNNVD
added 2021/06/09 12:00 a.m.8 views

Adobe Animate 缓冲区错误漏洞

Adobe Animate is a multimedia authoring and computer animation program. An out-of-bounds read vulnerability exists in Adobe Animate 21.0.6 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code...

7.8CVSS6AI score0.03201EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2020:1553-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.2AI score0.04059EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.9 views

SUSE: Security Advisory (SUSE-SU-2015:0676-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.8AI score0.03501EPSS
SaveExploits0References4
Oracle linux
Oracle linux
added 2021/06/04 12:00 a.m.271 views

glibc security update

2.28-151.0.1.el84 - merge RH patches for ol8-u4 release Review-exception: Patch merge - Provide glibc.pthread.mutexspincount tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag ...

9.8CVSS0.4AI score0.04731EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2021/06/03 12:00 a.m.14 views

FreeBSD : zeek -- several potential DoS vulnerabilities (a550d62c-f78d-4407-97d9-93876b6741b9)

Tim Wojtulewicz of Corelight reports : Fix potential Undefined Behavior in decodenetbiosname and decodenetbiosnametype BIFs. The latter has a possibility of a remote heap-buffer-overread, making this a potential DoS vulnerability. Add some extra length checking when parsing mobile ipv6 packets. D...

5.5AI score
SaveExploits0References2
Rows per page
Query Builder