Lucene search
+L

4482 matches found

BDU FSTEC
BDU FSTEC
added 2018/08/23 12:00 a.m.14 views

The vulnerability of the Graphics Device Interface component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or...

7.6CVSS8.4AI score0.63626EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2018/08/23 12:00 a.m.18 views

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer, related to the execution of operations beyond the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

7.6CVSS8.3AI score0.23751EPSS
SaveExploits4References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2018/08/23 12:00 a.m.11 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

10CVSS6.2AI score0.14773EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/08/17 12:00 a.m.14 views

The vulnerability of microprogrammed software in HP PageWide, DesignJet, AMP, Deskjet, Envy, Ink Tank, Officejet, Photosmart, and Smart Tank printers arises from an operation that goes beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of microprogrammed software on HP PageWide, DesignJet, AMP, Deskjet, Envy, Ink Tank, Officejet, Photosmart, and Smart Tank devices arises from operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code ...

10CVSS6.3AI score0.38896EPSS
SaveExploits1References2Affected Software146
RedHat Linux
RedHat Linux
added 2018/08/16 4:06 p.m.11 views

curl: IMAP FETCH response out of bounds read

A buffer overrun flaw was found in the IMAP handler of libcurl. By tricking an unsuspecting user into connecting to a malicious IMAP server, an attacker could exploit this flaw to potentially cause information disclosure or crash the application...

9.1CVSS7.4AI score0.0608EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2018/08/09 4:20 a.m.68 views

Security Bulletin: Multiple Vulnerabilities in Current Release of IBM® SDK for Node.js™

Summary Multiple vulnerabilities in OpenSSL disclosed on August 6, 2014 by the OpenSSL Project, plus a vulnerability in the V8 JavaScript engine Vulnerability Details CVE-ID: CVE-2014-3512 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an internal buffer overrun. A remote...

7.5CVSS1.2AI score0.68979EPSS
SaveExploits1Affected Software1
exploitpack
exploitpack
added 2018/07/19 12:00 a.m.34 views

Google Chrome - Swiftshader Texture Allocation Integer Overflow

Google Chrome - Swiftshader Texture Allocation Integer Overflow There's a remotely triggerable memory corruption issue in SwiftShader that's reachable from WebGL, resulting from an integer overflow issue. In the GPU process there is validation on the sizes passed to texture creation functions to...

0.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2018/07/12 12:00 a.m.15 views

The vulnerability in the implementation of the Web Worker mechanism of Mozilla Firefox allows a perpetrator to trigger a service failure.

The vulnerability of the Web Worker mechanism implemented by Mozilla Firefox lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

9.8CVSS8.2AI score0.01597EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2018/07/05 12:00 a.m.12 views

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer browsers allows a perpetrator to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer browsers is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS8AI score0.16103EPSS
SaveExploits0References5Affected Software2
Tenable Nessus
Tenable Nessus
added 2018/07/03 12:00 a.m.38 views

Scientific Linux Security Update : zsh on SL6.x i386/x86_64 (20180619)

Security Fixes : - zsh: Stack-based buffer overflow in genmatchesfiles at compctl.c CVE-2018-1083 - zsh: buffer overflow when scanning very long directory paths for symbolic links CVE-2014-10072 - zsh: buffer overrun in symlinks CVE-2017-18206 - zsh: buffer overflow in utils.c:checkmailpath can...

9.8CVSS8.2AI score0.02891EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2018/06/29 12:00 a.m.13 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

7.6CVSS8.3AI score0.1617EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/06/29 12:00 a.m.15 views

The vulnerability of Internet Explorer’s JavaScript script handlers allows a hacker to execute arbitrary code.

The vulnerability of Internet Explorer’s JavaScript script handlers arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or Microsoft Office document...

7.6CVSS8AI score0.1632EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/06/29 12:00 a.m.13 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted web page content...

7.6CVSS8.3AI score0.61236EPSS
SaveExploits4References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/06/29 12:00 a.m.13 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

7.6CVSS8.3AI score0.1617EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/06/29 12:00 a.m.14 views

The vulnerability of JavaScript script handlers in Internet Explorer allows a perpetrator to execute arbitrary code.

The vulnerability of JavaScript script handlers in Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or Microsoft Office document...

7.6CVSS8AI score0.1632EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/06/22 12:00 a.m.14 views

The vulnerability of the Microsoft Office software arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file, from a remote location...

9.3CVSS6.3AI score0.19544EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/06/22 12:00 a.m.14 views

The vulnerability of the form development tool for data input based on XML, Microsoft InfoPath, arises from errors in object processing in memory, allowing attackers to execute arbitrary code.

The vulnerability of the form development tool for input data based on XML is due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

9.3CVSS6.2AI score0.17944EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/06/22 12:00 a.m.13 views

The vulnerability of Microsoft Excel editors arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted XLS file...

9.3CVSS6.4AI score0.2145EPSS
SaveExploits0References4
OSV
OSV
added 2018/06/20 1:46 p.m.11 views

SUSE-SU-2018:1765-1 Security update for ntp

This update for ntp fixes the following issues: - Update to 4.2.8p11 bsc1082210: CVE-2016-1549: Sybil vulnerability: ephemeral association attack. While fixed in ntp-4.2.8p7, there are significant additional protections for this issue in 4.2.8p11. CVE-2018-7182: ctlgetitem: buffer read overrun...

9.8CVSS8.1AI score0.25342EPSS
SaveExploits6References15
RedHat Linux
RedHat Linux
added 2018/06/19 5:19 a.m.11 views

zsh: buffer overrun in symlinks

A buffer overflow flaw was found in the zsh shell symbolic link resolver. A local, unprivileged user can create a specially crafted directory path which leads to a buffer overflow in the context of the user trying to do a symbolic link resolution in the aforementioned path. If the user affected i...

9.8CVSS7.5AI score0.02891EPSS
SaveExploits0References4
Rows per page
Query Builder