Lucene search
+L

635 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/04/17 12:0 a.m.25 views

Oracle VirtualBox crUnpackExtendShaderSource Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS4.9AI score0.00485EPSS
SaveExploits0References1
OSV
OSV
added 2019/02/28 6:29 p.m.11 views

CVE-2018-12393

A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could result in allocating a buffer too small for the conversion. This leads to a possible out-of-bounds write. Note: 64-bit builds are not vulnerab...

7.5CVSS7.2AI score
SaveExploits0References19
AlpineLinux
AlpineLinux
added 2019/02/15 11:0 p.m.88 views

CVE-2019-8354

An issue was discovered in SoX 14.4.2. lsxmakelpf in effectidsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow...

5CVSS5.4AI score0.01641EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:0 a.m.32 views

LAquis SCADA LQS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS1.8AI score0.03726EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/17 12:0 a.m.21 views

Oracle VirtualBox crServerDispatchGetActiveUniform Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS5.3AI score0.0044EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2018/12/18 12:0 a.m.50 views

SUSE SLED12 / SLES12 Security Update : openldap2 (SUSE-SU-2018:4150-1)

This update for openldap2 fixes the following issues : Security issue fixed : CVE-2017-17740: When both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service slapd crash via a...

7.5CVSS7.2AI score0.07022EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2018/12/17 12:0 a.m.24 views

Adobe Reader DC Onix GetRecordRM Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

8.6CVSS3.6AI score0.04979EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/12/17 12:0 a.m.22 views

Adobe Reader DC Onix NextKey Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.7CVSS3.4AI score0.04979EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/18 12:0 a.m.32 views

Oracle VirtualBox crServerDispatchReadPixels Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

8.2CVSS4.8AI score0.00722EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/17 12:0 a.m.23 views

Oracle VirtualBox crServerDispatchGenTextures Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

6.9CVSS4.4AI score0.00722EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/17 12:0 a.m.30 views

Oracle VirtualBox crServerDispatchGenFramebuffersEXT Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS4.7AI score0.00722EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/10/17 12:0 a.m.22 views

Oracle VirtualBox crServerDispatchGenRenderbuffersEXT Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

6.9CVSS4.9AI score0.00722EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/08/23 12:0 a.m.7 views

Unspecified vulnerability in Joyent Node.js (CNVD-2019-42560)

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

7.5CVSS7.3AI score0.03241EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/08/22 12:0 a.m.94 views

Python 2.7.x < 2.7.15 Heap-Based Buffer Overflow Vulnerability Python Issue (bpo-31530) - Windows

Python is prone to a heap-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

3.6CVSS6.9AI score0.01229EPSS
SaveExploits0References3
Veracode
Veracode
added 2018/08/01 10:0 a.m.33 views

Denial Of Service (DoS)

libcurl.so is vulnerable to denial of service DoS attacks. The attacks exist due to performing multiplication without validating the size of buffer allocation causing an out-of-bounds write...

7CVSS7.8AI score0.00593EPSS
SaveExploits0References14Affected Software5
OSV
OSV
added 2018/07/31 8:29 p.m.7 views

CVE-2018-14295

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

8.8CVSS6.2AI score0.08895EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/07/31 8:0 p.m.33 views

CVE-2018-14295

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.9AI score0.08895EPSS
SaveExploits0References2
exploitpack
exploitpack
added 2018/07/19 12:0 a.m.30 views

Google Chrome - Swiftshader Texture Allocation Integer Overflow

Google Chrome - Swiftshader Texture Allocation Integer Overflow There's a remotely triggerable memory corruption issue in SwiftShader that's reachable from WebGL, resulting from an integer overflow issue. In the GPU process there is validation on the sizes passed to texture creation functions to...

0.4AI score
SaveExploits0
NVD
NVD
added 2018/07/05 4:29 p.m.22 views

CVE-2018-3767

memjs versions = 1.1.0 allocates and stores buffers on typed input, resulting in DoS and uninitialized memory usage...

9.1CVSS9.2AI score0.01452EPSS
SaveExploits1References1
OSV
OSV
added 2018/07/05 4:29 p.m.5 views

CVE-2018-3767

memjs versions = 1.1.0 allocates and stores buffers on typed input, resulting in DoS and uninitialized memory usage...

9.1CVSS5.8AI score0.01452EPSS
SaveExploits1References1
Rows per page
Query Builder