Lucene search
+L

3259 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/08 12:0 a.m.8 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.4AI score0.02419EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/04 12:0 a.m.11 views

The vulnerability in the embedded software of NETGEAR routers such as NETGEAR R6400, NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR R8500, NETGEAR RS400, NETGEAR WNDR3400v3, NETGEAR WNR3500v2, NETGEAR XR300, NETGEAR D6220, NETGEAR D6400, NETGEAR D7000v2, NETGEAR R7100LG, and NETGEAR DC112A lies in the copying of buffers without checking the size of the input data. This allows an attacker to execute arbitrary code.

The vulnerability in the embedded software of NETGEAR routers such as NETGEAR R6400, NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR R8500, NETGEAR RS400, NETGEAR WNDR3400v3, NETGEAR WNR3500Lv2, NETGEAR XR300, NETGEAR D6220, NETGEAR D6400, NETGEAR D7000v2,...

8.8CVSS8AI score0.25114EPSS
SaveExploits0References4Affected Software16
BDU FSTEC
BDU FSTEC
added 2022/03/30 12:0 a.m.12 views

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to disclose sensitive information and cause partial service interruptions.

Vulnerability of the Cluster component: General database management systems like MySQL Cluster involve reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information and cause partial service interruptions...

2.9CVSS6.5AI score0.01422EPSS
SaveExploits0References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/03/29 5:15 p.m.5 views

CVE-2022-1050

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition...

8.8CVSS7.1AI score0.00374EPSS
SaveExploits0References4
OSV
OSV
added 2022/03/29 5:15 p.m.7 views

AZL-9277 CVE-2022-1050 affecting package qemu for versions less than 6.2.0-2

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition...

8.8CVSS7AI score0.00374EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2022/03/29 5:15 p.m.78 views

CVE-2022-1050

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition...

8.8CVSS5.5AI score0.00374EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2022/03/29 5:15 p.m.44 views

CVE-2022-1050

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition...

8.8CVSS6.9AI score0.00374EPSS
SaveExploits0References3
Prion
Prion
added 2022/03/29 5:15 p.m.22 views

Race condition

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition...

4.6CVSS8.3AI score0.00374EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/03/29 5:15 p.m.5 views

UBUNTU-CVE-2022-1050

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition...

8.8CVSS7AI score0.00374EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2022/03/29 12:0 a.m.50 views

CVE-2022-1050

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition...

8.8CVSS7.2AI score0.00374EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.8 views

The vulnerability of the Media Foundation component of the Microsoft Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the Media Foundation component in the Microsoft Windows operating system is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by this mechanism...

6.1CVSS6.5AI score0.02445EPSS
SaveExploits0References3
OSV
OSV
added 2022/03/24 3:40 p.m.14 views

CLSA-2022-1648136411 Fix of CVE: CVE-2022-22721, CVE-2022-22719, CVE-2022-23943, CVE-2022-22720

CVE-2022-22719: modlua: error out if luareadbody or luawritebody fail - CVE-2022-22720: simpler connection close logic if discarding the request body fails - CVE-2022-22721: make sure and check that LimitXMLRequestBody fits in system memory - CVE-2022-23943: modsed: use sizet to allow for larger...

9.8CVSS5.9AI score0.69803EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/24 3:39 p.m.11 views

CLSA-2022-1648136371 Fix of CVE: CVE-2022-22721, CVE-2022-23943, CVE-2022-22719, CVE-2022-22720

CVE-2022-22719: modlua: error out if luareadbody or luawritebody fail - CVE-2022-22720: simpler connection close logic if discarding the request body fails - CVE-2022-22721: make sure and check that LimitXMLRequestBody fits in system memory - CVE-2022-23943: modsed: use sizet to allow for larger...

9.8CVSS7.4AI score0.69803EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/23 8:15 p.m.1 views

DEBIAN-CVE-2021-3748

A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to numbuffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting i...

7.5CVSS6.6AI score0.00522EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/23 8:15 p.m.5 views

CVE-2021-3748

A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to numbuffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting i...

7.5CVSS6.7AI score0.00522EPSS
SaveExploits0References9
Microsoft CVE
Microsoft CVE
added 2022/03/23 7:0 a.m.6 views

drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket buffers have memory allocated but not freed).

...

5.5CVSS7AI score0.00325EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/03/11 7:15 a.m.4 views

CVE-2022-26878

drivers/bluetooth/virtiobt.c in the Linux kernel before 5.16.3 has a memory leak socket buffers have memory allocated but not freed...

5.5CVSS6.8AI score0.00325EPSS
SaveExploits0References7
OSV
OSV
added 2022/03/11 7:15 a.m.1 views

DEBIAN-CVE-2022-26878

drivers/bluetooth/virtiobt.c in the Linux kernel before 5.16.3 has a memory leak socket buffers have memory allocated but not freed...

5.5CVSS6.4AI score0.00325EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/11 7:15 a.m.9 views

AZL-9066 CVE-2022-26878 affecting package kernel for versions less than 5.15.32.1-2

drivers/bluetooth/virtiobt.c in the Linux kernel before 5.16.3 has a memory leak socket buffers have memory allocated but not freed...

5.5CVSS6.7AI score0.00325EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/11 7:15 a.m.4 views

CVE-2022-26878

drivers/bluetooth/virtiobt.c in the Linux kernel before 5.16.3 has a memory leak socket buffers have memory allocated but not freed...

5.5CVSS6.5AI score
SaveExploits0References5
Rows per page
Query Builder