Lucene search
+L

3260 matches found

OSV
OSV
added 2021/09/19 5:15 p.m.2 views

DEBIAN-CVE-2021-41073

looprwiter in fs/iouring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORINGOPPROVIDEBUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc//maps for exploitation...

7.8CVSS6.6AI score0.01719EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2021/09/19 5:15 p.m.4 views

CVE-2021-41073

looprwiter in fs/iouring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORINGOPPROVIDEBUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc//maps for exploitation...

7.8CVSS6.8AI score0.01719EPSS
SaveExploits2References11
OSV
OSV
added 2021/09/19 5:15 p.m.7 views

UBUNTU-CVE-2021-41073

looprwiter in fs/iouring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORINGOPPROVIDEBUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc//maps for exploitation...

7.8CVSS6.7AI score0.01719EPSS
SaveExploits2References8
CNNVD
CNNVD
added 2021/09/19 12:0 a.m.5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in Linux kernel versions 5.10 through 5.14.6, which stems from looprwiter in fs/iouring.c in the kernel that allows a local user to gain privileges by triggering a kernel...

7.8CVSS6.8AI score0.01719EPSS
SaveExploits2References16
BDU FSTEC
BDU FSTEC
added 2021/09/03 12:0 a.m.6 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader involve an attack vector that extends beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2019, and Adobe Acrobat Reader 2019 are related to the execution of operations beyond the buffer in memory. Exploiting these vulnerabilities can allow...

7.8CVSS7.2AI score0.08724EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/09/03 12:0 a.m.9 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of executing code outside of the buffer memory. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the issue of code execution outside the buffer. Exploiting these vulnerabilities can allow a malicious actor to execute arbitra...

10CVSS8.5AI score0.35366EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2021/08/31 9:26 a.m.7 views

hw: Vector Register Data Sampling

A flaw was found in Intel processors where a local attacker is able to gain information about registers used for vector calculations by observing register states from other processes running on the system. This results in a race condition where store buffers, which were not cleared, could be read...

5.5CVSS6.5AI score0.00521EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2021/08/31 8:30 a.m.5 views

hw: Vector Register Data Sampling

A flaw was found in Intel processors where a local attacker is able to gain information about registers used for vector calculations by observing register states from other processes running on the system. This results in a race condition where store buffers, which were not cleared, could be read...

5.5CVSS6.5AI score0.00521EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2021/08/31 8:30 a.m.4 views

hw: L1D Cache Eviction Sampling

A microarchitectural timing flaw was found on some Intel processors. A corner case exists where data in-flight during the eviction process can end up in the “fill buffers” and not properly cleared by the MDS mitigations. The fill buffer contents which were expected to be blank can be inferred usi...

5.5CVSS6.5AI score0.00587EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2021/08/31 8:15 a.m.6 views

hw: L1D Cache Eviction Sampling

A microarchitectural timing flaw was found on some Intel processors. A corner case exists where data in-flight during the eviction process can end up in the “fill buffers” and not properly cleared by the MDS mitigations. The fill buffer contents which were expected to be blank can be inferred usi...

5.5CVSS6.5AI score0.00587EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2021/08/31 8:15 a.m.7 views

hw: Vector Register Data Sampling

A flaw was found in Intel processors where a local attacker is able to gain information about registers used for vector calculations by observing register states from other processes running on the system. This results in a race condition where store buffers, which were not cleared, could be read...

5.5CVSS6.5AI score0.00521EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2021/08/31 7:59 a.m.4 views

hw: L1D Cache Eviction Sampling

A microarchitectural timing flaw was found on some Intel processors. A corner case exists where data in-flight during the eviction process can end up in the “fill buffers” and not properly cleared by the MDS mitigations. The fill buffer contents which were expected to be blank can be inferred usi...

5.5CVSS6.5AI score0.00587EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2021/08/31 7:59 a.m.5 views

hw: Vector Register Data Sampling

A flaw was found in Intel processors where a local attacker is able to gain information about registers used for vector calculations by observing register states from other processes running on the system. This results in a race condition where store buffers, which were not cleared, could be read...

5.5CVSS6.5AI score0.00521EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2021/08/25 12:0 a.m.5 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

8.8CVSS7.9AI score0.03966EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/25 12:0 a.m.6 views

The vulnerability of the Adobe Photoshop graphic editor lies in the ability to write data beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8AI score0.05045EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2021/08/24 10:1 a.m.7 views

hw: L1D Cache Eviction Sampling

A microarchitectural timing flaw was found on some Intel processors. A corner case exists where data in-flight during the eviction process can end up in the “fill buffers” and not properly cleared by the MDS mitigations. The fill buffer contents which were expected to be blank can be inferred usi...

5.5CVSS6.5AI score0.00587EPSS
SaveExploits0References8
NVD
NVD
added 2021/08/23 2:15 a.m.18 views

CVE-2020-36476

An issue was discovered in Mbed TLS before 2.24.0 and before 2.16.8 LTS and before 2.7.17 LTS. There is missing zeroization of plaintext buffers in mbedtlssslread to erase unused application data from memory...

7.5CVSS0.0155EPSS
SaveExploits0References5
OSV
OSV
added 2021/08/23 2:15 a.m.3 views

DEBIAN-CVE-2020-36476

An issue was discovered in Mbed TLS before 2.24.0 and before 2.16.8 LTS and before 2.7.17 LTS. There is missing zeroization of plaintext buffers in mbedtlssslread to erase unused application data from memory...

7.5CVSS7.3AI score0.0155EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/23 2:15 a.m.34 views

CVE-2020-36476

An issue was discovered in Mbed TLS before 2.24.0 and before 2.16.8 LTS and before 2.7.17 LTS. There is missing zeroization of plaintext buffers in mbedtlssslread to erase unused application data from memory...

7.5CVSS6.6AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2021/08/23 2:15 a.m.39 views

CVE-2020-36476

An issue was discovered in Mbed TLS before 2.24.0 and before 2.16.8 LTS and before 2.7.17 LTS. There is missing zeroization of plaintext buffers in mbedtlssslread to erase unused application data from memory...

7.5CVSS7.1AI score0.0155EPSS
SaveExploits0References4
Rows per page
Query Builder