Lucene search
+L

7690 matches found

CNNVD
CNNVD
added 2023/06/28 12:00 a.m.11 views

Google Pixel 竞争条件问题漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that originates in installKey in KeyUtil.cpp, where file encryption may fail due to a competitive condition, which could lead to local information disclosure...

4.1CVSS5.1AI score0.00054EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/06/28 12:00 a.m.9 views

PT-2023-17989 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the on remove iso data path function of btm iso impl.h due to improper input validation. This could lead to local information disclosure with no...

5.5CVSS5.3AI score0.00092EPSS
SaveExploits0References2
Prion
Prion
added 2023/06/27 6:15 p.m.29 views

Information disclosure

IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. IBM X-Force ID: 230403...

4CVSS5.6AI score0.00632EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/06/27 12:00 a.m.10 views

PT-2023-8893 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to an Out-of-Bounds Write vulnerability that can occur when parsing maliciously crafted STP and STEP files in Autodesk AutoCAD using the ASMIMPORT228A.dll and...

7.8CVSS7.5AI score0.00481EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
added 2023/06/25 12:00 a.m.12 views

The vulnerability of the FortiSIEM security management interface arises from the use of a less secure encryption algorithm, which allows attackers to disclose the protected information.

The vulnerability of the FortiSIEM security management interface is related to the use of a less secure encryption algorithm. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

7.8CVSS7.1AI score0.00359EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/25 12:00 a.m.14 views

The vulnerability of the dynamically linked CrossCadWare_x64.dl library, a toolset for design and simulation in Siemens Solid Edge, allows a hacker to disclose confidential information.

The vulnerability of the dynamically linked CrossCadWarex64.dl library, which is used for design and simulation projects by Siemens Solid Edge, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to disclose confidential informatio...

3.3CVSS5.8AI score0.0021EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2023/06/23 6:15 p.m.11 views

CVE-2023-32423

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information...

6.5CVSS6.8AI score0.00794EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2023/06/23 6:15 p.m.7 views

CVE-2023-32402

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information...

6.5CVSS5.7AI score0.00719EPSS
SaveExploits0References6
OSV
OSV
added 2023/06/23 6:15 p.m.11 views

UBUNTU-CVE-2023-28204

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that th...

6.5CVSS6.9AI score0.14292EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2023/06/22 10:34 p.m.11 views

CVE-2023-34110 Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error

Flask-AppBuilder is an application development framework, built on top of Flask. Prior to version 4.3.2, an authenticated malicious actor with Admin privileges, could by adding a special character on the add, edit User forms trigger a database error, this error is surfaced back to this actor on t...

2.7CVSS6.4AI score0.00676EPSS
SaveExploits0References4
CNVD
CNVD
added 2023/06/21 12:00 a.m.11 views

Fuji Electric TELLUS/TELLUS Lite Out-of-Bounds Read Vulnerability (CNVD-2025-16533)

Fuji Electric TELLUS and Fuji Electric TELLUS Lite are both products of Fuji Electric, Japan.Fuji Electric TELLUS is a specialized software for advanced features, user-friendliness and remote control.Fuji Electric TELLUS Lite is a remote control software. Fuji Electric TELLUS and Fuji Electric...

7.8CVSS7.5AI score0.00252EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/19 5:15 a.m.10 views

CVE-2023-32542

Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution...

7.8CVSS7.3AI score0.00252EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/06/19 5:15 a.m.6 views

CVE-2023-32273

Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32538 and CVE-2023-32201...

7.8CVSS6.3AI score0.00278EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/06/19 5:15 a.m.8 views

CVE-2023-32288

Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM file may lead to information disclosure and/or arbitrary code execution...

7.8CVSS7.3AI score0.00252EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/06/19 12:00 a.m.9 views

Fuji Electric TELLUS 缓冲区错误漏洞

Fuji Electric TELLUS and Fuji Electric TELLUS Lite are both products of Fuji Electric, Japan.Fuji Electric TELLUS is a specialized software for advanced features, user-friendliness and remote control.Fuji Electric TELLUS Lite is a remote control software. Fuji Electric TELLUS and Fuji Electric...

7.8CVSS7.7AI score0.00278EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/06/19 12:00 a.m.5 views

PT-2023-7050 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the drm mode setcrtc function in the drivers/gpu/drm/drm crtc.c module of the Linux kernel's DRM driver. It involves the use of an uninitialized pointer...

6.8CVSS7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/06/19 12:00 a.m.11 views

PT-2023-23701 · Tellus +1 · Tellus +1

Name of the Vulnerable Software and Affected Versions: TELLUS version 4.0.15.0 TELLUS Lite version 4.0.15.0 Description: An out-of-bounds read issue exists, potentially leading to information disclosure and/or arbitrary code execution when opening a specially crafted SIM file. Recommendations: Fo...

7.8CVSS7.7AI score0.00252EPSS
SaveExploits0References5
NVD
NVD
added 2023/06/15 10:15 p.m.18 views

CVE-2023-23841

SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request. Part of the URL of the request discloses sensitive data...

7.5CVSS7.6AI score0.00455EPSS
SaveExploits0References2
Prion
Prion
added 2023/06/15 10:15 p.m.39 views

Cross site request forgery (csrf)

SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request.? Part of the URL of the request discloses sensitive data...

5CVSS7.6AI score0.00455EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/06/15 7:15 p.m.7 views

CVE-2023-21142

In multiple files, there is a possible way to access traces in the dev mode due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12...

5.5CVSS6.1AI score0.00083EPSS
SaveExploits0References2
Rows per page
Query Builder