Lucene search
+L

773 matches found

Positive Technologies
Positive Technologies
•added 2022/10/13 12:00 a.m.•18 views

PT-2022-24875 · Microsoft · Azure Rtos Usbx

Name of the Vulnerable Software and Affected Versions: Azure RTOS USBX versions prior to 6.1.12 Description: The issue arises from the ux host class pima read function in Azure RTOS USBX, where the data length from a device response is read and used in calculations. Specifically, the header lengt...

9.8CVSS9.6AI score0.00717EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/09/28 12:00 a.m.•14 views

PT-2022-6982 · D Link · D-Link Dap-1325

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1325 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. The specific flaw exists within the handling of XML data...

8.8CVSS7.3AI score0.01049EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2022/09/28 12:00 a.m.•11 views

Sony PlayStation 缓冲区错误漏洞

The Sony PlayStation is a series of home game consoles from the Japanese company Sony Sony. A buffer overflow vulnerability exists in Sony PS4 and PS5, which stems from a lack of length validation of the parameter dataLength parameter and can be exploited by an attacker to launch an attack agains...

6.8CVSS6.9AI score0.00522EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/09/15 12:00 a.m.•12 views

Nikon NIS-Elements Viewer 安全漏洞

Nikon NIS-Elements Viewer is a free stand-alone program from Nikon Japan. It is used to view image files and data sets. A security vulnerability exists in Nikon NIS-Elements Viewer version 1.2100.1483.0, which stems from the parsing of PSD images without proper validation of the length of the...

7.8CVSS7.8AI score0.0121EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/08/25 6:15 p.m.•7 views

CVE-2022-2991

A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and...

6.7CVSS6.6AI score0.00446EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/07/15 7:15 p.m.•7 views

CVE-2021-34987

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.1 49187. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...

8.2CVSS7.5AI score0.00341EPSS
SaveExploits0References3
CNVD
CNVD
•added 2022/07/05 12:00 a.m.•50 views

Tenda AX1806 formAddMacfilterRule function stack overflow vulnerability

A stack overflow vulnerability exists in the Tenda AX1806 formAddMacfilterRule function, which stems from the fact that the deviceList parameter of the formAddMacfilterRule function does not check the input data for length. No details of the vulnerability are available at this time...

10CVSS3.5AI score0.10439EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2022/07/01 12:07 a.m.•80 views

pcre2: Out-of-bounds read in get_recurse_data_length in pcre2_jit_compile.c

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the getrecursedatalength function of the pcre2jitcompile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers...

9.1CVSS7.4AI score0.02767EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/06/24 12:00 a.m.•12 views

CODESYS 缓冲区错误漏洞

CODESYS is a controller development system from Germany's 3S-Smart Software Solutions A buffer error vulnerability exists in several CODESYS products that stems from an internal failure to properly handle the length of associated structured data in an application. An attacker can exploit this...

6.5CVSS6.8AI score0.0104EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2022/06/15 12:00 a.m.•26 views

Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.6AI score0.06408EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/06/14 10:15 a.m.•11 views

CVE-2022-22084

Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

8.4CVSS7.1AI score0.00158EPSS
SaveExploits0References2
Prion
Prion
•added 2022/06/14 10:15 a.m.•30 views

Memory corruption

Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

7.2CVSS7.9AI score0.00158EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/06/14 9:50 a.m.•44 views

CVE-2021-35084

Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

5.5CVSS7.2AI score0.00137EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/14 12:00 a.m.•18 views

PT-2022-15226 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption that occurs when extracting qcp audio files. This happens due to a lack of checks on data length in various Qualcomm Snapdragon...

8.4CVSS7.7AI score0.00158EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2022/05/26 7:00 a.m.•9 views

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.

...

9.1CVSS6.6AI score0.02767EPSS
SaveExploits0
attackerkb
attackerkb
•added 2022/05/16 9:15 p.m.•7 views

CVE-2022-1587

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the getrecursedatalength function of the pcre2jitcompile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers...

9.1CVSS6.8AI score0.02767EPSS
SaveExploits0References14
OSV
OSV
•added 2022/05/16 9:15 p.m.•10 views

UBUNTU-CVE-2022-1587

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the getrecursedatalength function of the pcre2jitcompile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers...

9.1CVSS6.7AI score0.02767EPSS
SaveExploits0References4
CNVD
CNVD
•added 2022/05/07 12:00 a.m.•23 views

Ffmpeg integer overflow vulnerability (CNVD-2025-01690)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. FFmpeg suffers from an integer overflow vulnerability that stems from a failure to properly validate data length in the g729parse function when processing specially crafted files. An attack...

5.5CVSS6.7AI score0.00931EPSS
SaveExploits1References1
NVD
NVD
•added 2022/05/05 5:15 p.m.•28 views

CVE-2021-38445

OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the associated data, which may allow an attacker to remotely execute arbitrary code...

9.8CVSS0.0268EPSS
SaveExploits0References2
OSV
OSV
•added 2022/05/02 12:16 p.m.•68 views

DEBIAN-CVE-2022-29973

relan exFAT 1.3.0 allows local users to obtain sensitive information data from deleted files in the filesystem in certain situations involving offsets beyond ValidDataLength...

4.7CVSS4.8AI score0.00307EPSS
SaveExploits1References1
Rows per page
Query Builder