Lucene search
K

677 matches found

Positive Technologies
Positive Technologies
added 2024/11/12 12:0 a.m.3 views

PT-2024-8581 · Microsoft · Sql Server Native Client

Name of the Vulnerable Software and Affected Versions: SQL Server Native Client affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory within the Microsoft SQL Server Native Client component. This can allow a remote attacker to execute arbitrary...

10CVSS8.1AI score0.01345EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/11/12 12:0 a.m.2 views

PT-2024-8555 · Microsoft · Sql Server Native Client

Name of the Vulnerable Software and Affected Versions: SQL Server Native Client affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory within the Microsoft SQL Server Native Client component. This can be exploited by a remote attacker to execute...

9CVSS8.1AI score0.01432EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/11/11 12:0 a.m.2 views

The vulnerability of the opennurbs.dll library, a software component used for modeling, designing, and drafting in AutoCAD, allows attackers to execute arbitrary code or cause the application to crash.

The vulnerability of the opennurbs.dll library, which is used in AutoCAD software for modeling, designing, and drafting, arises due to a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally or execute arbitrary...

7CVSS7.9AI score0.00395EPSS
Exploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2024/11/07 12:0 a.m.2 views

The vulnerability of the _XkbSetCompatMap function in the X Window System X.Org Server implementation allows a hacker to increase their privileges.

The vulnerability of the XkbSetCompatMap function in the X Window System X.Org Server implementation is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.2AI score0.00894EPSS
Exploits0References19Affected Software14
BDU FSTEC
BDU FSTEC
added 2024/11/01 12:0 a.m.1 views

The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers, related to memory release errors, allows an attacker to gain access to the kernel’s stack memory and dynamic memory.

The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers is related to memory release errors. Exploiting this vulnerability can allow an attacker to gain access to kernel memory from the stack and dynamic memory...

6.1CVSS7.6AI score0.00631EPSS
Exploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:0 a.m.1 views

The vulnerability of the structured file library in The GNOME Project’s libgsf, related to integer overflows due to dynamic memory usage, allows attackers to execute arbitrary code.

The vulnerability of the structured file library in The GNOME Project’s libgsf library is related to the overflow of integers during the processing of the partition allocation table. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS6.7AI score0.00457EPSS
Exploits0References11Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/10/24 12:0 a.m.4 views

The vulnerability of Microsoft Edge browser, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge relates to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS6.3AI score0.00878EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/24 12:0 a.m.3 views

The vulnerability of Microsoft Edge browsers, related to overflowing dynamic memory buffers, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Microsoft Edge relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

10CVSS5.8AI score0.01083EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:0 a.m.7 views

The vulnerability of the web interface of the HiLCOS operating system’s microprogrammed software for devices such as BAT-R, BAT-F, BAT450-F, BAT867-R, BAT867-F, WLC, and BAT Controller Virtual allows a perpetrator to cause service interruptions.

The vulnerability of the web interface of the HiLCOS operating system’s microprogrammed device management software for models BAT-R, BAT-F, BAT450-F, BAT867-R, BAT867-F, WLC, and BAT Controller Virtual is related to the possibility of buffer overflow in dynamic memory. Exploiting this vulnerabili...

7.8CVSS5.9AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:0 a.m.3 views

The vulnerability of the Substance 3D Stager software lies in its software, which is exposed due to a buffer overflow in the dynamic memory. This allows an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00269EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:0 a.m.2 views

The vulnerability of the Substance 3D Stager software lies in its software, which is exposed due to a buffer overflow in the dynamic memory. This allows an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00269EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:0 a.m.1 views

The vulnerability of the Substance 3D Stager software lies in its software, which is exposed due to a buffer overflow in the dynamic memory. This allows an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00269EPSS
Exploits0References3Affected Software1
Redos
Redos
added 2024/10/18 12:0 a.m.16 views

ROS-20241017-09

Vulnerability of the alistadd function of the vim text editor is related to memory usage after its after it has been freed. Exploitation of the vulnerability could allow an attacker to execute arbitrary autocommands Vulnerability of instypebuf function of vim text editor is related to buffer...

5.5CVSS8.2AI score0.00349EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/10/17 12:0 a.m.1 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.2AI score0.00382EPSS
Exploits0References2Affected Software2
Hacker One
Hacker One
added 2024/10/13 6:42 a.m.24 views

Linux Foundation Decentralized Trust: Memory Leak in bytes_to_hexstring Function

The function bytestohexstring was found to have a memory leak vulnerability. The function dynamically allocated memory using malloc but did not provide a way for the caller to free the allocated memory. This could lead to an increase in the program's memory consumption over time, potentially...

7AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/10/11 12:0 a.m.3 views

The vulnerability of the Azure Service Fabric distributed system, related to buffer overflows in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of the Azure Service Fabric distributed system is related to overflowing buffers in dynamic memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

7.1CVSS5.9AI score0.01074EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/11 12:0 a.m.3 views

The vulnerability of the Windows Routing and Remote Access Service (RRAS) on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Routing and Remote Access Service RRAS on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.3AI score0.01342EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/11 12:0 a.m.2 views

The vulnerability of the Windows Routing and Remote Access Service (RRAS) on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Routing and Remote Access Service RRAS on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.3AI score0.01309EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/10 12:0 a.m.4 views

The vulnerability of the Layout component in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of the Layout component in Google Chrome and Microsoft Edge is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.3AI score0.0058EPSS
Exploits1References9Affected Software5
Positive Technologies
Positive Technologies
added 2024/10/08 12:0 a.m.3 views

PT-2024-7120 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Substance3D - Stager versions 3.0.3 and earlier Description: The issue is caused by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use...

7.8CVSS8AI score0.00269EPSS
Exploits0References7
Rows per page
Query Builder