Lucene search
K

677 matches found

BDU FSTEC
BDU FSTEC
added 2021/02/08 12:0 a.m.1 views

The vulnerability of the Adobe Photoshop graphic editor lies in the overflow of buffer in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to overflow of the buffer in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

9.6CVSS7.3AI score0.05614EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/01/28 12:0 a.m.4 views

The vulnerability of the parse_args() function in the Sudo system administration program allows a malicious user to elevate their privileges to root level.

The vulnerability of the parseargs function in Sudo system administration software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

7.8CVSS7.5AI score0.99305EPSS
Exploits81References32Affected Software10
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.1 views

The vulnerability of the Swiftshader library in the Sailfish Browser application for the “Autora” operating system allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the Swiftshader library in the Sailfish Browser application for the “Autora” operating system is related to buffer overflows that exploit dynamically allocated memory. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

7.3CVSS6.1AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/11 12:0 a.m.3 views

The vulnerability of the Google Chrome web browser’s exchange buffer allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s web browser exchange buffer is related to overflow in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.4AI score0.02255EPSS
Exploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/12/11 12:0 a.m.1 views

The vulnerability of the WebRTC technology implementation in Google Chrome web browser allows a hacker to execute arbitrary code.

The vulnerability of the WebRTC technology implementation in Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS8.4AI score0.00928EPSS
Exploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/12/08 12:0 a.m.2 views

The vulnerability of the Google Chrome web browser’s user interface allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome web browser’s user interface is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.3CVSS8.1AI score0.01909EPSS
Exploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:0 a.m.1 views

The vulnerability of the Google Chrome browser’s WebUI user interface allows a hacker to execute arbitrary code.

The vulnerability of the WebUI user interface of Google Chrome is related to the overflow of buffers in the dynamic memory during the processing of HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

7.6CVSS7.6AI score0.00625EPSS
Exploits0References5Affected Software3
Oracle linux
Oracle linux
added 2020/11/10 12:0 a.m.85 views

systemd security, bug fix, and enhancement update

239-40.0.1 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev rules: fix memory hot add and remove Orabug: 31310273 - fix to enable systemd-pstore.service Orabug: 30951066 - journal: change support URL shown in the catalog entries Orabug: 30853009 - fix to generate...

5.1CVSS6.3AI score0.00429EPSS
Exploits0
ThreatPost
ThreatPost
added 2020/11/04 4:17 p.m.594 views

VMware Issues Updated Fix For Critical ESXi Flaw

VMware issued an updated fix for a critical-severity remote code execution flaw in its ESXi hypervisor products. Wednesday’s VMware advisory said updated patch versions were available after it was discovered the previous patch, released Oct. 20, did not completely address the vulnerability. That’...

10CVSS0.8AI score0.9927EPSS
Exploits11References7
Oracle linux
Oracle linux
added 2020/10/06 12:0 a.m.51 views

systemd security and bug fix update

219-78.0.1 - Backport upstream patches related to private-tmp Sushmita Bhattacharya Orabug: 31561883 - backport upstream pstore tmpfiles patch Eric DeVolder Orabug: 31414539 - udev rules: fix memory hot add and remove Orabug: 31309730 - enable and start the pstore service Orabug: 30950903 - fix t...

5.1CVSS6.5AI score0.00429EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:0 a.m.3 views

The vulnerability of VMware ESXi, VMware Workstation, and VMware Fusion arises from buffer overflows in dynamic memory during the processing of SVGA3D commands. This allows attackers to execute arbitrary code.

The vulnerability of VMware ESXi, VMware Workstation, and VMware Fusion lies in buffer overflows in the dynamic memory during the processing of SVGA3D commands. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00498EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/06/17 12:0 a.m.2 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attack...

10CVSS6.7AI score0.02717EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2020/06/10 12:0 a.m.2 views

The vulnerability of the SMB_IOC_SVCENUM function in the Joyent SmartOS operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the SMBIOCSVCENUM function in the open-source operating system Joyent SmartOS is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.2CVSS7.2AI score0.00521EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.1 views

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in buffer overflow attacks in the dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.9AI score0.07595EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.2 views

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in buffer overflow attacks in the dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to buffer overflow in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.3AI score
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.2 views

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in buffer overflow attacks in the dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.07687EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.2 views

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in buffer overflow attacks in the dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.07496EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.2 views

The vulnerability of the Adobe Bridge file manager, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

10CVSS8AI score0.05307EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.2 views

The vulnerability of the Adobe Bridge file manager, related to buffer overflows in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

10CVSS8AI score0.05174EPSS
Exploits0References4Affected Software1
RedHat Linux
RedHat Linux
added 2020/05/19 10:29 p.m.3 views

kernel: double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c

A flaw was found in the allocatetracebuffer in kernel/trace/trace.c in the debug subsystem, when failure to allocate a dynamic percpu area, a resource cleanup is called. The pointer buf-buffer still holds the address and is not set to NULL, which can cause a use-after-free problem, leading to a...

7.8CVSS7.1AI score0.0035EPSS
Exploits0References4
Rows per page
Query Builder