Lucene search
K

672 matches found

BDU FSTEC
BDU FSTEC
added 2020/12/08 12:0 a.m.1 views

The vulnerability of the Google Chrome web browser’s user interface allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome web browser’s user interface is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.3CVSS8.1AI score0.00802EPSS
Exploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:0 a.m.1 views

The vulnerability of the Google Chrome browser’s WebUI user interface allows a hacker to execute arbitrary code.

The vulnerability of the WebUI user interface of Google Chrome is related to the overflow of buffers in the dynamic memory during the processing of HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

7.6CVSS7.6AI score0.00785EPSS
Exploits0References5Affected Software3
Oracle linux
Oracle linux
added 2020/11/10 12:0 a.m.85 views

systemd security, bug fix, and enhancement update

239-40.0.1 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev rules: fix memory hot add and remove Orabug: 31310273 - fix to enable systemd-pstore.service Orabug: 30951066 - journal: change support URL shown in the catalog entries Orabug: 30853009 - fix to generate...

5.1CVSS6.3AI score0.00152EPSS
Exploits0
ThreatPost
ThreatPost
added 2020/11/04 4:17 p.m.594 views

VMware Issues Updated Fix For Critical ESXi Flaw

VMware issued an updated fix for a critical-severity remote code execution flaw in its ESXi hypervisor products. Wednesday’s VMware advisory said updated patch versions were available after it was discovered the previous patch, released Oct. 20, did not completely address the vulnerability. That’...

10CVSS0.8AI score0.94438EPSS
Exploits11References7
Oracle linux
Oracle linux
added 2020/10/06 12:0 a.m.50 views

systemd security and bug fix update

219-78.0.1 - Backport upstream patches related to private-tmp Sushmita Bhattacharya Orabug: 31561883 - backport upstream pstore tmpfiles patch Eric DeVolder Orabug: 31414539 - udev rules: fix memory hot add and remove Orabug: 31309730 - enable and start the pstore service Orabug: 30950903 - fix t...

5.1CVSS6.5AI score0.00152EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:0 a.m.1 views

The vulnerability of VMware ESXi, VMware Workstation, and VMware Fusion arises from buffer overflows in dynamic memory during the processing of SVGA3D commands. This allows attackers to execute arbitrary code.

The vulnerability of VMware ESXi, VMware Workstation, and VMware Fusion lies in buffer overflows in the dynamic memory during the processing of SVGA3D commands. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00036EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/06/17 12:0 a.m.1 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attack...

10CVSS6.7AI score0.03272EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2020/06/10 12:0 a.m.1 views

The vulnerability of the SMB_IOC_SVCENUM function in the Joyent SmartOS operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the SMBIOCSVCENUM function in the open-source operating system Joyent SmartOS is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.2CVSS7.2AI score0.00273EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.2 views

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in buffer overflow attacks in the dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.16757EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.1 views

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in buffer overflow attacks in the dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.15782EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.1 views

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in buffer overflow attacks in the dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.9AI score0.16757EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.1 views

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in buffer overflow attacks in the dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to buffer overflow in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.3AI score
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.2 views

The vulnerability of the Adobe Bridge file manager, related to buffer overflows in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

10CVSS8AI score0.08342EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.1 views

The vulnerability of the Adobe Bridge file manager, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

10CVSS8AI score0.07798EPSS
Exploits0References4Affected Software1
RedHat Linux
RedHat Linux
added 2020/05/19 10:29 p.m.3 views

kernel: double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c

A flaw was found in the allocatetracebuffer in kernel/trace/trace.c in the debug subsystem, when failure to allocate a dynamic percpu area, a resource cleanup is called. The pointer buf-buffer still holds the address and is not set to NULL, which can cause a use-after-free problem, leading to a...

7.8CVSS7.1AI score0.00126EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:0 a.m.1 views

The vulnerability of the Squid proxy server, related to writing beyond the buffer limit, allows a hacker to cause a service failure.

The vulnerability of the Squid proxy server is caused by an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created URI scheme...

7.5CVSS6.9AI score0.01353EPSS
Exploits0References14Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.1 views

The vulnerability of the ANGEL graphics engine in Google Chrome browsers, related to the execution of operations beyond buffer boundaries in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ANGEL graphics engine in Google Chrome browsers is related to a buffer overflow error in dynamic memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

9.3CVSS7.4AI score0.01095EPSS
Exploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/17 12:0 a.m.1 views

The vulnerability of the WriteMATLABImage function in the GraphicsMagick graphics editor allows a hacker to trigger a service failure or cause other effects.

The vulnerability of the WriteMATLABImage function coders/mat.c in the GraphicsMagick graphics editor is caused by buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects through the use of a specially crafted image...

8.8CVSS7.4AI score0.01488EPSS
Exploits1References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:0 a.m.2 views

The vulnerability of the SDL2_image IMG_LoadPCX_RW function in the Simple DirectMedia Layer library, which allows a hacker to cause a system crash.

The vulnerability of the SDL2image IMGLoadPCXRW function in the Simple DirectMediaLayer library is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

7.1CVSS7.3AI score0.00977EPSS
Exploits1References4Affected Software3
Oracle linux
Oracle linux
added 2020/02/25 12:0 a.m.79 views

systemd security and bug fix update

239-18.0.2.el81.4 - fix to generate systemd-pstore.service file Orabug: 30230056 - fix netdev is missing for iscsi entry in /etc/fstab [email protected] Orabug: 25897792 - set 'RemoveIPC=no' in logind.conf as default for OL7.2 Orabug: 22224874 - allow dm remove ioctl to co-operate with UEK3...

7.8CVSS8.2AI score0.00105EPSS
Exploits0
Rows per page
Query Builder