Lucene search
+L

8405 matches found

CNNVD
CNNVD
•added 2021/01/12 12:00 a.m.•26 views

Adobe Illustrator code vulnerability

Adobe Illustrator 2020 is a vector graphics editor. An uncontrolled search path element vulnerability exists in Adobe Illustrator 2020 25.0 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...

7CVSS6.8AI score0.02246EPSS
SaveExploits0References3
OSS-Fuzz
OSS-Fuzz
•added 2021/01/11 6:51 p.m.•7 views

libucl:ucl_add_string_fuzzer: Crash in ucl_hash_insert

Detailed Report: https://oss-fuzz.com/testcase?key=6482431328780288 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00000e4e0891 Crash State: uclhashinsert uclhashinsertobject...

5.9AI score
SaveExploits0
osv_cve
osv_cve
•added 2021/01/08 4:15 p.m.•22 views

CVE-2020-8584

Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution...

9.8CVSS6AI score0.0435EPSS
SaveExploits0References1
NVD
NVD
•added 2021/01/08 4:15 p.m.•31 views

CVE-2020-8584

Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution...

10CVSS9.7AI score0.0435EPSS
SaveExploits0References1
Prion
Prion
•added 2021/01/08 4:15 p.m.•32 views

Code injection

Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution...

10CVSS9.7AI score0.0435EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/01/08 4:15 p.m.•12 views

CVE-2020-8584

Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution...

10CVSS8.9AI score0.0435EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/01/08 3:19 p.m.•41 views

CVE-2020-8584

Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution...

9.8AI score0.0435EPSS
SaveExploits0References1
CVE
CVE
•added 2021/01/08 3:19 p.m.•77 views

CVE-2020-8584

The CVE-2020-8584 issue relates to Element OS, affecting versions prior to 1.8P1 and 12.2. It arises from a failure to properly filter certain elements of externally-entered data during the construction of a code segment, enabling an unauthenticated remote attacker to execute arbitrary code. This...

10CVSS9.6AI score0.0435EPSS
SaveExploits0References1Affected Software4
CNNVD
CNNVD
•added 2021/01/08 12:00 a.m.•23 views

Element OS code injection vulnerability

Element OS is a set of Linux operating systems for home theater PC computers. A security vulnerability exists in Element OS versions prior to 1.8P1 and 12.2, which arises from a failure of a networked system or product to properly filter specific elements of externally-entered data during the...

10CVSS7.8AI score0.0435EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/08 12:00 a.m.•9 views

CVE-2020-8584: Undefined Security Weakness

Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution...

10CVSS6.4AI score0.0435EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/01/08 12:00 a.m.•4 views

PT-2021-12797

Name of the Vulnerable Software and Affected Versions: Element OS versions prior to 1.8P1 Element OS versions prior to 12.2 Description: The issue allows an unauthenticated remote attacker to perform arbitrary code execution. Recommendations: For Element OS versions prior to 1.8P1, update to...

10CVSS6.5AI score0.0435EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/01/04 12:00 a.m.•28 views

Qualcomm Wlan Firmware Buffer Error Vulnerability

Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. A buffer error vulnerability exists in Qualcomm WLAN Firmware that originates from a buffer over-read that occurs if the length of the IE is less than the length of the accessed frame pointer when processing a...

9.4CVSS7AI score0.00796EPSS
SaveExploits0References3
NVD
NVD
•added 2020/12/31 10:15 a.m.•46 views

CVE-2020-35895

An issue was discovered in the stack crate before 0.3.1 for Rust. ArrayVec has an out-of-bounds write via element insertion...

10CVSS9.6AI score0.01866EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/12/31 9:15 a.m.•25 views

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

5.5CVSS6.1AI score0.00379EPSS
SaveExploits1References1
Prion
Prion
•added 2020/12/31 9:15 a.m.•31 views

Design/Logic Flaw

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

2.1CVSS5.5AI score0.00379EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/12/31 8:23 a.m.•51 views

CVE-2020-35895

An issue was discovered in the stack crate before 0.3.1 for Rust. ArrayVec has an out-of-bounds write via element insertion...

9.6AI score0.01866EPSS
SaveExploits0References1
Mend
Mend
•added 2020/12/31 8:23 a.m.•9 views

CVE-2020-35895

An issue was discovered in the stack crate before 0.3.1 for Rust. ArrayVec has an out-of-bounds write via element insertion...

10CVSS0.01866EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2020/12/31 8:21 a.m.•53 views

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

5.5AI score0.00379EPSS
SaveExploits1References1
CVE
CVE
•added 2020/12/31 8:21 a.m.•200 views

CVE-2020-35903

CVE-2020-35903 affects the Rust dync crate prior to 0.5.0, where VecCopy can misalign elements because Vec may store non-u8 types. This enables misaligned access when reading/writing elements of different types. The issue is documented across multiple sources (e.g., RustSec/RUSTSEC-2020-0050 and ...

5.5CVSS5.4AI score0.00379EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2020/12/31 8:21 a.m.•11 views

CVE-2020-35903

An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...

6.8CVSS0.00379EPSS
SaveExploits1References5
Rows per page
Query Builder