Lucene search
+L

120 matches found

Cvelist
Cvelist
added 2023/12/05 12:24 a.m.32 views

CVE-2023-48694 Azure RTOS USBX Remote Code Execution Vulnerability

Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference and type confusion vulnerabilities in Azure RTOS USBX. The affected components include...

6.8CVSS10AI score0.01332EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/05 12:0 a.m.8 views

Azure RTOS USBX Security Vulnerability

Azure RTOS USBX is a USB host, device, and mobile OTG embedded stack for Azure RTOS open source. Fully integrated with Azure RTOS ThreadX, it is available for all processors that support Azure RTOS ThreadX. A security vulnerability exists in Azure RTOS USBX versions prior to 6.3.0 that stems from...

9.8CVSS9.4AI score0.00931EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/17 12:0 a.m.10 views

PT-2023-7500 · Microsoft · Azure Rtos Usbx

Name of the Vulnerable Software and Affected Versions: Azure RTOS USBX versions prior to 6.3.0 Description: The issue is related to expired pointer dereference vulnerabilities in Azure RTOS USBX, which can lead to remote code execution. The affected components include functions and processes in t...

9.8CVSS9.6AI score0.00931EPSS
SaveExploits0References5
NVD
NVD
added 2023/04/15 12:15 a.m.19 views

CVE-2023-26463

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

9.8CVSS9.7AI score0.02283EPSS
SaveExploits0References3
OSV
OSV
added 2023/04/15 12:15 a.m.12 views

AZL-26300 CVE-2023-26463 affecting package strongswan for versions less than 5.9.10-1

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

9.8CVSS8AI score0.02283EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/15 12:15 a.m.30 views

Null pointer dereference

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

7.5CVSS9.5AI score0.02283EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2023/04/14 12:0 a.m.117 views

CVE-2023-26463

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

9.8CVSS9.7AI score0.02283EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2023/04/14 12:0 a.m.104 views

CVE-2023-26463

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

9.8CVSS9.7AI score0.02283EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/04/14 12:0 a.m.62 views

CVE-2023-26463

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

9.9AI score0.02283EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:59 a.m.5 views

SUSE CVE-2020-12373

Expired pointer dereference in some IntelR Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access...

1.9CVSS7.3AI score0.0026EPSS
SaveExploits0References13
CNVD
CNVD
added 2022/02/11 12:0 a.m.42 views

Radareorg Radare2 Resource Management Error Vulnerability (CNVD-2022-13390)

radare2 is a set of libraries and tools for working with binary files. radareorg Radare2 is vulnerable to a resource management error that stems from the product's invocation of an expired pointer. No detailed vulnerability details are currently available...

8.8CVSS2.1AI score0.01097EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/02/08 12:0 a.m.9 views

radare2 资源管理错误漏洞

radare2 is a set of libraries and tools for working with binary files. radareorg Radare2 is vulnerable to a resource management error that stems from the product's invocation of an expired pointer. No detailed vulnerability details are currently available...

8.8CVSS5.5AI score0.01097EPSS
SaveExploits1References6
Huntr
Huntr
added 2022/01/23 2:52 a.m.27 views

None in radareorg/radare2

Description This vulnerability is of type Expired Pointer Dereference or specifically, use-after-free. The bug exists in latest stable release radare2-5.5.4 and lastest master branch ed2030b79e68986bf04f3a6279463ab989fe400f, updated in Jan 22, 2022. Specifically, the vulnerable code located at...

6.8CVSS7.8AI score0.01097EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2021/05/19 12:0 a.m.37 views

RHEL 8 : curl (RHSA-2021:1610)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1610 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTT...

7.5CVSS7AI score0.09917EPSS
SaveExploits3References15
Tenable Nessus
Tenable Nessus
added 2021/03/15 12:0 a.m.60 views

openSUSE Security Update : kernel-firmware (openSUSE-2021-407)

This update for kernel-firmware fixes the following issues : - CVE-2020-12373: Fixed an expired pointer dereference may lead to DOS bsc1181738. - CVE-2020-12364: Fixed a NULL pointer reference may lead to DOS bsc1181736. - CVE-2020-12362: Fixed an integer overflow which could have led to privileg...

7.8CVSS6.9AI score0.00359EPSS
SaveExploits0References8
NVD
NVD
added 2021/02/17 2:15 p.m.32 views

CVE-2020-12373

Expired pointer dereference in some IntelR Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access...

6.7CVSS0.0026EPSS
SaveExploits0References1
Prion
Prion
added 2021/02/17 2:15 p.m.26 views

Null pointer dereference

Expired pointer dereference in some IntelR Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access...

4.6CVSS6.1AI score0.0026EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/02/17 1:54 p.m.38 views

CVE-2020-12373

Expired pointer dereference in some IntelR Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access...

6.4AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
added 2021/02/17 1:54 p.m.158 views

CVE-2020-12373

CVE-2020-12373 is an expired pointer dereference in Intel graphics drivers prior to 26.20.100.8141 that could allow a local privileged user to cause a denial of service. Public docs show this CVE fixed by the kernel-firmware update in openSUSE/SUSE advisories (openSUSE-2021-407 / openSUSE-SU-2021...

6.7CVSS6.2AI score0.0026EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2020/08/31 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2020-1842)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.03721EPSS
SaveExploits1References2
Rows per page
Query Builder