Lucene search
+L

131 matches found

Vulnrichment
Vulnrichment
added 2023/03/23 12:0 a.m.8 views

CVE-2023-20029 Cisco IOS XE Software Privilege Escalation Vulnerability

A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding feature of an affected device. An attack...

4.4CVSS7.1AI score0.00168EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/03/22 12:0 a.m.4 views

PT-2023-2503 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. Thi...

7.8CVSS7.5AI score0.00168EPSS
Exploits0References4
F5 Networks
F5 Networks
added 2023/02/21 6:52 p.m.70 views

K34425791: Intel processor vulnerabilities CVE-2019-0151, CVE-2019-0152

Security Advisory Description CVE-2019-0151 Insufficient memory protection in IntelR TXT for certain IntelR Core Processors and IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2019-0152 Insufficient memory protection in Syste...

7.2CVSS7.1AI score0.00389EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 6:16 a.m.2 views

SUSE CVE-2006-0459

flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator flex before 2.5.33 does not allocate enough memory for grammars containing 1 REJECT statements or 2 trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependen...

7.5CVSS8.2AI score0.04769EPSS
Exploits0References4
Cvelist
Cvelist
added 2022/11/09 8:44 p.m.36 views

CVE-2021-26393

Insufficient memory cleanup in the AMD Secure Processor ASP Trusted Execution Environment TEE may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of...

6AI score0.00247EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/09/22 12:0 a.m.8 views

The vulnerability of the cups-pk-helper-mechanism utility in the “EMIAS” operating system allows a perpetrator to cause a service failure or other effects due to insufficient memory.

The vulnerability of the cups-pk-helper-mechanism utility in the “EMIAS” operating system is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause service failures or other effects due to insufficient memory resources...

7.3CVSS5.5AI score
Exploits0Affected Software2
CNNVD
CNNVD
added 2022/06/27 12:0 a.m.6 views

Bento4 安全漏洞

Bento4 is an open source C library for reading and writing MP4 files. version 1.6.0-638 of Bento4 suffers from a denial of service vulnerability that stems from insufficient allocator memory and can be exploited by attackers to cause a denial of service...

7.5CVSS5.7AI score0.0112EPSS
Exploits1References3
AlpineLinux
AlpineLinux
added 2022/05/17 5:15 p.m.38 views

CVE-2022-30067

GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash...

5.5CVSS2.6AI score0.00729EPSS
Exploits1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.22 views

Mageia: Security Advisory (MGASA-2021-0035)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.01366EPSS
Exploits0References9
CNNVD
CNNVD
added 2022/01/04 12:0 a.m.7 views

Qualcomm 芯片资源管理错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits including primarily semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. A resource management error vulnerability exists in...

7.5CVSS7.3AI score0.00568EPSS
Exploits0References7
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.15 views

SUSE: Security Advisory (SUSE-SU-2014:0915-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.6AI score0.01671EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/09/29 12:0 a.m.47 views

Oracle Linux 7 : edk2 (ELSA-2020-5861)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5861 advisory. - Create new 1.3 release for OL7 which includes the following fixed CVEs: CVE-2018-12182 CVE-2019-13224 CVE-2019-13225 CVE-2019-14553 Fri May 17 2019...

9.8CVSS7.6AI score0.04047EPSS
Exploits0References5
CVE
CVE
added 2019/12/16 7:13 p.m.64 views

CVE-2019-0159

CVE-2019-0159 affects the Linux Administrative Tools for Intel® Network Adapters prior to version 24.3. The underlying issue is insufficient memory protection, which may allow an authenticated local user to escalate privileges. The Intel advisory (INTEL-SA-00237) confirms affected products and re...

7.8CVSS7.6AI score0.00372EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/12/16 7:13 p.m.19 views

CVE-2019-11096

Insufficient memory protection for IntelR Ethernet I218 Adapter driver for Windows 10 before version 24.1 may allow an authenticated user to potentially enable information disclosure via local access...

5.2AI score0.00338EPSS
Exploits0References1
NVD
NVD
added 2019/11/14 8:15 p.m.22 views

CVE-2019-0152

Insufficient memory protection in System Management Mode SMM and IntelR TXT for certain IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

7.2CVSS6.6AI score0.00389EPSS
Exploits0References4
CVE
CVE
added 2019/11/14 7:6 p.m.83 views

CVE-2019-0152

CVE-2019-0152 refers to insufficient memory protection in System Management Mode (SMM) and Intel TXT for certain Intel Xeon processors, allowing a privileged local attacker to potentially escalate privileges. Public details across connected sources confirm the affected components (SMM and TXT in ...

7.2CVSS6.7AI score0.00389EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2019/11/14 7:6 p.m.25 views

CVE-2019-0152

Insufficient memory protection in System Management Mode SMM and IntelR TXT for certain IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

6.6AI score0.00389EPSS
Exploits0References4
NVD
NVD
added 2019/10/04 8:15 p.m.22 views

CVE-2019-17183

Foxit Reader before 9.7 allows an Access Violation and crash if insufficient memory exists...

7.5CVSS8.2AI score0.01359EPSS
Exploits0References1
Prion
Prion
added 2019/10/04 8:15 p.m.24 views

Memory corruption

Foxit Reader before 9.7 allows an Access Violation and crash if insufficient memory exists...

5CVSS7.6AI score0.01359EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/10/04 8:0 p.m.201 views

CVE-2019-17183

CVE-2019-17183 affects Foxit Reader prior to 9.7, enabling an access violation and crash when the system has insufficient memory. Public sources in the connected set confirm affected product/version and the crash behavior; remediation is to update to Foxit Reader 9.7 or newer. The connected docum...

7.5CVSS8.1AI score0.01359EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder