Lucene search
K

3796 matches found

BDU FSTEC
BDU FSTEC
added 2023/12/18 12:0 a.m.4 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS6.3AI score0.00597EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2023/12/15 12:0 a.m.23 views

Adobe InDesign Code Issues Vulnerabilities

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign has a security vulnerability that can be exploited by attackers to cause a denial of service...

5.5CVSS6.8AI score0.00303EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2023/12/15 12:0 a.m.19 views

Huawei EulerOS: Security Advisory for harfbuzz (EulerOS-SA-2023-3432)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8AI score0.01797EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/12/15 12:0 a.m.5 views

The vulnerability of Adobe InDesign’s computer layout automation software, related to the issue of operations going beyond buffer boundaries in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created file...

5.5CVSS6.2AI score0.00328EPSS
Exploits0References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/12/14 5:11 p.m.2 views

Malicious code in primeng-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e5db0733e63e7005d9395916c8fe50701981527ec8471164b58588a92937388a The OpenSSF Package Analysis project identified 'primeng-layout' @ 8.0.0 npm as malicious. It is considered malicious because: - The package...

6.9AI score
Exploits0
OSV
OSV
added 2023/12/14 5:11 p.m.8 views

MAL-2023-8695 Malicious code in primeng-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e5db0733e63e7005d9395916c8fe50701981527ec8471164b58588a92937388a The OpenSSF Package Analysis project identified 'primeng-layout' @ 8.0.0 npm as malicious. It is considered malicious because: - The package...

7.1AI score
Exploits0
Cvelist
Cvelist
added 2023/12/13 7:39 p.m.32 views

CVE-2023-46247 Vyper has incorrect storage layout for contracts containing large arrays

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine EVM. Contracts containing large arrays might underallocate the number of slots they need by 1. Prior to v0.3.8, the calculation to determine how many slots a storage variable needed used math.ceiltype.sizeinbytes / 32. T...

7.5CVSS7.5AI score0.00692EPSS
Exploits0References3
OSV
OSV
added 2023/12/13 2:15 p.m.2 views

CVE-2023-48637

Adobe Substance 3D Designer versions 13.0.0 and earlier and 13.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requir...

5.5CVSS5.8AI score0.00341EPSS
Exploits0References1
OSV
OSV
added 2023/12/13 1:18 p.m.2 views

GHSA-6M97-7527-MH74 incorrect storage layout for contracts containing large arrays

Impact contracts containing large arrays might underallocate the number of slots they need. prior to v0.3.8, the calculation to determine how many slots a storage variable needed used math.ceiltype.sizeinbytes / 32:...

7.5CVSS7.1AI score0.00692EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2023/12/13 1:18 p.m.25 views

incorrect storage layout for contracts containing large arrays

Impact contracts containing large arrays might underallocate the number of slots they need. prior to v0.3.8, the calculation to determine how many slots a storage variable needed used math.ceiltype.sizeinbytes / 32:...

7.5CVSS6.7AI score0.00692EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2023/12/13 1:15 p.m.3 views

CVE-2023-47078

Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

5.5CVSS5.8AI score0.00424EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/12/13 12:0 a.m.4 views

Vyper Security Vulnerability

Vyper is the Pythonic smart contract language for EVM. A security vulnerability exists in Vyper versions prior to v0.3.8 that stems from an incorrect storage layout for contracts containing large arrays...

7.5CVSS6.8AI score0.00692EPSS
Exploits0References4
OSV
OSV
added 2023/12/12 2:15 a.m.3 views

CVE-2023-49580

SAP GUI for Windows and SAP GUI for Java - versions SAPBASIS 755, SAPBASIS 756, SAPBASIS 757, SAPBASIS 758, allow an unauthenticated attacker to access information which would otherwise be restricted and confidential. In addition, this vulnerability allows the unauthenticated attacker to create...

7.3CVSS5.8AI score0.00478EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/12/11 12:0 a.m.3 views

PT-2023-31265 · Sap · Sap Gui For Windows +1

Name of the Vulnerable Software and Affected Versions: SAP GUI for Windows and SAP GUI for Java - versions SAP BASIS 755, SAP BASIS 756, SAP BASIS 757, SAP BASIS 758 Description: The issue allows an unauthenticated attacker to access information which would otherwise be restricted and confidentia...

7.3CVSS7.1AI score0.00478EPSS
Exploits0References8
OSV
OSV
added 2023/12/04 3:15 p.m.3 views

CVE-2023-5768

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length...

6.1CVSS5.8AI score0.00412EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/12/04 12:0 a.m.3 views

PT-2023-27257 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to the modify for next stage function in fdt.rs, where improperly used crypto could render KASLR ineffective. This could lead to...

9.8CVSS9.1AI score0.00639EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2023/12/04 12:0 a.m.3 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to memory-bound reading, allows attackers to exploit it to disclose protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to memory-walking attacks. Exploiting this vulnerability can allow attackers to disclose protected information...

5.5CVSS5.9AI score0.00339EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/04 12:0 a.m.3 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to pointer naming errors, allows attackers to trigger a service failure.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00313EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.3 views

The vulnerability of the Adobe Photoshop graphic editor, related to reading beyond the buffer in memory, allows a hacker to bypass the ASLR protection mechanism.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection mechanism...

5.5CVSS6.1AI score0.00328EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.3 views

The vulnerability of the Adobe Bridge file manager relates to the use of memory after it is freed, allowing an attacker to bypass the ASLR protection mechanism.

The vulnerability of the Adobe Bridge file manager is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...

5.5CVSS5.5AI score0.00403EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder