Lucene search
+L

2597 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/17 12:00 a.m.•10 views

CVE-2017-10723: Improper Restriction of Operations within the Bounds of a Memory Buffer

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows...

8.8CVSS6.3AI score0.02522EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/17 12:00 a.m.•7 views

CVE-2017-10724: Improper Restriction of Operations within the Bounds of a Memory Buffer

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows...

8.8CVSS6.3AI score0.02522EPSS
SaveExploits1References2
NVD
NVD
•added 2019/05/24 5:29 p.m.•41 views

CVE-2018-11940

Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD 712 / SD 710 / SD...

10CVSS9.4AI score0.00945EPSS
SaveExploits0References1
CVE
CVE
•added 2019/05/24 4:36 p.m.•116 views

CVE-2018-11940

CVE-2018-11940 is a Qualcomm WLAN Host vulnerability caused by a lack of length validation before memcpy in the WLAN function, leading to out-of-bounds access in multiple Snapdragon platforms (Auto/Compute/Consumer IOT/Industrial IOT, Mobile) across listed SoCs. Connected sources confirm affected...

10CVSS9.3AI score0.00945EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/24 12:00 a.m.•5 views

CVE-2018-11940: Improper Restriction of Operations within the Bounds of a Memory Buffer

Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD 712 / SD 710 / SD...

10CVSS8.3AI score0.00945EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2019/05/20 4:29 p.m.•8 views

DEBIAN-CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

7.5CVSS7.4AI score0.0421EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2019/05/20 4:29 p.m.•24 views

CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

7.5CVSS7.4AI score0.0421EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2019/05/14 12:29 p.m.•28 views

CVE-2018-7437

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a memcpy call of the parseSST function...

8.8CVSS2.5AI score0.02051EPSS
SaveExploits1References1
osv_ghsa
osv_ghsa
•added 2019/04/30 3:37 p.m.•87 views

GHSA-QX2V-J445-G354 Improper Input Validation in Google TensorFlow

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS5.9AI score0.00517EPSS
SaveExploits0References8
NVD
NVD
•added 2019/04/24 5:29 p.m.•52 views

CVE-2018-7577

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS7.9AI score0.00517EPSS
SaveExploits0References1
osv_pysec
osv_pysec
•added 2019/04/24 5:29 p.m.•59 views

PYSEC-2019-207

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS5.9AI score0.00517EPSS
SaveExploits0References2
Prion
Prion
•added 2019/04/24 5:29 p.m.•30 views

Code injection

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

5.8CVSS7.8AI score0.00517EPSS
SaveExploits0References1Affected Software2
PyPA
PyPA
•added 2019/04/24 5:29 p.m.•19 views

PYSEC-2019-225

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS6.8AI score0.00517EPSS
SaveExploits0References1Affected Software1
osv_pysec
osv_pysec
•added 2019/04/24 5:29 p.m.•81 views

PYSEC-2019-225

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS2.5AI score0.00517EPSS
SaveExploits0References1
Mend
Mend
•added 2019/04/24 4:03 p.m.•5 views

CVE-2018-7577

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS0.00517EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/24 12:00 a.m.•7 views

CVE-2018-7577: Improper Input Validation

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS7.5AI score0.00517EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/04/24 12:00 a.m.•5 views

PT-2019-11100

Name of the Vulnerable Software and Affected Versions: Google Snappy library version 1.1.4 Google TensorFlow versions prior to 1.7.1 Description: The issue is related to a memcpy parameter overlap in the Google Snappy library, which could result in a crash or allow reading from other parts of the...

8.1CVSS0.00517EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
•added 2019/04/01 12:00 a.m.•60 views

Debian DLA-1741-1 : php5 security update

Several vulnerabilities have been found in php5, a server-side, HTML-embedded scripting language. CVE-2019-9637 rename across the device may allow unwanted access during processing. CVE-2019-9638, CVE-2019-9639 Uninitialized read in exifprocessIFDinMAKERNOTE. CVE-2019-9640 Invalid Read on...

9.8CVSS6.8AI score0.09395EPSS
SaveExploits6References8
Tenable Nessus
Tenable Nessus
•added 2019/03/27 12:00 a.m.•43 views

openSUSE Security Update : glibc (openSUSE-2019-422)

This update for glibc fixes the following issues : This security issue was fixed : - Fixed an buffer overwrite issue in memcpy for Knights Landing CPUs boo1092877, CVE-2018-11237 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

7.8CVSS7.5AI score0.0088EPSS
SaveExploits3References3
NVD
NVD
•added 2019/03/24 2:29 a.m.•30 views

CVE-2019-9962

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to VCRUNTIME140!memcpy...

7.8CVSS8.1AI score0.01257EPSS
SaveExploits0References1
Rows per page
Query Builder