Lucene search
+L

12938 matches found

OSV
OSV
added 2021/06/21 5:15 p.m.22 views

CVE-2021-26461

Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...

9.8CVSS7.5AI score
SaveExploits0References1
NVD
NVD
added 2021/06/21 5:15 p.m.25 views

CVE-2021-26461

Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...

9.8CVSS0.05038EPSS
SaveExploits0References1
Prion
Prion
added 2021/06/21 5:15 p.m.25 views

Integer overflow

Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...

7.5CVSS9.6AI score0.05038EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/06/21 5:10 p.m.71 views

CVE-2021-26461

Apache NuttX (OS) versions prior to 10.1.0 are affected by CVE-2021-26461 due to integer wrap-around in memory management calls (malloc, realloc, memalign). This can lead to arbitrary memory allocation and outcomes such as a crash or remote code execution. Remediation is to update to 10.1.0 or la...

9.8CVSS9.7AI score0.05038EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/06/21 5:10 p.m.32 views

CVE-2021-26461 malloc, realloc and memalign implementations are vulnerable to integer wrap-arounds

Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...

9.8AI score0.05038EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:00 a.m.11 views

The vulnerability of the Cisco AnyConnect Secure Mobility Client’s cryptographic protection mechanism, related to uncontrolled memory allocation, allows a perpetrator to cause a service failure.

The vulnerability of the Cisco AnyConnect Secure Mobility Client encryption method is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a hacker to cause a service failure...

5.5CVSS6.4AI score0.00208EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/06/17 12:00 a.m.9 views

QEMU 输入验证错误漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU suffers from an input validation error vulnerability that stems from an integer overflow in initdevring that does not check the malloc siz...

6CVSS7AI score0.00299EPSS
SaveExploits0References12
CNVD
CNVD
added 2021/06/17 12:00 a.m.19 views

Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability (CNVD-2021-45151)

The Cisco AnyConnect Secure Mobility Client is a virtual private network VPN client for a variety of operating systems and hardware configurations. A denial of service vulnerability exists in Cisco AnyConnect Secure Mobility Client for Windows versions prior to 4.10.01075. The vulnerability stems...

5.5CVSS6.5AI score0.00208EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/16 6:15 p.m.22 views

CVE-2021-1568

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected system. This vulnerability is due to uncontrolled memory allocation. An attacker could exploit this vulnerability by copyin...

5.5CVSS0.00208EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/16 6:15 p.m.8 views

CVE-2021-1568

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected system. This vulnerability is due to uncontrolled memory allocation. An attacker could exploit this vulnerability by copyin...

5.5CVSS6.5AI score0.00208EPSS
SaveExploits0References1
Prion
Prion
added 2021/06/16 6:15 p.m.30 views

Design/Logic Flaw

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected system. This vulnerability is due to uncontrolled memory allocation. An attacker could exploit this vulnerability by copyin...

2.1CVSS5.3AI score0.00208EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/06/16 5:45 p.m.14 views

CVE-2021-1568 Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected system. This vulnerability is due to uncontrolled memory allocation. An attacker could exploit this vulnerability by copyin...

5.5CVSS6.4AI score0.00208EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/06/16 4:00 p.m.5 views

CVE-2021-1568

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected system. This vulnerability is due to uncontrolled memory allocation. An attacker could exploit this vulnerability by copyin...

5.5CVSS6.3AI score0.00208EPSS
SaveExploits0References2
Cisco
Cisco
added 2021/06/16 4:00 p.m.72 views

Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected system. This vulnerability is due to uncontrolled memory allocation. An attacker could exploit this vulnerability by copyin...

5.5CVSS5.5AI score0.00208EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/06/16 12:00 a.m.8 views

Cisco AnyConnect Secure Mobility Client 安全漏洞

The Cisco AnyConnect Secure Mobility Client is a virtual private network VPN client for a variety of operating systems and hardware configurations. A denial of service vulnerability exists in Cisco AnyConnect Secure Mobility Client for Windows versions prior to 4.10.01075. The vulnerability stems...

5.5CVSS5.7AI score0.00208EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2021/06/09 5:00 a.m.16 views

CVE-2020-11261

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

8.2AI score0.01772EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/06/09 5:00 a.m.47 views

CVE-2020-11261

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

8.2AI score0.01772EPSS
SaveExploits0References1
CVE
CVE
added 2021/06/09 5:00 a.m.1135 views

CVE-2020-11261

CVE-2020-11261 is a memory-corruption vulnerability in Qualcomm Snapdragon chipsets (including Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables). Root cause: improper check when an application requests memory allocation for an extremely large ...

7.8CVSS8.4AI score0.01772EPSS
SaveIn wildExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2016:2776-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.05293EPSS
SaveExploits5References20
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2016:3256-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.9AI score0.04841EPSS
SaveExploits3References8
Rows per page
Query Builder