Lucene search
+L

514 matches found

BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.9 views

The vulnerability of the “process_secondary_order” function implementation in the RDP client rdesktop allows for reading beyond the memory boundary, enabling attackers to cause service failures.

The vulnerability of the “processsecondaryorder” function in the RDP client rdesktop implementation relates to reading data beyond the memory boundary. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

7.5CVSS7.4AI score0.04071EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/03/01 12:00 a.m.11 views

The vulnerability of the “rdpdr_process” function implementation in the RDP client rdesktop, related to reading beyond the memory boundary, allows a attacker to cause a service failure.

The vulnerability of the “rdpdrprocess” function in the RDP client rdesktop implementation is related to reading data beyond the memory boundary. Exploiting this vulnerability could allow a remote attacker to cause service failures...

7.5CVSS7.5AI score0.03826EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/02/26 12:00 a.m.12 views

The vulnerability of the LibreOffice office software package arises from an operation that occurs outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the LibreOffice office software package arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created document...

8.8CVSS8.5AI score0.67321EPSS
SaveExploits9References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/26 12:00 a.m.12 views

The vulnerability in Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...

5.8CVSS7.9AI score0.09906EPSS
SaveExploits0References3
Veracode
Veracode
added 2019/01/14 5:50 a.m.32 views

Denial Of Service (DoS)

libsystemd.so is vulnerable to denial of service. A lack of memory boundary checks causes the stack to clash with another memory region, allowing a remote attacker to abuse the vulnerability to crash the process, or possibly execute arbitrary OS commands with journald privileges...

7.8CVSS7.9AI score0.03016EPSS
SaveExploits2References23Affected Software5
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:00 a.m.15 views

The vulnerability of the read_creator_block function in the GIMP graphic editor allows for reading beyond the buffer boundary of dynamic memory, enabling attackers to cause service failures, compromise data integrity, and undermine data confidentiality.

The vulnerability of the readcreatorblock function in the GIMP graphic editor’s plug-in/common/file-psp.c file is related to reading data beyond the buffer boundaries of dynamic memory. Exploiting this vulnerability could allow an attacker to cause service failures, compromise data integrity, and...

7.8CVSS6.7AI score0.01063EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:00 a.m.11 views

The vulnerability of the Microsoft Outlook email client, related to the execution of operations outside the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

10CVSS8.5AI score0.19059EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/07 12:00 a.m.17 views

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge browsers is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

4.2CVSS8.4AI score0.14345EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/09/28 12:00 a.m.9 views

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems arises from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document...

4.7CVSS7.9AI score0.12985EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2018/09/28 12:00 a.m.13 views

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems arises from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document...

4.7CVSS7.8AI score0.06266EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2018/09/24 12:00 a.m.25 views

PT-2018-2758 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 3.10.x through 4.18.x Description: The issue is related to the chap server compute md5 function in the ISCSI target code of the Linux kernel, which incorrectly checks memory access boundaries, leading to a buffer overflo...

8.4CVSS7.9AI score0.74041EPSS
SaveExploits52References848
CNVD
CNVD
added 2018/09/21 12:00 a.m.10 views

Google Android Boot has an unspecified vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Boot is a porting tool. A security vulnerability exists in Boot for Android, which stems from the program not properly restricting operations within memory buffer boundaries. The...

7.8CVSS7AI score0.00169EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/09/04 12:00 a.m.14 views

The vulnerability of the Microsoft Office software arises from an operation that occurs outside the buffer in memory, allowing an attacker to disclose protected information.

The vulnerability of the Microsoft Office suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created file...

6.2CVSS5.8AI score0.08247EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/08/29 12:00 a.m.12 views

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain full control over the system through a specially created...

7.8CVSS8.1AI score0.01131EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2018/06/22 12:00 a.m.11 views

The vulnerability of the Microsoft Office software arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office package arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted RTF file, while operating remotely...

9.3CVSS6.2AI score0.25136EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/06/07 12:00 a.m.9 views

The vulnerability of Microsoft Edge browser and the ChakraCore JavaScript engine lies in memory object handling errors, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Edge browser and the JavaScript scenario handler ChakraCore arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

7.6CVSS8.4AI score0.15711EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/05/25 12:00 a.m.10 views

The vulnerability of the Linux kernel in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system in Android is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS5.8AI score0.01355EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2018/05/04 12:00 a.m.14 views

Cisco WebEx Business Suite meeting sites and WebEx Meetings sites WebEx Recording Format Player information disclosure vulnerability

Cisco WebEx Business Suite meeting sites and WebEx Meetings sites are video conferencing solutions from Cisco.WebEx Recording Format WRF Player is one of the players, which is mainly used to play WRF WebEx Recording Format WRF Player is one of the players, which is mainly used to play the WRF...

5.3CVSS6.3AI score0.0264EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/04/27 12:00 a.m.12 views

The vulnerability of the `lim_process_action_vendor_specific` function in the Android WLAN operating system component from the CAF repository, which allows a hacker to disclose protected information

The vulnerability of the limprocessactionvendorspecific function in the Android WLAN operating system from the CAF repository arises due to an operation occurring outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is...

7.8CVSS5.7AI score0.00979EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/04/27 12:00 a.m.14 views

The vulnerability of the System Call Interface (SCI) in the Linux operating system allows a hacker to increase their privileges.

The vulnerability of the System Call Interface SCI in the Linux operating system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.2CVSS6.8AI score0.00448EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder