Lucene search
+L

2562 matches found

RedhatCVE
RedhatCVE
added 2020/01/09 7:9 p.m.32 views

CVE-2020-5312

A flaw was discovered in python-pillow does where it does not properly restrict operations within the bounds of a memory buffer when decoding PCX images. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the...

9.8CVSS4.9AI score0.0369EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/26 12:0 a.m.5 views

The vulnerability in the built-in software of the Intel NUC Kit relates to the execution of operations outside the buffer in memory. This allows an attacker to exploit their privileges, cause system failures, or gain unauthorized access to protected information.

The vulnerability in the built-in software of the Intel NUC Kit relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges, cause system failures, or gain unauthorized access to protected information...

7.5CVSS7.6AI score0.00343EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/23 12:0 a.m.6 views

The vulnerability of Adobe Illustrator CC 2019, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe Illustrator CC 2019 is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.03985EPSS
SaveExploits0References4Affected Software1
Gitee
Gitee
added 2019/12/21 10:55 a.m.7 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2017-11882 43b 原脚本来自于 https://github.com/embedi/CVE-2017-11882 109b 原脚本来自于 https://github.com/unamer/CVE-2017-11882/ (膜一波,现在unamer的代码已经可以执行shellcode了) CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-118...

9.3CVSS7AI score0.99945EPSS
SaveExploits33
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.8 views

The vulnerability of the V8 component in the Google Chrome browser allows attackers to disclose protected information.

The vulnerability of the V8 component in the Google Chrome browser is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information using a specially created PDF file...

7.1CVSS7.3AI score0.00833EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.5 views

The vulnerability of the Firefox browser arises from an operation that goes beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Firefox browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.01835EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.6 views

The vulnerability of the Firefox browser arises from an operation that goes beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Firefox browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.01438EPSS
SaveExploits0References7Affected Software3
ICS
ICS
added 2019/12/03 12:0 a.m.171 views

Moxa AWK-3121

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits available Vendor: Moxa Equipment: AWK-3121 Vulnerabilities: Cleartext Transmission of Sensitive Information, Improper Access Control, Sensitive Cookie without ‘HTTPONLY’ Flag, Improper...

10CVSS9.8AI score0.39287EPSS
SaveExploits13References5
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:0 a.m.6 views

The vulnerability of the VideoLAN VLC media player lies in the fact that operations are performed outside the buffer in memory, allowing an attacker to execute arbitrary code or cause a service failure.

The vulnerability of the VideoLAN VLC media player lies in the fact that the operation data is stored outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created .3GP file...

6.8CVSS8.4AI score0.13337EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:0 a.m.8 views

The vulnerability of the Dirac and Schrodinger codecs in the VideoLAN VLC media player software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Dirac and Schrodinger codecs in the VideoLAN VLC media player software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause system failures...

10CVSS7.6AI score0.02373EPSS
SaveExploits0References5Affected Software2
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.24 views

Rockwellautomation 1766-l32bxba Improper Restriction of Operations within the Bounds of a Memory Buffer

A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution. File data ot500213.nasl...

7.5CVSS5.8AI score0.07145EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.25 views

Schneider-electric Somachine Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM...

7.5CVSS4.6AI score0.05567EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.24 views

Schneider-electric Modicon Improper Restriction of Operations within the Bounds of a Memory Buffer

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller. File data...

5CVSS3.9AI score0.29575EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.23 views

Yokogawa Centum Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet. File data ot500040.nasl...

9CVSS7AI score0.68359EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.25 views

Yokogawa Centum Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP packets. File data ot500149.nasl...

9.3CVSS7.1AI score0.25359EPSS
SaveExploits4References4
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.21 views

Schneider-electric Concept Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header. File data ot500029.nasl...

9.3CVSS6.3AI score0.22293EPSS
SaveExploits10References6
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.29 views

Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component issue 4 of 4. There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition. File data ot500063.nasl...

6.8CVSS2.7AI score0.03189EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.19 views

Honeywellprocess Enterprise Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell Process Solutions HPS Experion R2xx, R30x, R31x, and R400.x; Honeywell Building Solutions HBS Enterprise Building Manager R400 and R410.1; and Honeywell Environmental Combustion and Controls ECC Symmetr...

7.5CVSS4.9AI score0.04083EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.20 views

Rockwellautomation Micrologix Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vectors. File data ot500134.nasl...

10CVSS7.2AI score0.06965EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.25 views

Rockwellautomation Ab Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow on Rockwell Automation Allen-Bradley MicroLogix 1100 devices A through 15.000 and B before 15.002 allows remote attackers to execute arbitrary code via a crafted web request. File data ot500167.nasl...

10CVSS7.1AI score0.06619EPSS
SaveExploits0References3
Rows per page
Query Builder