Lucene search
+L

2562 matches found

Github Security Blog
Github Security Blog
added 2019/09/30 7:31 p.m.11 views

Buffer Overflow in centra

Denial of Service Impact Affected Centra versions will, when not in stream mode, buffer responses to requests into memory with no size limit. This issue affects anyone requesting content from untrusted sources. Patches Version 2.4.0 resolves the issue by limiting the size of buffered response bod...

3.8AI score
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/09/27 12:0 a.m.8 views

The vulnerability of the WebSocket component in Firefox browsers, which allows attackers to disclose protected information

The vulnerability of the WebSocket component in Firefox arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this mechanism...

6.4CVSS5.7AI score0.01702EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/09/19 12:0 a.m.5 views

Exim mail server vulnerability related to an operation exceeding buffer boundaries in memory, allowing an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service

A vulnerability in the Exim mail server is related to errors in processing objects in memory. Exploitation of the vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause denial of service...

10CVSS5.5AI score0.35736EPSS
SaveExploits3References16Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/09/13 12:0 a.m.6 views

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to execute arbitrary code on the target system.

The vulnerability of the DHCP server service for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using specially crafted packets...

7.8CVSS6.5AI score0.06738EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/09/05 12:0 a.m.7 views

The vulnerability of the PAN-OS operating system, related to the operation of data out of the buffer in memory, allows attackers to cause memory corruption.

The vulnerability of the PAN-OS operating system is related to the operation of data out of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause memory corruption or service failures when the current client interactive session is re-executed...

9CVSS5.8AI score0.01036EPSS
SaveExploits0References6Affected Software1
ICS
ICS
added 2019/09/03 12:0 a.m.76 views

EZAutomation EZ PLC Editor

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: EZAutomation Equipment: EZ PLC Editor Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...

7.8CVSS7.8AI score0.01367EPSS
SaveExploits0References5
NVD
NVD
added 2019/08/30 9:15 a.m.30 views

CVE-2019-5612

In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r351265, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, the kernel driver for /dev/midistat implements a read handler that is not thread-safe. A multi-threaded program c...

7.8CVSS7.3AI score0.00909EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/08/30 12:0 a.m.8 views

The vulnerability of the Windows operating system arises from operations that go beyond buffer boundaries in memory, allowing attackers to trigger a system failure.

The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause a service failure through a specially created application...

5.8CVSS5.7AI score0.04415EPSS
SaveExploits0References2
NVD
NVD
added 2019/08/29 1:15 a.m.25 views

CVE-2017-14202

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...

7.8CVSS7.9AI score0.00566EPSS
SaveExploits0References3
Prion
Prion
added 2019/08/29 1:15 a.m.19 views

Design/Logic Flaw

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...

4.6CVSS7.9AI score0.00566EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2019/08/29 12:44 a.m.171 views

CVE-2017-14202

CVE-2017-14202 in Zephyr concerns the shell component where an improper restriction of operations within the bounds of a memory buffer can be triggered by a serial or telnet connection, causing a crash and potentially arbitrary code execution. Affected: Zephyr shell versions prior to 1.14.0 on al...

7.8CVSS7.9AI score0.00566EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2019/08/29 12:44 a.m.25 views

CVE-2017-14202 The shell implementation does not protect against buffer overruns resulting in unpredictable behavior.

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...

7.9AI score0.00566EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/08/20 12:0 a.m.7 views

The vulnerability of the buffer in the dev.c software for working with YubiKey security keys allows a perpetrator to execute arbitrary code.

The vulnerability of the buffer in the dev.c software for working with YubiKey security keys is related to the execution of operations beyond the boundaries of the memory buffer. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

6.8CVSS6.3AI score0.00499EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/08/16 12:0 a.m.12 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine arises from reading beyond the buffer boundary in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

9.3CVSS8.3AI score0.00698EPSS
SaveExploits0References8Affected Software4
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:0 a.m.35 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0074)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel-rt packages installed that are affected by multiple vulnerabilities: - Integer overflow in the aiosetupsinglevector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or...

10CVSS7.7AI score0.52841EPSS
SaveExploits28References36
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:0 a.m.51 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0070)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel packages installed that are affected by multiple vulnerabilities: - Integer overflow in the aiosetupsinglevector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibl...

10CVSS7.8AI score0.52841EPSS
SaveExploits28References37
ICS
ICS
added 2019/07/30 6:0 a.m.244 views

Wind River VxWorks (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Wind River Equipment: VxWorks Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Integer Underflow, Improper Restriction of Operations within the Bounds of a Memory Buffer,...

9.8CVSS9.7AI score0.84177EPSS
SaveExploits7References10
BDU FSTEC
BDU FSTEC
added 2019/07/18 12:0 a.m.16 views

The vulnerability of the AuthIoDrv driver of the Secret Net Studio security system, which allows a hacker to cause a service failure.

The vulnerability of the AuthIoDrv driver of the Secret Net Studio information protection system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.6CVSS5.9AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/08 12:0 a.m.25 views

The vulnerability of the information protection system against unauthorized access is caused by an operation that goes beyond the buffer boundaries in memory, allowing a intruder to trigger a service failure.

The vulnerability of the information protection system against unauthorized access is due to an operation going beyond the buffer in memory file handling is not performed; the full path length exceeds 260 characters. Exploiting this vulnerability can allow a local attacker to cause a service...

3.6CVSS5.7AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/08 12:0 a.m.6 views

The vulnerability of Google Chrome’s browser, related to writing data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted HTML page...

8.8CVSS8.5AI score0.00726EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder