Lucene search
+L

3733 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/31 12:00 a.m.•5 views

CVE-2016-8685: Improper Restriction of Operations within the Bounds of a Memory Buffer

The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted BMP image...

5.5CVSS7.3AI score0.01389EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2017/01/26 12:00 a.m.•22 views

Microsoft Office Code Execution

The vulnerability of the Microsoft Office suite arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, or to trigger a service failure memory corruption using a specially crafted documen...

9.3CVSS8.4AI score0.17968EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/18 12:00 a.m.•10 views

CVE-2016-9679: Improper Restriction of Operations within the Bounds of a Memory Buffer

Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer...

9.8CVSS6.4AI score0.03157EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2017/01/13 12:00 a.m.•13 views

Flash Player Code Execution

The vulnerability of the NetConnection class in the Flash Player software platform arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by manipulating proxy types...

10CVSS8.4AI score0.04978EPSS
SaveExploits0References4Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/10 12:00 a.m.•7 views

CVE-2016-6830: Improper Restriction of Operations within the Bounds of a Memory Buffer

The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment variables to use in its execve call. This would allow user-supplied argument/environment variable lists to trigger a buffer overrun. This affects all releases o...

9.8CVSS8AI score0.02166EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2017/01/06 12:00 a.m.•13 views

UBUNTU-CVE-2016-2339

An exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize" function functionality of Ruby. In Fiddle::Function.new "initialize" heap buffer "argtypes" allocation is made based on args array length. Specially constructed object passed as element of args array can...

9.8CVSS7.6AI score0.05144EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/05 12:00 a.m.•4 views

CVE-2016-10011: Improper Restriction of Operations within the Bounds of a Memory Buffer

authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process...

6.2CVSS7.1AI score0.01101EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/12/29 12:00 a.m.•6 views

CVE-2016-7083: Improper Restriction of Operations within the Bounds of a Memory Buffer

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via TrueType fonts embedd...

7.8CVSS6.5AI score0.01496EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
•added 2016/12/27 12:00 a.m.•15 views

Windows Code Execution

The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

9.3CVSS7.3AI score0.11441EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2016/12/27 12:00 a.m.•12 views

Flash Player Code Execution

The vulnerability of the Flash Player software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption remotely...

10CVSS8.2AI score0.04957EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2016/12/22 12:00 a.m.•20 views

Flash Player Code Execution

The vulnerability of the Worker class in the Flash Player software platform arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure due to memory corruption...

10CVSS8.3AI score0.06723EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2016/12/22 12:00 a.m.•21 views

browsers Internet Explorer and Code Execution

The vulnerabilities of Internet Explorer and Microsoft Edge are caused by operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause a service failure memory corruption through a specially crafted web pag...

7.6CVSS8AI score0.14329EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/12/15 12:00 a.m.•23 views

Microsoft Office Code Execution

The vulnerability of the Microsoft Office suite arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document...

9.3CVSS7.8AI score0.19641EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/12/14 12:00 a.m.•12 views

CVE-2016-9203: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the Internet Key Exchange Version 2 IKEv2 feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remote attacker to cause a reload of the ipsecmgr process. More Information: CSCvb38398. Known Affected Releases: 20.2.3 20.2.3.65026. Known Fixed Releases:...

7.5CVSS5.9AI score0.0348EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/12/13 12:00 a.m.•15 views

PT-2016-2957 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 23.0.0.207 and earlier Adobe Flash Player versions 11.2.202.644 and earlier Description: The issue is caused by an out-of-bounds operation in the memory buffer of the Worker class in the Flash Player platform. This...

10CVSS9.2AI score0.18786EPSS
SaveExploits0References117
BDU FSTEC
BDU FSTEC
•added 2016/12/08 12:00 a.m.•20 views

Microsoft Excel SharePoint Code Execution

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft SharePoint Server corporate application suite arises from an operation that goes beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafte...

9.3CVSS7.8AI score0.20717EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/11/19 12:00 a.m.•13 views

CVE-2016-6457: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure ACI could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. This vulnerability affects Cisco Nexus 9000 Series Leaf Switches TO...

6.5CVSS5.8AI score0.0072EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/11/18 12:00 a.m.•10 views

CVE-2016-4333: Improper Restriction of Operations within the Bounds of a Memory Buffer

The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's terminator. Due to this, an aggressor can cause the loop's index to point outside the bounds of the...

8.6CVSS5.8AI score0.00613EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
•added 2016/11/17 12:00 a.m.•21 views

Adobe Reader Code Execution

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, are due to an operation that goes beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allo...

10CVSS8.6AI score0.04844EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2016/11/17 12:00 a.m.•17 views

Adobe Reader Code Execution

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, are due to an operation that goes beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allo...

10CVSS8.6AI score0.05038EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder