Lucene search
+L

235 matches found

attackerkb
attackerkb
•added 2021/05/07 9:15 a.m.•8 views

CVE-2021-1927

Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired...

8.4CVSS5.5AI score0.0016EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/05/06 12:00 a.m.•16 views

libaom 安全漏洞

libaom is a software application. A reference codec for the AOMedia Video 1 format. A security vulnerability exists in libaom image.c in versions prior to AOMedia 21-04-07, which stems from incorrectly freeing memory. No details of the vulnerability are provided at this time...

9.8CVSS7.8AI score0.0205EPSS
SaveExploits0References8
Ubuntu
Ubuntu
•added 2021/02/03 1:01 a.m.•310 views

USN-4710-1: Linux kernel vulnerability

Kiyin 尹亮 discovered that the perf subsystem in the Linux kernel did not properly deallocate memory in some situations. A privileged attacker could use this to cause a denial of service kernel memory exhaustion...

5.5CVSS6.4AI score0.00353EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2021/01/28 12:00 a.m.•57 views

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4711-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4711-1 advisory. It was discovered that the LIO SCSI target implementation in the Linux kernel performed insufficient identifier checking in certain XCOPY...

8.1CVSS6.4AI score0.06309EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/01/13 12:00 a.m.•10 views

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after release, allows a hacker to trigger a service failure.

The vulnerabilities of Firefox, Firefox ESR, and the email client Thunderbird are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

10CVSS7.5AI score0.03072EPSS
SaveExploits0References18Affected Software10
Tenable Nessus
Tenable Nessus
•added 2021/01/06 12:00 a.m.•70 views

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-4679-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4679-1 advisory. It was discovered that the console keyboard driver in the Linux kernel contained a race condition. A local attacker could use this to expose...

7.2CVSS6.4AI score0.01026EPSS
SaveExploits4References7
NVD
NVD
•added 2020/12/31 10:15 a.m.•30 views

CVE-2020-35885

An issue was discovered in the alpm-rs crate through 2020-08-20 for Rust. StrcCtx performs improper memory deallocation...

9.8CVSS9.5AI score0.01534EPSS
SaveExploits0References1
OSV
OSV
•added 2020/12/31 10:15 a.m.•19 views

CVE-2020-35885

An issue was discovered in the alpm-rs crate through 2020-08-20 for Rust. StrcCtx performs improper memory deallocation...

9.8CVSS5.8AI score0.01534EPSS
SaveExploits0References1
CVE
CVE
•added 2020/12/31 8:25 a.m.•87 views

CVE-2020-35885

The CVE-2020-35885 issue affects the Rust alpm-rs crate, where StrcCtx deallocates a memory region it does not own. This memory-safety flaw can lead to double-free or use-after-free conditions, as documented by associated advisories (e.g., RUSTSEC-2020-0032 and GHSA entries) and related OSV/NVD r...

9.8CVSS9.4AI score0.01534EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/12/31 8:25 a.m.•46 views

CVE-2020-35885

An issue was discovered in the alpm-rs crate through 2020-08-20 for Rust. StrcCtx performs improper memory deallocation...

9.5AI score0.01534EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/12/22 12:00 a.m.•11 views

The vulnerability of SMIL animation functions in browsers Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to trigger a service failure.

The vulnerability of SMIL animation functions in browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

10CVSS7.7AI score0.03575EPSS
SaveExploits1References16Affected Software10
Positive Technologies
Positive Technologies
•added 2020/10/01 12:00 a.m.•9 views

PT-2020-6940 · Gnu +2 · Gnu Nm +2

Name of the Vulnerable Software and Affected Versions: GNU nm versions prior to 2.34 Description: The issue is related to a memory consumption problem in the get data function in binutils/nm.c. This allows attackers to cause a denial of service via crafted commands. The vulnerability is associate...

8.8CVSS6.1AI score0.0082EPSS
SaveExploits8References48
OSV
OSV
•added 2020/07/06 7:29 p.m.•21 views

USN-4411-1 linux, linux-aws, inux-azure, linux-gcp, linux-kvm, linux-oracle, linux-raspi, linux-riscv vulnerabilities

It was discovered that the elf handling code in the Linux kernel did not initialize memory before using it in certain situations. A local attacker could use this to possibly expose sensitive information kernel memory. CVE-2020-10732 Matthew Sheets discovered that the SELinux network label handlin...

6.7CVSS6.3AI score0.05193EPSS
SaveExploits0References6
OSV
OSV
•added 2020/07/02 11:39 p.m.•24 views

USN-4413-1 linux-gke-5.0, linux-oem-osp1 vulnerabilities

Matthew Sheets discovered that the SELinux network label handling implementation in the Linux kernel could be coerced into de-referencing a NULL pointer. A remote attacker could use this to cause a denial of service system crash. CVE-2020-10711 It was discovered that the SCSI generic sg driver in...

6.7CVSS6.4AI score0.05193EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2020/05/13 12:00 a.m.•14 views

The vulnerability of the ThrowException function in the GraphicsMagick graphics editor, related to the use after deallocation, allows a malicious actor to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the ThrowException function in the GraphicsMagick graphics editor is related to the use of objects after they are released from memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to information and compromise its...

9.8CVSS7.7AI score0.02706EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
•added 2020/04/27 12:00 a.m.•25 views

The vulnerability of Google Chrome browsers, related to memory usage after deallocation, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability through a specially created HTML page...

9.3CVSS7.5AI score0.00972EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2020/04/27 12:00 a.m.•25 views

The vulnerability of Google Chrome browsers, related to memory usage after deallocation, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability through a specially created HTML page...

9.3CVSS7.4AI score0.01091EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
•added 2020/04/23 12:00 a.m.•13 views

The vulnerability of Google Chrome’s browser, related to memory usage after deallocation, allows attackers to gain unauthorized access to protected information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and availability through a specially created HTML file...

9.3CVSS7.3AI score0.01457EPSS
SaveExploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2020/04/21 12:00 a.m.•15 views

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome’s Blink rendering module relates to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and accessibility through a specially created HTML page...

9.3CVSS7.8AI score0.00923EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
•added 2020/04/13 12:00 a.m.•11 views

The vulnerability of the SQLite database management system, related to memory usage after deallocation, allows a attacker to cause a service failure.

The vulnerability of the SQLite database management system is related to a window function error. Exploiting this vulnerability can allow an attacker to cause a service failure...

9.3CVSS7.4AI score0.06683EPSS
SaveExploits1References9Affected Software4
Rows per page
Query Builder