Lucene search
+L

638 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/10 12:00 a.m.•8 views

CVE-2021-28663: Use After Free

The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0...

9CVSS5.7AI score0.12084EPSS
SaveExploits2References2
CVE
CVE
•added 2021/05/10 12:00 a.m.•1316 views

CVE-2021-28663

CVE-2021-28663 is an Arm Mali GPU kernel-driver use-after-free memory corruption vulnerability that can enable privilege escalation or information disclosure. Affected GPUs span Bifrost (r0p0–r28p0 before r29p0), Valhall (r19p0–r28p0 before r29p0), and Midgard (r4p0–r30p0). The issue arises from ...

9CVSS7.8AI score0.12084EPSS
SaveIn wildExploits2References4Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/04/20 12:00 a.m.•14 views

The vulnerability of the <RowCountChanged> method in the Mozilla Firefox browser allows a perpetrator to increase their privileges or cause a service failure.

The vulnerability of the method in the Mozilla Firefox browser is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures...

10CVSS8AI score0.00886EPSS
SaveExploits0References8Affected Software4
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•33 views

SUSE: Security Advisory (SUSE-SU-2019:0582-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.02959EPSS
SaveExploits0References13
BDU FSTEC
BDU FSTEC
•added 2021/04/06 12:00 a.m.•13 views

The vulnerability of the Informix Spatial DataBlade module of the IBM Informix Dynamic Server (IDS) database management system allows attackers to enhance their privileges.

The vulnerability of the Informix Spatial DataBlade module of the IBM Informix Dynamic Server IDS database management system lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS7.6AI score0.00366EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2021/03/10 4:15 p.m.•16 views

UBUNTU-CVE-2020-1918

In-memory file operations ie: using fopen on a data URI did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory buffer. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, a...

7.5CVSS7.1AI score0.01218EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/03/02 12:00 a.m.•24 views

The vulnerability of Intel Graphics Driver drivers relates to the occurrence of operations beyond the buffer boundaries in memory, allowing attackers to exploit their privileges.

The vulnerability of Intel Graphics Drivers’ drivers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.5AI score0.00274EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2021/02/21 12:00 a.m.•58 views

F5 BIG-IP Buffer Overflow Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A buffer overflow vulnerability exists in BIG-IP, which originates when a network system or product performs an operation in...

7.5CVSS7.3AI score0.01023EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/02/21 12:00 a.m.•24 views

Red Hat Satellite Buffer Overflow Vulnerability

Red Hat Satellite is a system management platform from Red Hat. The platform can be used to extend Linux infrastructures and provide system management functions such as administration, configuration, and monitoring. A security vulnerability exists in Red Hat Satellite. The vulnerability stems fro...

5.3CVSS7.2AI score0.00257EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/02/16 12:00 a.m.•25 views

The vulnerability of Intel Graphics Driver drivers relates to the occurrence of operations beyond the buffer boundaries in memory, allowing attackers to exploit their privileges.

The vulnerability of Intel Graphics Drivers’ drivers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

6.1CVSS7.5AI score0.00274EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/02/09 12:00 a.m.•20 views

JT2Go Buffer Error Vulnerability

A buffer error vulnerability exists in JT2Go that originates when a networked system or product performs an operation in memory without properly validating the data boundaries, resulting in incorrect read and write operations being performed to other memory locations in the association. An attack...

5.5CVSS6.1AI score0.02548EPSS
SaveExploits0References5
OSV
OSV
•added 2021/02/02 1:27 p.m.•16 views

USN-4467-2 qemu vulnerabilities

USN-4467-1 fixed several vulnerabilities in QEMU. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that the QEMU SD memory card implementation incorrectly handled certain memory operations. An attacker inside a guest could possibly u...

6.7CVSS6.9AI score0.05402EPSS
SaveExploits1References7
Ubuntu
Ubuntu
•added 2021/01/05 4:23 p.m.•139 views

USN-4677-1: p11-kit vulnerabilities

David Cook discovered that p11-kit incorrectly handled certain memory operations. An attacker could use this issue to cause p11-kit to crash, resulting in a denial of service, or possibly execute arbitrary code...

7.5CVSS7.2AI score0.03528EPSS
SaveExploits0
Cvelist
Cvelist
•added 2020/12/11 10:59 p.m.•43 views

CVE-2020-25110

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The length byte of a domain name in a DNS query/response is not checked, and is used for internal memory operations. This may lead to successful Denial-of-Service, and possibly Remote Code Execution...

9.7AI score0.53699EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2020/12/08 12:00 a.m.•22 views

Google Android Buffer Error Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. Google Android Pixel suffers from a buffer error vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries,...

7.8CVSS7.4AI score0.00481EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2020/12/01 12:00 a.m.•13 views

The vulnerability in the built-in software of the Intel NUC Kit relates to the execution of operations outside the buffer in memory, allowing an attacker to exploit their privileges.

The vulnerability of the built-in software in the Intel NUC Kit relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.5CVSS7AI score0.00322EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2020/11/26 6:47 p.m.•118 views

USN-4382-2: FreeRDP vulnerabilities

It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code...

8.3CVSS6.7AI score0.02719EPSS
SaveExploits8
Tenable Nessus
Tenable Nessus
•added 2020/11/26 12:00 a.m.•48 views

Ubuntu 18.04 LTS : FreeRDP vulnerabilities (USN-4382-2)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4382-2 advisory. It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting...

8.3CVSS6.7AI score0.02719EPSS
SaveExploits8References14
Ubuntu
Ubuntu
•added 2020/11/24 12:22 a.m.•89 views

USN-4642-1: PDFResurrect vulnerability

It was discovered that PDFResurrect incorrectly handled certain memory operations during PDF summary generation. An attacker could use this to cause out-of-bounds writes, resulting in a denial of service system crash or arbitrary code execution...

7.8CVSS7.6AI score0.01371EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2020/11/24 12:00 a.m.•40 views

Ubuntu: Security Advisory (USN-4642-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.01371EPSS
SaveExploits1References2
Rows per page
Query Builder