Lucene search
+L

1549 matches found

OSV
OSV
•added 2020/04/30 10:15 p.m.•11 views

CVE-2020-6867

ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the case of mass traffic data in the system, it will result in no response for a long time and memory overflow risk. This affects: ZENIC ONE R22b versions...

5.5CVSS5.8AI score0.00349EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/04/30 10:15 p.m.•10 views

CVE-2020-6867

ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the case of mass traffic data in the system, it will result in no response for a long time and memory overflow risk. This affects: ZENIC ONE R22b versions...

5.5CVSS5.8AI score0.00349EPSS
SaveExploits0References2
Prion
Prion
•added 2020/04/30 10:15 p.m.•29 views

Design/Logic Flaw

ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the case of mass traffic data in the system, it will result in no response for a long time and memory overflow risk. This affects: ZENIC ONE R22b versions...

2.1CVSS5.7AI score0.00349EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/04/30 9:13 p.m.•84 views

CVE-2020-6867

The CVE-2020-6867 entry concerns ZTE ZENIC ONE R22b, affected in versions V16.19.10P02SP002 and V16.19.10P02SP005. The vulnerability is described as a resource management error where frequent RPC calls under mass traffic can cause the system to become unresponsive and risk memory overflow, effect...

5.5CVSS5.7AI score0.00349EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/04/30 9:13 p.m.•28 views

CVE-2020-6867

ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the case of mass traffic data in the system, it will result in no response for a long time and memory overflow risk. This affects: ZENIC ONE R22b versions...

5.7AI score0.00349EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/30 12:00 a.m.•4 views

CVE-2020-6867: Improper Restriction of Operations within the Bounds of a Memory Buffer

ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the case of mass traffic data in the system, it will result in no response for a long time and memory overflow risk. This affects: ZENIC ONE R22b versions...

5.5CVSS6AI score0.00349EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/04/29 12:00 a.m.•15 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to an operation that goes beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability cou...

9.3CVSS8.4AI score0.13071EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2020/04/28 3:35 p.m.•12 views

rsyslog: heap-based overflow in contrib/pmcisconames/pmcisconames.c

An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parser tries to locate a log message delimiter in this case, a space or a colon, but fails to account for strings that do not satisfy this constraint. If...

9.8CVSS7.5AI score0.03066EPSS
SaveExploits0References4
CNVD
CNVD
•added 2020/04/28 12:00 a.m.•22 views

Apache Tika Memory Overflow Vulnerability (CNVD-2020-33326)

Apache Tika is the United States Apache Apache Software Foundation, an integrated POI using Java programs to provide MicrosoftOffice format documents read and write functions of the open-source library, Pdfbox read and create PDF documents pure Java class library and for text extraction work to...

5.5CVSS9.2AI score0.02614EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/04/26 12:00 a.m.•20 views

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-25838)

NETGEAR R6700 and others are products of NETGEAR, Inc.NETGEAR R6700 is a wireless router.NETGEAR D6200 is a wireless modem.NETGEAR R6800 is a wireless router.NETGEAR R6800 is a wireless router. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability originates when ...

8.8CVSS7.3AI score0.00962EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2020/04/23 12:00 a.m.•23 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system relates to operations that go beyond the buffer limits in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.4CVSS8.4AI score0.09245EPSS
SaveExploits0References3
NVD
NVD
•added 2020/04/16 11:15 a.m.•29 views

CVE-2019-14105

Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SM8150...

7.8CVSS7.8AI score0.00202EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/16 11:15 a.m.•17 views

Design/Logic Flaw

Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SM8150...

7.2CVSS7.8AI score0.00202EPSS
SaveExploits0References1
CVE
CVE
•added 2020/04/16 10:46 a.m.•72 views

CVE-2019-14105

CVE-2019-14105 affects Qualcomm Snapdragon components (e.g., Snapdragon Industrial IOT, SDA845/SDM845/SM8150) where the kernel read a CSL-reserved field as uint16 instead of uint32, causing memory overflow. Exploitation is described as local (LAS) with low complexity in the NVD entry; no explicit...

7.8CVSS7.8AI score0.00202EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/04/16 10:46 a.m.•41 views

CVE-2019-14105

Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SM8150...

7.8AI score0.00202EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2020/03/31 8:42 p.m.•18 views

advancecomp: integer overflow in png_compress in pngex.cc

In AdvanceCOMP 2.1, pngcompress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. There is also a heap-based buffer over-read...

7.8CVSS6.4AI score0.01424EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2020/03/10 12:00 a.m.•12 views

The vulnerability of the Windows operating system’s image library, allowing a hacker to execute arbitrary code

The vulnerability of the Windows operating system’s image library relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS8AI score0.13506EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/03/04 12:00 a.m.•13 views

The vulnerability of the Cryptography Next Generation (CNG) service on the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Cryptography Next Generation CNG service for the Windows operating system relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

5.5CVSS6.6AI score0.01614EPSS
SaveExploits0References3
OSV
OSV
•added 2020/02/14 6:15 p.m.•17 views

CVE-2020-8844

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS7.5AI score0.23664EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/02/12 12:00 a.m.•17 views

NetHack Buffer Overflow Vulnerability (CNVD-2020-14202)

NetHack is a role-playing single-player game. A security vulnerability exists in NetHack. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write operations being performed to...

9.8CVSS7.3AI score0.01067EPSS
SaveExploits0References1
Rows per page
Query Builder