Lucene search
+L

393 matches found

CNVD
CNVD
added 2020/09/11 12:0 a.m.1 views

Linux kernel netfilter buffer overflow vulnerability

Linux kernel is the kernel used by Linux, an open source operating system released by the Linux Foundation. netfilter is a packet filtering framework used in Linux. Buffer overflow vulnerability in Linux kernel netfilter version 5.8.7. The vulnerability stems from a network system or product...

6CVSS6.6AI score0.00566EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2020/09/09 12:0 a.m.6 views

The vulnerability of the Windows Custom Protocol Engine component of the operating system allows attackers to enhance their privileges.

The vulnerability of the Windows Custom Protocol Engine component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.4AI score0.00948EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/02 12:0 a.m.6 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of operations occurring outside the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the execution of operations beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow unauthorized...

5.3CVSS5.8AI score0.02817EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/08/26 12:0 a.m.9 views

The vulnerability of the Microsoft Jet Database Engine on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Jet Database Engine on Windows operating systems arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.9AI score0.02802EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/08/26 12:0 a.m.7 views

The vulnerability of the vp8DecodeFrame function in the Media Framework component of the Android operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the vp8DecodeFrame function in the Media Framework component of the Android operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...

7.8CVSS6.6AI score0.01897EPSS
SaveExploits0References5Affected Software2
CNVD
CNVD
added 2020/08/14 12:0 a.m.6 views

Artifex Software Ghostscript Buffer Overflow Vulnerability (CNVD-2020-46248)

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...

5.5CVSS8.1AI score0.02053EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:0 a.m.20 views

The vulnerability of the PuTTY cryptographic protection mechanism, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PuTTY encryption protection mechanism lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8.2AI score0.02566EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:0 a.m.7 views

The vulnerability of microprogramming software for managing video cards (motherboards) in hypervisors such as VMware ESXi, VMware Workstation, and VMware Fusion allows attackers to cause partial service interruptions.

The vulnerability of microprogramming software for managing video cards controllers in VMware ESXi, VMware Workstation, and VMware Fusion lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a partial service...

3.8CVSS5.8AI score0.00382EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.8 views

The vulnerability of the multimedia platform Adobe Shockwave Player, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the multimedia platform Adobe Shockwave Player is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.6AI score0.04084EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.6 views

The vulnerability of the Adobe Shockwave Player software lies in the fact that operations are performed outside the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of the multimedia platform Adobe Shockwave Player is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.5AI score0.05185EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2020/06/18 1:6 p.m.175 views

CVE-2017-9107

CVE-2017-9107 affects adns prior to 1.5.2. When a domain ends with a backslash and qdparselabel is invoked with adns_qf_quoteok_query, the input buffer may be overread, causing the code to process arbitrary heap data as part of the query domain. This could lead to memory exhaustion or a crash, i....

7.5CVSS8.4AI score0.01848EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.8 views

The vulnerability of Adobe Illustrator CC 2020, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe Illustrator CC 2020 is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by opening a malicious file...

10CVSS8AI score0.03426EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/26 12:0 a.m.5 views

The vulnerability of the Microsoft Color Management color control module in the Windows operating system allows a malicious actor to elevate their privileges or gain access to modify, add, or delete data.

The vulnerability of the Microsoft Color Management color control module in the Windows operating system relates to operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges or gain access to modify, add, or delet...

9CVSS7.6AI score0.11249EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.11 views

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain full control over the system through a specially create...

7.8CVSS7.6AI score0.00894EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.10 views

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain full control over the system through a specially create...

7.8CVSS7.6AI score0.00998EPSS
SaveExploits0References3
Gitee
Gitee
added 2020/05/06 3:20 p.m.18 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

This is a PoC exploit for CVE-2020-0796, a SMBv3 RCE vulnerability. The exploit is a simple scanner that checks if a server is vulnerable by sending a specially crafted SMB request. The scanner is designed to test whether a server is vulnerable, not for research or development. It checks for SMB...

10CVSS9.1AI score0.9981EPSS
SaveExploits125
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:0 a.m.8 views

The vulnerability of the exrmultiview function in the OpenEXR library, which allows a hacker to cause a service failure

The vulnerability of the exrmultiview function in the OpenEXR library is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or execute arbitrary code...

9.3CVSS7.4AI score0.02615EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:0 a.m.4 views

The vulnerability of the `setdistillerkeys` command in the software for processing, transforming, and generating Ghostscript documents allows a perpetrator to trigger a service failure.

The vulnerability of the setdistillerkeys command in the software for processing, transforming, and generating Ghostscript documents is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to trigger a service failure using a...

7.8CVSS6.8AI score0.01721EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:0 a.m.6 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

6.8CVSS7.8AI score0.01953EPSS
SaveExploits0References13Affected Software18
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.5 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a...

4.2CVSS7.4AI score0.07527EPSS
SaveExploits0References3
Rows per page
Query Builder