Lucene search
K

1417 matches found

CNNVD
CNNVD
added 2022/07/15 12:0 a.m.4 views

Adobe InDesign 缓冲区错误漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a buffer overflow vulnerability that stems from a lack of proper validation of user-supplied data, which can be exploited by an attacker to trigger a write beyond the en...

7.8CVSS6AI score0.00088EPSS
Exploits0References4
NVD
NVD
added 2022/06/24 8:15 a.m.15 views

CVE-2022-32142

Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a...

8.1CVSS0.00787EPSS
Exploits0References1
OSV
OSV
added 2022/06/24 8:15 a.m.1 views

CVE-2022-32138

In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite...

8.8CVSS5.8AI score0.01077EPSS
Exploits0References1
NVD
NVD
added 2022/06/24 8:15 a.m.16 views

CVE-2022-32137

In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction is not required...

8.8CVSS0.01044EPSS
Exploits0References1
OSV
OSV
added 2022/06/24 8:15 a.m.0 views

CVE-2022-32137

In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction is not required...

8.8CVSS6AI score
Exploits0References1
NVD
NVD
added 2022/06/24 8:15 a.m.12 views

CVE-2022-32138

In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite...

8.8CVSS0.01077EPSS
Exploits0References1
Prion
Prion
added 2022/06/24 8:15 a.m.13 views

Out-of-bounds

Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a...

5.5CVSS7.7AI score0.00787EPSS
Exploits0References1Affected Software2
Prion
Prion
added 2022/06/24 8:15 a.m.14 views

Memory corruption

In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite...

6.5CVSS8.6AI score0.01077EPSS
Exploits0References1Affected Software2
Prion
Prion
added 2022/06/24 8:15 a.m.20 views

Heap overflow

In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction is not required...

6.5CVSS8.6AI score0.01044EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2022/06/24 7:46 a.m.15 views

CVE-2022-32142 CODESYS runtime system prone to denial of service due to use of out of range pointer

Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a...

8.1CVSS8AI score0.00787EPSS
Exploits0References1
CVE
CVE
added 2022/06/24 7:46 a.m.64 views

CVE-2022-32142

CVE-2022-32142 affects multiple CODESYS products; an attacker with low privileges can craft requests with invalid offsets to trigger an out-of-bounds read/write, causing DoS or local memory overwrite and potentially changing local files. Descriptions consistently state no user interaction is requ...

8.1CVSS7.9AI score0.00787EPSS
Exploits0References1Affected Software2
CVE
CVE
added 2022/06/24 7:46 a.m.55 views

CVE-2022-32138

CVE-2022-32138 affects multiple CODESYS products. A remote attacker can craft a request that triggers an unexpected sign extension, leading to denial-of-service or memory overwrite. The CVSS scores indicate high impact (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Affected detail on exact products, vers...

8.8CVSS8.8AI score0.01077EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2022/06/24 7:46 a.m.17 views

CVE-2022-32138 CODESYS runtime system prone to denial of service due to Unexpected Sign Extension

In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite...

8.8CVSS8.9AI score0.01077EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/06/24 7:46 a.m.19 views

CVE-2022-32137 CODESYS Runtime System prone to heap based buffer overflow

In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction is not required...

8.8CVSS8.8AI score0.01044EPSS
Exploits0References1
CVE
CVE
added 2022/06/24 7:46 a.m.62 views

CVE-2022-32137

In CVE-2022-32137, multiple CODESYS products are affected by a heap-based buffer overflow that an unauthenticated, low-privilege remote attacker can trigger by crafting a request. This condition can result in a Denial of Service or a memory overwrite, with no user interaction required. The NVD en...

8.8CVSS8.8AI score0.01044EPSS
Exploits0References1Affected Software2
CNNVD
CNNVD
added 2022/06/24 12:0 a.m.1 views

CODESYS 安全漏洞

CODESYS is a controller development system from Germany's 3S-Smart Software Solutions CODESYS A security vulnerability exists in several products, which could be exploited by a low-privileged remote attacker to craft requests, which could result in a heap-based buffer overflow that could lead to ...

8.8CVSS8.2AI score0.01044EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/06/24 12:0 a.m.1 views

CODESYS 缓冲区错误漏洞

CODESYS is a controller development system from Germany's 3S-Smart Software Solutions. A buffer error vulnerability exists in several CODESYS products and stems from a lack of internal buffer read limits in the application. An attacker can exploit this vulnerability by crafting requests with...

8.1CVSS8.2AI score0.00787EPSS
Exploits0References2
OSV
OSV
added 2022/06/13 6:15 p.m.2 views

CVE-2021-40036

The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution...

9.8CVSS5.9AI score0.00276EPSS
Exploits0References1
NVD
NVD
added 2022/06/13 6:15 p.m.14 views

CVE-2021-40036

The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution...

9.8CVSS0.00276EPSS
Exploits0References1
Prion
Prion
added 2022/06/13 6:15 p.m.18 views

Design/Logic Flaw

The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution...

7.5CVSS9.5AI score0.00276EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder