Lucene search
K

1417 matches found

Ivan 'd0znpp' Novikov
Ivan 'd0znpp' Novikov
added 2021/05/17 7:51 a.m.148 views

What is a Buffer Overflow Attack❓ Types, How hackers use it | Wallarm

A buffer is a space of ​​physical storage memory used to store temporary data while moving from one place to another. These buffers usually reside in RAM. Computers often use buffers to improve performance; most modern hard drives use the benefits of buffering to access data efficiently, and many...

0.8AI score
Exploits0
CNVD
CNVD
added 2021/04/26 12:0 a.m.3 views

Unspecified vulnerability in Linux kernel PowerVR GPU kernel driver

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the PowerVR GPU kernel driver for the Linux kernel, which can be exploited by an attacker to overwrite heap memory via physmemnewrambackeddpm...

7CVSS6.8AI score0.00047EPSS
Exploits1References1
OSV
OSV
added 2021/04/24 6:15 p.m.2 views

CVE-2021-31795

The PowerVR GPU kernel driver in pvrsrvkm.ko through 2021-04-24 for the Linux kernel, as used on Alcatel 1S phones, allows attackers to overwrite heap memory via PhysmemNewRamBackedPMR...

7CVSS7AI score
Exploits0References1
CNNVD
CNNVD
added 2021/04/24 12:0 a.m.2 views

Linux kernel PowerVR GPU kernel driver 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the PowerVR GPU kernel driver for the Linux kernel, which can be exploited by an attacker to overwrite heap memory via physmemnewrambackeddpm...

7CVSS5.6AI score0.00047EPSS
Exploits1References2
CNVD
CNVD
added 2021/04/02 12:0 a.m.14 views

UX360CA BIOS through 303 on ASUS Code Execution Vulnerability

The Asus UX360CA BIOS through 303 is a laptop from Asus Japan. The UX360CA BIOS through 303 on ASUS contains a security vulnerability that can be exploited by an attacker to overwrite almost any physical memory location and execute arbitrary code in the SMM...

8.2CVSS7.4AI score0.02874EPSS
Exploits2References1
OSV
OSV
added 2021/03/31 8:15 p.m.2 views

CVE-2021-26943

The UX360CA BIOS through 303 on ASUS laptops allow an attacker with the ring 0 privilege to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM issue 3 of 3...

8.2CVSS6.1AI score0.02874EPSS
Exploits2References2
CNNVD
CNNVD
added 2021/03/31 12:0 a.m.2 views

Asus UX360CA BIOS through 303 安全漏洞

The Asus UX360CA BIOS through 303 is a laptop from Asus Japan. The UX360CA BIOS through 303 on ASUS contains a security vulnerability that can be exploited by an attacker to overwrite almost any physical memory location and execute arbitrary code in the SMM...

8.2CVSS6AI score0.02874EPSS
Exploits2References3
OSV
OSV
added 2021/03/24 8:15 p.m.2 views

CVE-2021-1390

A vulnerability in one of the diagnostic test CLI commands of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker would need to have valid user credentials at privilege level 15. This...

6.7CVSS7.4AI score0.0004EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.2 views

Foxit PhantomPDF 缓冲区错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF suffers from an out-of-bounds write vulnerability when processing U3D objects in PDF files. The vulnerability stems from the program not properly validating user input. An attacker could exploit this...

7.8CVSS6AI score0.0284EPSS
Exploits0References4
CNVD
CNVD
added 2021/03/05 12:0 a.m.5 views

Samsung quram code execution vulnerability

Samsung quram is a cell phone application from Samsung South Korea. It provides a translation function. A security vulnerability exists in the quram library version prior to SMR Jan-2021 Release 1, which can be exploited by an attacker to overwrite arbitrary memory and allow arbitrary code...

9.8CVSS7.4AI score0.00573EPSS
Exploits0References1
NVD
NVD
added 2021/03/04 10:15 p.m.14 views

CVE-2021-25346

A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution...

9.8CVSS0.00573EPSS
Exploits0References3
OSV
OSV
added 2021/03/04 10:15 p.m.1 views

CVE-2021-25346

A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution...

9.8CVSS7.5AI score
Exploits0References3
CVE
CVE
added 2021/03/04 9:6 p.m.83 views

CVE-2021-25346

CVE-2021-25346 affects Samsung quram library, with vulnerable versions prior to SMR Jan-2021 Release 1. The root cause is an arbitrary memory overwrite that can lead to arbitrary code execution. Publicly documented impact aligns with memory corruption in quram components; Samsung has released sec...

9.8CVSS9.7AI score0.00573EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2021/03/04 9:6 p.m.15 views

CVE-2021-25346

A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution...

7.1CVSS9.9AI score0.00573EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/03/04 12:0 a.m.3 views

三星 Samsung quram 缓冲区错误漏洞

Samsung quram is a cell phone application from Samsung South Korea. It provides a translation function. A security vulnerability exists in the quram library version prior to SMR Jan-2021 Release 1, which can be exploited by an attacker to overwrite arbitrary memory and allow arbitrary code...

9.8CVSS6.1AI score0.00573EPSS
Exploits0References5
OSV
OSV
added 2021/02/09 11:15 p.m.14 views

CVE-2021-26951

An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::setlen is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get...

9.8CVSS6.7AI score
Exploits0References1
NVD
NVD
added 2021/02/09 11:15 p.m.10 views

CVE-2021-26951

An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::setlen is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get...

9.8CVSS0.00504EPSS
Exploits1References1
Cvelist
Cvelist
added 2021/02/09 10:7 p.m.11 views

CVE-2021-26951

An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::setlen is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get...

9.6AI score0.00504EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/09 12:0 a.m.8 views

libmysofa Heap Buffer Overflow Vulnerability

libmysofa is a lightweight C library for reading AES SOFA files. A heap buffer overflow vulnerability exists in libmysofa 0.5 - 1.1. The vulnerability stems from the mysofaresamplerresetmem function failing to handle input data correctly. An attacker can exploit this vulnerability to cause a heap...

6.5CVSS7AI score0.00326EPSS
Exploits1References1
Metasploit
Metasploit
added 2021/02/04 5:42 p.m.161 views

Sudo Heap-Based Buffer Overflow

A heap based buffer overflow exists in the sudo command line utility that can be exploited by a local attacker to gain elevated privileges. The vulnerability was introduced in July of 2011 and affects version 1.8.2 through 1.8.31p2 as well as 1.9.0 through 1.9.5p1 in their default configurations...

7.8CVSS7.9AI score0.92579EPSS
Exploits81
Rows per page
Query Builder