Lucene search
+L

7733 matches found

Positive Technologies
Positive Technologies
•added 2022/12/23 12:00 a.m.•18 views

PT-2022-18889 · Unknown · Ydb Server

Name of the Vulnerable Software and Affected Versions: YDB server affected versions not specified Description: An out-of-bounds read was discovered in the YDB server, allowing an attacker to construct a query with an insert statement to read sensitive information from other memory locations or...

9.1CVSS8.9AI score0.0069EPSS
SaveExploits0References4
NVD
NVD
•added 2022/12/22 10:15 p.m.•19 views

CVE-2022-41684

A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to denial of service. An attacker can provide a...

7.5CVSS0.00765EPSS
SaveExploits1References4
osv_debian
osv_debian
•added 2022/12/22 10:15 p.m.•6 views

DEBIAN-CVE-2022-41684

A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to denial of service. An attacker can provide a...

5.5CVSS7.3AI score0.00765EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/12/22 10:15 p.m.•14 views

UBUNTU-CVE-2022-41649

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An attacker can provide a malicious file to trigger...

9.1CVSS7.2AI score0.01498EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2022/12/22 8:15 p.m.•6 views

DEBIAN-CVE-2022-31741

A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further memory corruption. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...

8.8CVSS8.3AI score0.00705EPSS
SaveExploits0References1
NVD
NVD
•added 2022/12/22 8:15 p.m.•33 views

CVE-2022-28285

When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

6.5CVSS0.00789EPSS
SaveExploits1References4
osv_debian
osv_debian
•added 2022/12/22 8:15 p.m.•5 views

DEBIAN-CVE-2022-28285

When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

6.5CVSS6.7AI score0.00789EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/12/22 8:15 p.m.•15 views

CVE-2022-28285

When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

6.5CVSS8.4AI score
SaveExploits0References4
Prion
Prion
•added 2022/12/22 8:15 p.m.•29 views

Design/Logic Flaw

When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

4.3CVSS6.9AI score0.00789EPSS
SaveExploits1References4Affected Software3
Mend
Mend
•added 2022/12/22 12:00 a.m.•7 views

CVE-2022-28285

When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

7.1CVSS0.00789EPSS
SaveExploits1References8
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•57 views

CVE-2022-28285

When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

6.5CVSS7.6AI score0.00789EPSS
SaveExploits1
Cvelist
Cvelist
•added 2022/12/22 12:00 a.m.•33 views

CVE-2022-28285

When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

7.4AI score0.00789EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/22 12:00 a.m.•3 views

CVE-2022-31741: Use of Uninitialized Resource

A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further memory corruption. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...

8.8CVSS5.8AI score0.00705EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/12/22 12:00 a.m.•4 views

CVE-2022-28285

When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

6.3AI score0.00789EPSS
SaveExploits1References4
CVE
CVE
•added 2022/12/22 12:00 a.m.•641 views

CVE-2022-28285

CVE-2022-28285 describes an incorrect AliasSet used during MLoadTypedArrayElementHole JIT codegen, enabling a potential out-of-bounds read when combined with another vulnerability. Affected products include Thunderbird < 91.8, Firefox < 99, and Firefox ESR

6.5CVSS7.2AI score0.00789EPSS
SaveExploits1References4Affected Software3
Debian CVE
Debian CVE
•added 2022/12/22 12:00 a.m.•33 views

CVE-2022-28285

When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

6.5CVSS8.1AI score0.00789EPSS
SaveExploits1
CNNVD
CNNVD
•added 2022/12/19 12:00 a.m.•92 views

Linux Kernel Information Leakage Vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An information disclosure vulnerability exists in the Linux kernel. An attacker exploits this vulnerability to read memory segments of the Linux kernel to obtain sensitive...

5.5CVSS6.7AI score0.00982EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2022/12/14 12:00 a.m.•13 views

X.Org X Server buffer error vulnerability

X.Org X Server is an X Window System display server from the X.org Foundation. X.Org X Server suffers from a buffer error vulnerability that stems from its XIChangeProperty request handler incorrectly validating the length leading to out-of-bounds memory reads and potential information disclosure...

8.8CVSS8.6AI score0.02899EPSS
SaveExploits0References22
Veracode
Veracode
•added 2022/12/08 6:41 a.m.•36 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the MakeGrapplerFunctionItem function of functions.cc does not properly validate the input-output arguments, allowing an attacker to out-of-bounds memory read or crash the application if the inputs given are greater...

9.1CVSS8.5AI score0.00439EPSS
SaveExploits0References11Affected Software3
Veracode
Veracode
•added 2022/12/08 5:38 a.m.•34 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the MakeGrapplerFunctionItem in functions.cc does not properly validate the input-output arguments, allowing an attacker to cause out-of-bounds memory read or crash the application if the inputs given are greater than...

9.1CVSS8.4AI score0.00492EPSS
SaveExploits0References11Affected Software3
Rows per page
Query Builder