Lucene search
+L

2438 matches found

BDU FSTEC
BDU FSTEC
•added 2024/11/14 12:00 a.m.•20 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from operations that go beyond buffer boundaries in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS5.8AI score0.00268EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/14 12:00 a.m.•13 views

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading beyond the buffer boundary in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00275EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/14 12:00 a.m.•12 views

The vulnerability of the qcom component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the qcom component in the Linux operating system’s kernel is related to errors in reading beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00261EPSS
SaveExploits0References44Affected Software5
BDU FSTEC
BDU FSTEC
•added 2024/11/14 12:00 a.m.•13 views

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading beyond the buffer boundary in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00275EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/14 12:00 a.m.•13 views

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading beyond the buffer boundary in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00275EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/13 12:00 a.m.•21 views

The vulnerability of the Cisco Unified Threat Defense Snort Intrusion Prevention System Engine’s operating system, Cisco IOS XE, related to the operation of data out of the buffer in memory. This allows attackers to bypass existing security restrictions and trigger a service failure.

The vulnerability of the Cisco Unified Threat Defense Snort Intrusion Prevention System Engine’s operating system, Cisco IOS XE, lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and...

6.5CVSS5.8AI score0.00417EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/11/12 3:34 p.m.•34 views

CVE-2024-50331

An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak sensitive information in memory...

7.5CVSS0.01088EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/12 3:34 p.m.•32 views

CVE-2024-50331

An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak sensitive information in memory...

7.5CVSS6.7AI score0.01088EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/12 12:00 a.m.•24 views

PT-2024-8142 · Schneider Electric · Schneider Electric Modicon Mc80 Bmkc80 +2

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M340 CPU BMXP34 versions affected versions not specified Schneider Electric Modicon MC80 BMKC80 versions affected versions not specified Schneider Electric Modicon Momentum Unity M1E Processor 171CBU versions affect...

8.3CVSS8AI score0.00586EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2024/11/12 12:00 a.m.•14 views

PT-2024-8034 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 10.1.0 and earlier Description: The issue is related to an out-of-bounds write vulnerability in the memory. Exploitation of this issue could allow an attacker to execute arbitrary code in the context of the...

7.8CVSS7.6AI score0.00275EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/11/11 12:00 a.m.•15 views

The vulnerability of the PDF editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in its use of memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of the Foxit PDF Editor formerly Foxit PhantomPDF PDF editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...

7.8CVSS7.6AI score0.0081EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/11 12:00 a.m.•15 views

The vulnerability of Microsoft Edge and Google Chrome browsers’ artificial intelligence technologies allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Microsoft Edge and Google Chrome browsers’ artificial intelligence technologies is related to the use of memory after it is released. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected...

10CVSS7.2AI score0.0529EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
•added 2024/11/08 12:00 a.m.•12 views

The vulnerability of the Linux operating system’s crypto kernel component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s crypto kernel component is related to memory boundary errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00237EPSS
SaveExploits0References18Affected Software3
Cvelist
Cvelist
•added 2024/11/07 9:31 a.m.•33 views

CVE-2024-50159 firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix the double free in scmidebugfscommonsetup Clang static checkerscan-build throws below warning: | drivers/firmware/armscmi/driver.c:line 2915, column 2 | Attempt to free released memory. When...

7CVSS0.00224EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/11/07 12:00 a.m.•11 views

The vulnerability of the JavaScript engine in the Firefox web browser, related to memory usage after it is freed, allows attackers to gain access to confidential data.

The vulnerability of the JavaScript engine in the Firefox web browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

7.8CVSS7.4AI score0.0047EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/11/06 12:00 a.m.•13 views

The vulnerability of the x86_android_tablet_probe() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the x86androidtabletprobe function in the Linux kernel’s drivers/platform/x86/x86-android-tablets/core.c file is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

7.8CVSS7.2AI score0.00248EPSS
SaveExploits0References20Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/11/06 12:00 a.m.•18 views

The vulnerability of the Parcel Tracking component in Microsoft Edge and Google Chrome browsers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Parcel Tracking component in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a speciall...

10CVSS5.4AI score0.00465EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2024/11/06 12:00 a.m.•15 views

The vulnerability of the efc_nport_vport_del() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the efcnportvportdel function in the drivers/scsi/elx/libefc/efcnport.c file of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

7.8CVSS6.7AI score0.00209EPSS
SaveExploits0References24Affected Software6
BDU FSTEC
BDU FSTEC
•added 2024/11/05 12:00 a.m.•10 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS7.3AI score0.00598EPSS
SaveExploits0References21Affected Software12
Broadcom
Broadcom
•added 2024/11/01 12:00 a.m.•39 views

Buffer overrun from integer overflow in array modification (CVE-2023-5869)

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing...

8.8CVSS9AI score0.04322EPSS
SaveExploits0
Rows per page
Query Builder