Lucene search
+L

2806 matches found

OSV
OSV
•added 2019/05/03 8:29 p.m.•12 views

CVE-2019-11037

In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing to an array of values in ImagickKernel::fromMatrix function did not check that the address will be within the allocated array. This could lead to out of bounds write to memory if the function is called with the data controlled ...

9.8CVSS9.4AI score
SaveExploits0References11
Cvelist
Cvelist
•added 2019/05/03 7:28 p.m.•42 views

CVE-2019-11037 Out of bounds memory write in PHP Imagick extension

In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing to an array of values in ImagickKernel::fromMatrix function did not check that the address will be within the allocated array. This could lead to out of bounds write to memory if the function is called with the data controlled ...

4.9CVSS9.4AI score0.01972EPSS
SaveExploits0References11
Prion
Prion
•added 2019/04/26 5:29 p.m.•43 views

Type confusion

Incorrect handling of proto mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulnerability affects Firefox 66.0.1, Firefox ESR 60.6.1, and Thunderbird 60.6.1...

6.8CVSS8.1AI score0.07387EPSS
SaveExploits4References6Affected Software3
AlpineLinux
AlpineLinux
•added 2019/04/26 4:09 p.m.•685 views

CVE-2019-9813

Incorrect handling of proto mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulnerability affects Firefox 66.0.1, Firefox ESR 60.6.1, and Thunderbird 60.6.1...

8.8CVSS8.5AI score0.07387EPSS
SaveExploits4
CVE
CVE
•added 2019/04/26 4:09 p.m.•342 views

CVE-2019-9813

CVE-2019-9813 describes an IonMonkey JIT type confusion caused by incorrect handling of proto mutations, enabling potential arbitrary memory read/write. Affected products include Firefox prior to 66.0.1, Firefox ESR prior to 60.6.1, and Thunderbird prior to 60.6.1. The underlying issue is a type-...

8.8CVSS8.2AI score0.07387EPSS
SaveExploits4References6Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/26 12:00 a.m.•5 views

CVE-2019-9813: Access of Resource Using Incompatible Type

Incorrect handling of proto mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulnerability affects Firefox 66.0.1, Firefox ESR 60.6.1, and Thunderbird 60.6.1...

8.8CVSS8.3AI score0.07387EPSS
SaveExploits4References2
OSV
OSV
•added 2019/04/09 6:29 p.m.•13 views

CVE-2019-9133

When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then to memory out-of-bound read/write. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file...

5.5CVSS5.8AI score0.01875EPSS
SaveExploits0References3
Prion
Prion
•added 2019/04/08 4:29 p.m.•24 views

Remote code execution

An arbitrary memory write vulnerability exists in the dualonsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, that could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers...

7.5CVSS8.2AI score0.03465EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2019/04/08 4:29 p.m.•28 views

CVE-2014-5435

An arbitrary memory write vulnerability exists in the dualonsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, that could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers...

9.8CVSS9.8AI score0.03465EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/04/08 3:25 p.m.•31 views

CVE-2014-5435

An arbitrary memory write vulnerability exists in the dualonsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, that could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers...

9.8AI score0.03465EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2019/03/29 1:49 p.m.•32 views

CVE-2018-12182

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

6.7CVSS4.4AI score0.00412EPSS
SaveExploits0References3
CNVD
CNVD
•added 2019/03/29 12:00 a.m.•37 views

EDK2 Memory Write Vulnerability

EDK2 is a set of cross-platform firmware development environment based on UEFI and PI specifications. A security vulnerability exists in EDK2's SMM service that stems from the program's failure to adequately perform memory write checks. A local attacker could exploit the vulnerability to elevate...

6.7CVSS6.4AI score0.00412EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2019/03/28 2:52 p.m.•18 views

Mozilla: Ionmonkey type confusion with __proto__ mutations

Incorrect handling of proto mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulnerability affects Firefox 66.0.1, Firefox ESR 60.6.1, and Thunderbird 60.6.1...

8.8CVSS7.4AI score0.07387EPSS
SaveExploits4References5
RedHat Linux
RedHat Linux
•added 2019/03/28 2:52 p.m.•12 views

mozilla: Integer overflow in Skia

Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...

6.5CVSS7.4AI score0.0133EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2019/03/28 2:52 p.m.•16 views

Mozilla: Ionmonkey type confusion with __proto__ mutations

Incorrect handling of proto mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulnerability affects Firefox 66.0.1, Firefox ESR 60.6.1, and Thunderbird 60.6.1...

8.8CVSS7.4AI score0.07387EPSS
SaveExploits4References5
NVD
NVD
•added 2019/03/27 8:29 p.m.•24 views

CVE-2018-12182

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

6.7CVSS7AI score0.00412EPSS
SaveExploits0References4
OSV
OSV
•added 2019/03/27 8:29 p.m.•9 views

CVE-2018-12182

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

6.7CVSS5.8AI score0.00412EPSS
SaveExploits0References4
OSV
OSV
•added 2019/03/27 8:29 p.m.•9 views

UBUNTU-CVE-2018-12182

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

6.7CVSS6.9AI score0.00412EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2019/03/27 8:29 p.m.•41 views

CVE-2018-12182

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

6.7CVSS6.8AI score0.00412EPSS
SaveExploits0References3
Prion
Prion
•added 2019/03/27 8:29 p.m.•28 views

Information disclosure

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

4.6CVSS6.6AI score0.00412EPSS
SaveExploits0References4
Rows per page
Query Builder