Lucene search
+L

3715 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/21 12:00 a.m.•4 views

CVE-2015-5314: Improper Restriction of Operations within the Bounds of a Memory Buffer

The eappwdprocess function in eapserver/eapserverpwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with 1 an internal EAP server or 2 a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote...

5.9CVSS6.4AI score0.02255EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2018/02/21 12:00 a.m.•17 views

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.

The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this...

9.3CVSS6.2AI score0.24499EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/19 12:00 a.m.•5 views

CVE-2010-0109: Improper Restriction of Operations within the Bounds of a Memory Buffer

DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request...

6.5CVSS6.7AI score0.00838EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/15 12:00 a.m.•9 views

CVE-2017-17297: Improper Restriction of Operations within the Bounds of a Memory Buffer

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

5.3CVSS6.3AI score0.01218EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/15 12:00 a.m.•4 views

CVE-2017-17295: Improper Restriction of Operations within the Bounds of a Memory Buffer

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

5.3CVSS6.3AI score0.01218EPSS
SaveExploits0References2
ICS
ICS
•added 2018/02/15 12:00 a.m.•101 views

GE D60 Line Distance Relay

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: GE Equipment: D60 Line Distance Relay Vulnerabilities: Stack-based Buffer Overflow, Improper Restriction of Operations within the Bounds of a Memory Buffer AFFECTED PRODUCTS The following versions of the D60 Line...

10CVSS10AI score0.05894EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2018/02/15 12:00 a.m.•16 views

Vulnerability of Adobe software for viewing and editing PDF files, caused by an operation that goes beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe’s software for viewing and editing PDF files arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause memory corruption and execute arbitrary code remotely...

10CVSS8.5AI score0.09086EPSS
SaveExploits0References4Affected Software2
GithubExploit
GithubExploit
•added 2018/02/09 5:20 p.m.•32 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2017-11826 Exploit fo...

9.3CVSS7.4AI score0.81158EPSS
SaveExploits3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/08 12:00 a.m.•5 views

CVE-2013-3552: Improper Restriction of Operations within the Bounds of a Memory Buffer

Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file...

9.3CVSS7.9AI score0.02752EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/05 12:00 a.m.•5 views

CVE-2018-5796: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Hidden Root Shell by entering the administrator password in conjunction with the 'service start-shell' CLI command...

9CVSS7.2AI score0.01413EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/01 12:00 a.m.•2 views

CVE-2017-1000409: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow in glibc 2.5 released on September 29, 2006 and can be triggered through the LDLIBRARYPATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366...

7CVSS7.3AI score0.01208EPSS
SaveExploits5References2
GithubExploit
GithubExploit
•added 2018/01/22 9:15 p.m.•27 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Ios

CiscoIOSSNMPToolkit !forthebadgehttp://forthebadge.com/im...

9CVSS6.6AI score0.99913EPSS
SaveExploits25
ICS
ICS
•added 2018/01/18 12:00 a.m.•63 views

Siemens SIMATIC WinCC Add-On (Update A)

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIMATIC WinCC Add-On Vulnerabilities: Stack-based Buffer Overflow, Improper Input Validation, Improper Restriction of Operations within the Bounds of a Memory Buffer, Security Features, Improper...

9.9CVSS1AI score0.04758EPSS
SaveExploits0References50
GithubExploit
GithubExploit
•added 2018/01/16 5:49 a.m.•50 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

PoC exploit for CVE-2018-0802 and CVE-2017-11882, two separate v...

9.3CVSS7.7AI score0.99945EPSS
SaveExploits36
GithubExploit
GithubExploit
•added 2018/01/16 5:49 a.m.•77 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

It is an exploit module for Apache HTTP Server. The target pr...

9.3CVSS8.3AI score0.99945EPSS
SaveExploits36
GithubExploit
GithubExploit
•added 2018/01/12 11:38 a.m.•170 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

PoC exploit for CVE-2018-0802 and CVE-2017-11882. The target pro...

9.3CVSS8.3AI score0.99945EPSS
SaveExploits36
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/12 12:00 a.m.•4 views

CVE-2017-13197: Improper Restriction of Operations within the Bounds of a Memory Buffer

In the ihevcdparseslice.c function, slave threads are not joined if there is an error. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1...

7.8CVSS7.3AI score0.02173EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2018/01/12 12:00 a.m.•17 views

The vulnerability of the queue_push function in the yodl package, which allows a perpetrator to compromise data confidentiality, integrity, and accessibility.

The vulnerability of the queuepush function in the yodl package occurs due to the operation being performed outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of data...

9.8CVSS5.8AI score0.02232EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/11 12:00 a.m.•4 views

CVE-2018-5335: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash. This was addressed in epan/dissectors/packet-wcp.c by validating the available buffer length...

6.5CVSS6.7AI score0.01889EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2018/01/11 12:00 a.m.•46 views

Debian: Security Advisory (DLA-868-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6AI score0.01842EPSS
SaveExploits0References3
Rows per page
Query Builder