Lucene search
+L

78 matches found

OSV
OSV
added 2022/11/08 8:13 a.m.8 views

USN-5714-1 tiff vulnerabilities

It was discovered that LibTIFF incorrectly handled certain memory operations when using tiffcrop. An attacker could trick a user into processing a specially crafted tiff image file and potentially use this issue to cause a denial of service. This issue only affected Ubuntu 22.10. CVE-2022-2519,...

7.7CVSS6.6AI score0.0173EPSS
SaveExploits11References15
OSV
OSV
added 2022/10/14 2:13 p.m.8 views

USN-5681-1 gThumb vulnerabilities

It was discovered that gThumb did not properly managed memory under certain circumstances. An attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2018-18718 It was discovered that gThumb did not properly manage...

7.8CVSS7AI score0.02149EPSS
SaveExploits2References4
BDU FSTEC
BDU FSTEC
added 2022/07/15 12:0 a.m.10 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data outside of the buffer in memory. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.03363EPSS
SaveExploits0References2
OSV
OSV
added 2022/05/31 11:29 a.m.6 views

USN-5454-1 cups vulnerabilities

Joshua Mason discovered that CUPS incorrectly handled the secret key used to access the administrative web interface. A remote attacker could possibly use this issue to open a session as an administrator and execute arbitrary code. CVE-2022-26691 It was discovered that CUPS incorrectly handled...

7.2CVSS6.6AI score0.02031EPSS
SaveExploits0References4
OSV
OSV
added 2022/04/27 9:32 a.m.3 views

USN-5391-1 libsepol vulnerabilities

Nicolas Iooss discovered that libsepol incorrectly handled memory when handling policies. An attacker could possibly use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2021-36084 It was discovered that libsepol incorrectly handled memory whe...

3.3CVSS6.9AI score0.00597EPSS
SaveExploits4References5
OSV
OSV
added 2022/03/29 2:25 p.m.9 views

MGASA-2022-0121 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.32 and fixes at least the following security issues: An out-of-bounds OOB memory write flaw was found in the Linux kernel’s watchqueue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to...

7.8CVSS7.6AI score0.06197EPSS
SaveExploits24References6
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.27 views

Mageia: Security Advisory (MGASA-2021-0575)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00513EPSS
SaveExploits3References7
BDU FSTEC
BDU FSTEC
added 2021/08/13 12:0 a.m.7 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execut...

10CVSS8AI score0.09685EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/08/06 12:0 a.m.6 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader involve memory management issues after memory is freed, allowing attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2019, and Adobe Acrobat Reader 2019 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a remote attacker to...

10CVSS8.2AI score0.04334EPSS
SaveExploits0References2
ThreatPost
ThreatPost
added 2021/07/13 6:55 p.m.142 views

Adobe Patches 11 Critical Bugs in Popular Acrobat PDF Reader

Eleven critical bugs in Adobe’s popular and free PDF reader, Acrobat, open both Window and macOS users to attacks ranging from an adversary arbitrarily executing commands on a targeted system to data leakage tied to system-read and memory flaws. In a Tuesday security bulletin, which included...

9.3CVSS7.6AI score0.66052EPSS
SaveExploits0References7
OSV
OSV
added 2021/05/18 2:39 p.m.5 views

USN-4957-2 djvulibre vulnerabilities

USN-4957-1 fixed several vulnerabilities in DjVuLibre. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a...

7.8CVSS7.3AI score0.01001EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2020/12/08 12:0 a.m.10 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execute arbitrary...

9.3CVSS7.7AI score0.46549EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/12/08 12:0 a.m.11 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is released. These vulnerabilities allow attackers to disclose protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to disclose protected...

4.3CVSS5.4AI score0.03892EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2020/09/29 8:16 p.m.7 views

webkitgtk: Multiple memory corruption issues leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution...

8.8CVSS7.5AI score0.01797EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2020/09/29 12:0 a.m.10 views

The vulnerability of Intel Active Management Technology and Standard Manageability implementations lies in the possibility of operations exceeding the buffer boundaries in memory, allowing attackers to exploit their privileges.

The vulnerability of Intel Active Management Technology and Standard Manageability implementations lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

10CVSS8.2AI score0.03536EPSS
SaveExploits0References3Affected Software2
OSV
OSV
added 2020/09/08 4:18 p.m.6 views

USN-4487-2 libx11 vulnerabilities

USN-4487-1 fixed several vulnerabilities in libx11. This update provides the corresponding update for Ubuntu 12.04 ESM and 14.04 ESM. Original advisory details: Todd Carson discovered that libx11 incorrectly handled certain memory operations. A local attacker could possibly use this issue to...

7.8CVSS7AI score0.00575EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.9 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve an exploit that allows an attacker to execute arbitrary code. This exploit relies on a flaw in memory management, enabling the attacker to perform unauthorized operations.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerabili...

9.3CVSS8.5AI score0.13541EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/03/13 12:0 a.m.9 views

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge’s web browser, based on EdgeHTML, relates to memory object handling flaws, allowing an attacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge’s web browser, based on EdgeHTML, is related to memory-related object handling flaws. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

4.2CVSS7AI score0.13303EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/03/12 12:0 a.m.7 views

The vulnerability of VBScript script handlers in the Internet Explorer web browser allows a hacker to execute arbitrary code.

The vulnerability of VBScript script handlers in the Internet Explorer web browser is related to deficiencies in object handling in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

7.6CVSS7.7AI score0.07937EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/03/12 12:0 a.m.8 views

The vulnerability of the Internet Explorer web browser’s script handler allows a hacker to execute arbitrary code.

The vulnerability of the Internet Explorer web browser’s script handler is related to memory-related object handling flaws. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

7.6CVSS7.7AI score0.08677EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder