Lucene search
+L

582 matches found

CNVD
CNVD
added 2020/04/17 12:0 a.m.22 views

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-61061)

NETGEAR R6250 and others are a wireless router from NETGEAR USA. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in incorre...

6.8CVSS2.5AI score0.00506EPSS
Exploits0References1
CNVD
CNVD
added 2020/04/17 12:0 a.m.20 views

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-61062)

NETGEAR D8500 and others are a wireless router from NETGEAR USA. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in incorre...

6.8CVSS2.5AI score0.00506EPSS
Exploits0References1
CNVD
CNVD
added 2020/04/17 12:0 a.m.21 views

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-63773)

The NETGEAR R8900, among others, is a wireless router from NETGEAR. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in an...

6.8CVSS6.8AI score0.00506EPSS
Exploits0References1
CNVD
CNVD
added 2020/04/17 12:0 a.m.23 views

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-61056)

NETGEAR R8900 and others are a wireless router from NETGEAR USA. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in incorre...

6.8CVSS2.5AI score0.00506EPSS
Exploits0References1
CNVD
CNVD
added 2020/04/17 12:0 a.m.27 views

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-67656)

NETGEAR R9000 and others are a wireless router from NETGEAR USA. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in incorre...

6.7CVSS2.5AI score0.00314EPSS
Exploits0References1
CNVD
CNVD
added 2020/04/17 12:0 a.m.23 views

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-67658)

NETGEAR EX7000 and others are a wireless router from NETGEAR USA. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in...

6.8CVSS2.5AI score0.00506EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/10 12:0 a.m.4 views

The vulnerability of the WebKit rendering module, related to the execution of operations beyond the buffer boundaries in memory, allows an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

9.3CVSS7.6AI score0.01797EPSS
Exploits0References10Affected Software16
CNVD
CNVD
added 2020/04/03 12:0 a.m.3 views

GNU C Library Buffer Overflow Vulnerability (CNVD-2020-29729)

The GNU C Library glibc, libc6 is an open-source, free C compiler released under the LGPL license. A buffer overflow vulnerability exists in versions of the GNU C Library prior to 2.31. The vulnerability stems from a networked system or product performing operations in memory without properly...

7CVSS9.7AI score0.00537EPSS
Exploits0References1
Prion
Prion
added 2020/03/24 7:15 p.m.19 views

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with P9.0 SM6150, SM8150, SM8150FUSION, exynos7885, exynos9610, and exynos9820 chipsets software. Arbitrary memory read and write operations can occur in RKP. The Samsung ID is SVE-2019-15143 October 2019...

7.5CVSS9.3AI score0.00443EPSS
Exploits0References1Affected Software1
Cloud Foundry
Cloud Foundry
added 2020/02/20 12:0 a.m.32 views

USN-4263-1: Sudo vulnerability | Cloud Foundry

Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description Joe Vennix discovered that Sudo incorrectly handled memory operations when the pwfeedback option is enabled. A local attacker could possibly use this issue to obtain unintended access ...

7.8CVSS7.9AI score0.19426EPSS
Exploits13Affected Software2
CNVD
CNVD
added 2020/02/17 12:0 a.m.4 views

Mozilla Thunderbird Buffer Overflow Vulnerability (CNVD-2020-10432)

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A buffer overflow vulnerability exists in Mozilla Thunderbird versions prior to 68.5. The...

4.3CVSS9.2AI score0.01332EPSS
Exploits0References1
CNVD
CNVD
added 2020/02/17 12:0 a.m.4 views

PCRE Buffer Overflow Vulnerability

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A buffer overflow vulnerability exists in versions of PCRE prior to 10.34. The vulnerability stems from a networked system or product...

7.5CVSS8.7AI score0.01561EPSS
Exploits1References1
CNVD
CNVD
added 2020/02/11 12:0 a.m.6 views

Clam AntiVirus Buffer Overflow Vulnerability (CNVD-2020-04573)

Clam AntiVirus is an open source antivirus engine from the ClamAV team for detecting Trojans, viruses, malware and other malicious threats. A buffer overflow vulnerability exists in Clam AntiVirus. The vulnerability originates when a networked system or product performs an operation on memory...

7.5CVSS9.8AI score0.02604EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2020/02/04 12:0 a.m.49 views

Ubuntu 16.04 LTS / 18.04 LTS : Sudo vulnerability (USN-4263-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4263-1 advisory. Joe Vennix discovered that Sudo incorrectly handled memory operations when the pwfeedback option is enabled. A local attacker could possibly use this...

7.8CVSS7.5AI score0.19426EPSS
Exploits13References2
OpenVAS
OpenVAS
added 2020/02/04 12:0 a.m.31 views

Ubuntu: Security Advisory (USN-4263-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.2AI score0.19426EPSS
Exploits13References2
Ubuntu
Ubuntu
added 2020/02/03 1:19 p.m.113 views

USN-4263-1: Sudo vulnerability

Joe Vennix discovered that Sudo incorrectly handled memory operations when the pwfeedback option is enabled. A local attacker could possibly use this issue to obtain unintended access to the administrator account...

7.8CVSS7.4AI score0.19426EPSS
Exploits13
CNVD
CNVD
added 2019/12/06 12:0 a.m.58 views

fig2dev buffer overflow vulnerability (CNVD-2021-79776)

fig2dev is a tool for printing and exporting .fig format files. A buffer error vulnerability exists in the 'readtextobject' function of the read.c file in fig2dev version 3.2.7b. The vulnerability stems from a networked system or product that does not properly validate data boundaries when...

4.3CVSS2.5AI score0.01069EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2019/12/04 12:0 a.m.36 views

Cisco IOS XE Software Authentication, Authorization, and Accounting Login Authentication RCE (cisco-sa-20180606-aaa)

According to its self-reported version, Cisco IOS XE Software is affected by a remote code execution vulnerability in the authentication, authorization, and accounting AAA security services due to incorrect memory operations that the affected software performs when the software parses a username...

9.8CVSS9.4AI score0.08074EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.8 views

The vulnerability in the implementation of the graphics processing unit driver for Google Chrome browser allows a hacker to trigger a service failure.

The vulnerability in the implementation of the graphics processing engine of Google Chrome browser is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

7.8CVSS7.8AI score0.01547EPSS
Exploits0References8Affected Software2
NVD
NVD
added 2019/11/29 4:15 p.m.13 views

CVE-2019-19391

In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack levels and options are mishandled. NOTE: The LuaJIT project owner states that...

9.1CVSS9.3AI score0.0133EPSS
Exploits0References2
Rows per page
Query Builder