Lucene search
+L

553 matches found

BDU FSTEC
BDU FSTEC
•added 2020/02/11 12:00 a.m.•13 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to an operation that goes beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are due to an operation that goes beyond the buffer in memory. Exploiting these vulnerabilities...

7.8CVSS7.4AI score0.02893EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/01/13 12:00 a.m.•15 views

The vulnerability of the Gauss100 OLTP database in the ManageOne data center management system allows a hacker to cause a service failure.

The vulnerability of the Gauss100 OLTP database in the ManageOne data center management system is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using specially crafted packets...

5.9CVSS7.4AI score0.00745EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/01/08 12:00 a.m.•12 views

The vulnerability of Huawei’s microprogrammed router software, related to reading data beyond the buffer in memory, allows attackers to cause service failures.

The vulnerability of Huawei’s microprogrammed router software relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

5.3CVSS7.4AI score0.00928EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/12/22 12:00 a.m.•11 views

Vulnerability of the ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx functions in the Linux operating system’s kernel, which allows an attacker to disclose sensitive information or cause service failures.

The vulnerabilities of the functions ath6klwmipstreamtimeouteventrx and ath6klwmicaceventrx drivers/net/wireless/ath/ath6kl/wmi.c in the Linux kernel are due to reading beyond the buffer boundaries in memory. Exploitation of these vulnerabilities can allow a remote attacker to disclose sensitive...

9.4CVSS6.7AI score0.05254EPSS
SaveExploits0References29Affected Software4
BDU FSTEC
BDU FSTEC
•added 2019/12/09 12:00 a.m.•23 views

The vulnerability of the image filter in Google Chrome’s Skia library allows a hacker to…

The vulnerability of the Image Filter in the Skia library of Google Chrome browser relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a...

9.3CVSS7.9AI score0.01666EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/12/03 12:00 a.m.•18 views

The vulnerability of Google Chrome’s swiftshader library allows attackers to gain unauthorized access to protected information.

The vulnerability of Google Chrome’s Swiftshader library arises from reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

7.8CVSS7.3AI score0.00889EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/12/03 12:00 a.m.•17 views

The vulnerability of the WebRTC technology implementation in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the WebRTC technology implemented in Google Chrome browsers arises from reading data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

10CVSS8.4AI score0.05264EPSS
SaveExploits2References9Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/12/03 12:00 a.m.•21 views

The vulnerability in the implementation of the WebRTC technology in Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

7.8CVSS7.3AI score0.02706EPSS
SaveExploits2References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/12/03 12:00 a.m.•16 views

The vulnerability in the implementation of the WebRTC technology in Google Chrome browser allows a hacker to induce a service failure.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

7.8CVSS7.3AI score0.02712EPSS
SaveExploits2References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/11/25 12:00 a.m.•17 views

The vulnerability of the ParseJSS component in the VideoLAN VLC media player software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ParseJSS component in the VideoLAN VLC media player software arises from reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS6.7AI score0.01369EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/11/11 12:00 a.m.•12 views

The vulnerabilities of the components of the Automationworx Software Suite, including PC Worx, PC Worx Express, and Config+, allow attackers to disclose protected information and execute arbitrary code.

The vulnerability of the components of the Automationworx Software Suite, including PC Worx, PC Worx Express, and Config+, lies in the ability to read data beyond the designated memory area. Exploiting this vulnerability allows an attacker to disclose sensitive information and execute arbitrary...

9.3CVSS6.7AI score0.0377EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2019/10/03 10:15 p.m.•17 views

CVE-2019-13325

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.909. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.03886EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/09/17 12:00 a.m.•14 views

The vulnerability of the hdAudio.sys component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the hdAudio.sys component in the Windows operating system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7CVSS5.7AI score0.00939EPSS
SaveExploits0References2
OSV
OSV
•added 2019/07/11 7:15 p.m.•6 views

DEBIAN-CVE-2019-12529

An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is configured to use Basic Authentication, the Proxy-Authorization header is parsed via uudecode. uudecode determines how many bytes will be decoded by iterating over the input and checki...

5.9CVSS6.9AI score0.08092EPSS
SaveExploits0References1
EUVD
EUVD
•added 2019/07/11 6:33 p.m.•11 views

EUVD-2019-4124

An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is configured to use Basic Authentication, the Proxy-Authorization header is parsed via uudecode. uudecode determines how many bytes will be decoded by iterating over the input and checki...

5.9CVSS7AI score0.08092EPSS
SaveExploits0References17
BDU FSTEC
BDU FSTEC
•added 2019/07/04 12:00 a.m.•17 views

The vulnerability in the implementation of 3D-acceleration functions for hypervisors such as VMware ESXi, VMware Fusion, and Vmware Workstation allows attackers to exploit it to disclose sensitive information or cause system failures during maintenance.

The vulnerability of the 3D-acceleration function implementation in VMware ESXi, VMware Fusion, and Vmware Workstation relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause system failur...

8.8CVSS5.7AI score0.01666EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/06/14 12:00 a.m.•14 views

The vulnerability of the HostScan component of the Cisco AnyConnect Secure Mobility Client software for secure mobile connectivity applications, which runs on Linux operating systems, allows a hacker to disclose protected information.

The vulnerability of the HostScan component of the Cisco AnyConnect Secure Mobility Client software for Linux operating systems relates to the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information through specially...

4.8CVSS5.7AI score0.01563EPSS
SaveExploits0References5
NVD
NVD
•added 2019/05/24 5:29 p.m.•29 views

CVE-2018-13885

Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9650, MDM9655, QCS605, Qualcomm 215, SD...

5.5CVSS5.7AI score0.00204EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/05/24 4:44 p.m.•36 views

CVE-2018-13885

Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9650, MDM9655, QCS605, Qualcomm 215, SD...

5.7AI score0.00204EPSS
SaveExploits0References1
CVE
CVE
•added 2019/05/24 4:44 p.m.•106 views

CVE-2018-13885

CVE-2018-13885 describes a memory overread in Qualcomm Snapdragon components (e.g., Snapdragon Auto/Compute/IoT, mobile, wearables) that could allow access to sensitive data. The issue is documented across multiple sources (NVD, Red Hat, CVE list, PRION) with consistent wording: a memory overread...

5.5CVSS5.7AI score0.00204EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder