Lucene search
+L

109 matches found

BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.10 views

The vulnerability of the CODESYS Runtime Toolkit execution environment arises from overflowing buffers in dynamic memory, allowing attackers to trigger a service failure or reallocate memory areas.

The vulnerability of the CODESYS Runtime Toolkit execution environment is due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure or reallocate memory by sending a specially crafted request...

9CVSS8.1AI score0.01323EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/02/09 12:0 a.m.6 views

The vulnerability of the `package_set_ring` function in the `net/packet/af_packet.c` component of the Linux kernel allows a hacker to increase their privileges within the system or cause a service failure.

The vulnerability of the packagesetring function in the net/packet/afpacket.c component of the Linux kernel is related to the reallocation of memory. Exploiting this vulnerability could allow a remote attacker to increase their privileges within the system or cause service failures...

9CVSS6.9AI score0.05918EPSS
SaveExploits2References28Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:0 a.m.8 views

The vulnerability of the libxslt library in iOS, iPadOS, tvOS, watchOS, and macOS allows attackers to execute arbitrary code on the target system.

The vulnerability of the libxslt library in iOS, iPadOS, tvOS, watchOS, and macOS relates to the reallocation of memory. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system using a specially created malicious file...

7.8CVSS7.7AI score0.00911EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.5 views

The vulnerability of the OpenLDAP protocol, related to the reallocation of memory, allows a hacker to perform a denial-of-service attack.

The vulnerability of the OpenLDAP protocol is related to the reclamation of memory. Exploiting this vulnerability allows a malicious actor to perform a service denial by sending a specially crafted request to slapd...

7.8CVSS6.9AI score0.043EPSS
SaveExploits0References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.8 views

The vulnerability of the OpenLDAP protocol, related to the reallocation of memory, allows a hacker to perform a denial-of-service attack.

The vulnerability of the OpenLDAP protocol lies in the repeated memory release that occurs during the processing of control elements involving value return filters. Exploiting this vulnerability allows a malicious actor to perform a denial-of-service attack by sending a specially crafted request ...

7.8CVSS6.8AI score0.043EPSS
SaveExploits0References13Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/04/16 12:0 a.m.7 views

The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack, related to the repeated memory release, allows a attacker to cause a service failure.

The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack is related to the reallocation of memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

8.5CVSS8.1AI score0.13195EPSS
SaveExploits1References4Affected Software146
OSV
OSV
added 2020/09/11 7:15 p.m.7 views

CVE-2013-7491

An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated...

5.3CVSS5.5AI score
SaveExploits0References4
CVE
CVE
added 2020/09/11 6:37 p.m.62 views

CVE-2013-7491

CVE-2013-7491 affects the Perl DBI module prior to 1.628. The issue is a stack corruption that occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack is reallocated. Impact is described as potential memory corruption related to stack handling; exploitation ...

5.3CVSS5.4AI score0.02656EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/10 12:0 a.m.7 views

The vulnerability of the ReadableStream component in Firefox ESR and Firefox web browsers, as well as in the Thunderbird email client, relates to the reallocation of memory areas. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ReadableStream component in Firefox ESR and Firefox web browsers, as well as in the Thunderbird email client, is related to the reallocation of memory areas. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity,...

6.8CVSS7.5AI score0.06305EPSS
SaveExploits0References17Affected Software7
OSV
OSV
added 2020/01/03 1:15 a.m.6 views

PYSEC-2020-81

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...

8.8CVSS6.8AI score0.01975EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.6 views

The vulnerability of the Libarchive library for working with archives, related to double memory release, allows a perpetrator to trigger a service failure.

The vulnerability of the library for working with Libarchive archives libarchive/archivereadsupportformatrar.c is related to an error in the RAR format decoder, which causes resources in memory to be re-allocated. Exploiting this vulnerability could allow a remote attacker to cause service...

8.8CVSS6.4AI score0.04575EPSS
SaveExploits0References16Affected Software7
Zero Day Initiative
Zero Day Initiative
added 2019/01/19 12:0 a.m.17 views

LAquis SCADA LGX Report Memory ReAlloc Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS2.5AI score0.02572EPSS
SaveExploits0References1
OSV
OSV
added 2017/11/12 6:29 p.m.3 views

UBUNTU-CVE-2017-16796

In SWFTools 0.9.2, the pngload function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service invalid write and application crash or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file...

7.8CVSS5.9AI score0.01224EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2017/08/01 2:11 p.m.4 views

openssh: Leak of host private key material to privilege-separated child process via realloc()

It was found that the host private key material could possibly leak to the privilege-separated child processes via re-allocated memory. An attacker able to compromise the privilege-separated process could therefore obtain the leaked key information...

6.2CVSS7.2AI score0.01101EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2017/02/17 12:0 a.m.7 views

The vulnerability of the OpenSSH cryptographic protection mechanism, which allows a hacker to gain access to the protected information

The vulnerability in authfile.c of the sshd component of the OpenSSH cryptographic protection mechanism is related to the improper handling of the effect of implementing block memory reallocation functions. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to...

2.1CVSS6.6AI score0.01101EPSS
SaveExploits1References7
Exploit DB
Exploit DB
added 2016/11/02 12:0 a.m.61 views

Microsoft Internet Explorer 9 - MSHTML CAttrArray Use-After-Free (MS14-056)

oTextArea = document.createElement'textarea'; oTextArea.dataSrc = 1; oTextArea.id = 1; oTextArea.innerHTML = 1; oTextArea.onvolumechange = 1; oTextArea.style.setProperty'list-style', "url"; !-- Analysis The CAttrArray object initially allocates a CImplAry buffer of 0x40 bytes, which can store 4...

7.4AI score
SaveExploits0
exploitpack
exploitpack
added 2016/11/02 12:0 a.m.14 views

Microsoft Internet Explorer 9 - MSHTML CAttrArray Use-After-Free (MS14-056)

Microsoft Internet Explorer 9 - MSHTML CAttrArray Use-After-Free MS14-056 oTextArea = document.createElement'textarea'; oTextArea.dataSrc = 1; oTextArea.id = 1; oTextArea.innerHTML = 1; oTextArea.onvolumechange = 1; oTextArea.style.setProperty'list-style', "url"; !-- Analysis The CAttrArray objec...

0.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/10/20 12:0 a.m.30 views

Debian DLA-668-1 : libass security update

Several vulnerabilities were discovered in libass, a library for manipulating the SubStation Alpha SSA subtitle file format. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2016-7969 Mode 0/3 line wrapping equalization in specific cases which could result in...

7.5CVSS7.2AI score0.05186EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2016/06/09 12:0 a.m.9 views

The vulnerability of the FreeBSD operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the sockargs function sys/kern/uipcsyscalls.c in the FreeBSD operating system is caused by a buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker acting locally to cause a service failure memory reallocation and kernel errors, or to increase...

8.4CVSS7.5AI score0.01111EPSS
SaveExploits2References4
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.6 views

The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure or cause other adverse effects

The vulnerability of the dsaprivdecode function crypto/dsa/dsaameth.c in the OpenSSL library is related to the reallocation of memory. Exploiting this vulnerability allows a remote attacker to cause a service failure or other effects such as memory corruption by using an altered private DSA key...

10CVSS7.5AI score0.26335EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder