Lucene search
+L

2305 matches found

CNNVD
CNNVD
added 2022/05/02 12:00 a.m.11 views

多款Qualcomm产品资源管理错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and from time to time manufactured on the surface of semiconductor wafers. A security vulnerability exists in a number of Qualcomm products,...

8.4CVSS7.4AI score0.00166EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2022/04/27 6:55 p.m.29 views

CVE-2022-1508

An out-of-bounds read flaw was found in the Linux kernel’s iouring module in the way a user triggers the ioread function with some special parameters. This flaw allows a local user to read some memory out of bounds...

6.8CVSS3.8AI score0.00242EPSS
SaveExploits0References4
OSV
OSV
added 2022/04/27 12:53 p.m.4 views

SUSE-SU-2022:1436-1 Security update for libaom

This update for libaom fixes the following issues: - CVE-2021-30473: AOMedia in aomimage.c frees memory that is not located on the heap bsc1185778...

9.8CVSS9.5AI score0.0205EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:00 a.m.10 views

The vulnerability of the _zend_shared_memdup function in the PHP programming language allows a attacker to cause a service failure or exert other effects.

The vulnerability of the zendsharedmemdup function zendsharedalloc.c in the PHP programming language is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or have other adverse effects...

7.5CVSS6.8AI score0.08646EPSS
SaveExploits1References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:00 a.m.18 views

The vulnerability of the Pillow image processing library, caused by overflow in the dynamic memory buffer, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Pillow image processing library arises from an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality and integrity of the protected information...

10CVSS7.1AI score0.02345EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:00 a.m.11 views

The vulnerability of the `process_nested_data` function in the PHP programming language allows a hacker to execute arbitrary code.

The vulnerability of the processnesteddata function in the PHP programming language is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

7.5CVSS7.2AI score0.42593EPSS
SaveExploits5References24Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:00 a.m.15 views

The vulnerability of Adobe Illustrator’s graphic editor arises from an operation that goes beyond buffer boundaries in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Illustrator’s graphic editor arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to protected information through a specially crafted PDF file...

5.5CVSS6.1AI score0.02029EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:00 a.m.12 views

The vulnerability of the php_zip.c component of the PHP programming language interpreter allows a attacker to execute arbitrary PHP code or cause a service failure.

The vulnerability of the phpzip.c component of the PHP programming language interpreter relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary PHP code or cause a service failure by using specially created serialized data containing a...

10CVSS8.1AI score0.0926EPSS
SaveExploits5References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:00 a.m.11 views

The vulnerability of the imagegammacorrect function in the PHP programming language lies in its ability to write beyond buffer boundaries in memory, which allows an attacker to cause a service failure or potentially cause other adverse effects.

The vulnerability of the imagegammacorrect function ext/gd/gd.c in the PHP programming language is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or potentially cause other adverse effects...

10CVSS7.7AI score0.06842EPSS
SaveExploits1References11Affected Software3
CNVD
CNVD
added 2022/04/18 12:00 a.m.77 views

MariaDB Binary_string::free_buffer() component memory misreference vulnerability

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A memory misreference vulnerability exists in Mariadb v10.9 and earlier versions, which originates in the /sql/sqlstring.h component...

7.5CVSS7.4AI score0.02246EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/18 12:00 a.m.37 views

MariaDB my_mb_wc_latin1 component memory misreference vulnerability

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A memory misreference vulnerability exists in the MariaDB mymbwclatin1 component, no details of the vulnerability are provided at this time...

7.5CVSS7.5AI score0.01663EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2022/04/18 12:00 a.m.12 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this...

3.3CVSS7AI score0.00437EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.13 views

The vulnerability of the PJSIP multimedia communication library, related to the use of memory after its release, allows a intruder to cause a service failure.

The vulnerability of the PJSIP multimedia communication library is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

5.9CVSS7.8AI score0.04055EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:00 a.m.11 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.4AI score0.02419EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:00 a.m.15 views

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to execute arbitrary code.

Vulnerability of the Cluster component: General database management systems like MySQL Cluster involve reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

6.3CVSS7.4AI score0.02686EPSS
SaveExploits0References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:00 a.m.18 views

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to execute arbitrary code.

Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable due to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

6.3CVSS7.2AI score0.02686EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:00 a.m.12 views

The vulnerability of the QR Code Generator browser extensions for Google Chrome and Microsoft Edge allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the QR Code Generator browser extensions for Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7AI score0.00892EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:00 a.m.14 views

The vulnerability of the Tab Strip control element in Google Chrome and Microsoft Edge browsers allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Tab Strip control element in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created web page...

7.8CVSS7AI score0.0062EPSS
SaveExploits1References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:00 a.m.12 views

The vulnerability of the Portals components in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the Portals components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

10CVSS7.1AI score0.00903EPSS
SaveExploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:00 a.m.16 views

The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system remotely...

7.8CVSS7.8AI score0.07228EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder