Lucene search
+L

2234 matches found

BDU FSTEC
BDU FSTEC
added 2020/10/09 12:0 a.m.5 views

The vulnerability of the Adobe Photoshop graphic editor, related to reading beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to reading beyond the buffer limit in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

9.3CVSS8.1AI score0.03084EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2020/09/30 7:15 p.m.20 views

CVE-2020-14375

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and the host. An attacker in a VM can change the contents of the memory after vhostcrypto has validate...

7.8CVSS0.0025EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2020/09/29 10:31 p.m.9 views

kernel: use-after-free in sound/core/timer.c

A memory flaw was found in the ALSA subsystem of the Linux kernel. The struct sndtimerinstance function fails the timer-maxinstances check leading to an invalid address. This could lead to a use-after-free vulnerability...

7.8CVSS7.1AI score0.00551EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2020/09/28 3:0 p.m.30 views

CVE-2020-14377

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read are then written back to the guest virtual machine memory. This vulnerability can be used by an...

7.1CVSS7AI score0.00411EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/24 12:0 a.m.9 views

The vulnerability of the Windows Runtime component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Runtime component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.3CVSS6.2AI score0.04256EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.6 views

Vulnerability of the object processing function in the kernel memory of the Windows operating system, allowing attackers to gain access to protected information

The vulnerability of the object processing function in the kernel memory of the Windows operating system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information...

5.5CVSS6.2AI score0.01129EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.7 views

The vulnerability of the Microsoft Windows Graphics Component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Windows Graphics Component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS6.2AI score0.01079EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:0 a.m.7 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 is related to the use of memory after it is freed. Exploiting this vulnerability can...

10CVSS8.2AI score0.04413EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:0 a.m.6 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 is related to the use of memory after it is freed. Exploiting this vulnerability can...

9.3CVSS7.9AI score0.03915EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:0 a.m.6 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 is related to the use of memory after it is freed. Exploiting this vulnerability can...

9.3CVSS7.9AI score0.03915EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:0 a.m.7 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 is related to the use of memory after it is freed. Exploiting this vulnerability can...

9.3CVSS7.9AI score0.04506EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:0 a.m.4 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 is related to the use of memory after it is freed. Exploiting this vulnerability can...

10CVSS8.2AI score0.04413EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:0 a.m.6 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 is related to the use of memory after it is freed. Exploiting this vulnerability can...

9.3CVSS7.9AI score0.03915EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:0 a.m.5 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 is related to the use of memory after it is freed. Exploiting this vulnerability can...

10CVSS8.2AI score0.04413EPSS
Exploits0References3
OSV
OSV
added 2020/09/15 8:15 p.m.6 views

UBUNTU-CVE-2020-14314

A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with broken indexing. This flaw allows a local user to crash the system if the directory exists. The highest threat from this vulnerability is to system...

5.5CVSS6.6AI score0.00356EPSS
Exploits0References8
Cvelist
Cvelist
added 2020/09/15 12:0 a.m.28 views

CVE-2020-14314

A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with broken indexing. This flaw allows a local user to crash the system if the directory exists. The highest threat from this vulnerability is to system...

5.5CVSS6.1AI score0.00356EPSS
Exploits0References10
NVD
NVD
added 2020/09/11 5:15 p.m.16 views

CVE-2020-1338

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the...

8.8CVSS0.03665EPSS
Exploits0References1
Prion
Prion
added 2020/09/11 5:15 p.m.16 views

Privilege escalation

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data;...

7.2CVSS8AI score0.00833EPSS
Exploits0References1Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/09/11 12:0 a.m.11 views

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV340 Series allows a hacker to execute arbitrary commands.

The vulnerability in the web-based management interface of Cisco Small Business RV340 Series microprogrammed software routers involves the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

6.5CVSS6.5AI score0.02175EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2020/09/10 7:44 p.m.20 views

GHSA-HX3R-JV9Q-85JW Bitcoin Inventory Out-of-Memory Denial-of-Service Attack (CVE-2018-17145)

There was an easily exploitable uncontrolled memory resource consumption denial-of-service vulnerability that existed in the peer-to-peer network code of three implementations of Bitcoin and several alternative chains. For more details please see: https://invdos.net/ For the paper:...

7.5CVSS7.5AI score0.03411EPSS
Exploits1References7
Rows per page
Query Builder