Lucene search
K

97 matches found

BDU FSTEC
BDU FSTEC
added 2023/10/21 12:0 a.m.2 views

The vulnerability of the Herces library on the C++ platform of the BigFix Platform for collaborative management of IT equipment allows a hacker to execute arbitrary code.

The vulnerability of the Herces library on the C++ platform used by the BigFix Platform for jointly managing IT equipment is due to a numerical overflow. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code by sending a specially crafted HTTP request...

8.2CVSS7.4AI score0.01381EPSS
Exploits0References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/04/21 12:0 a.m.2 views

The vulnerability of Google Chrome’s Skia library allows a hacker to escape from the isolated software environment and execute arbitrary code.

The vulnerability of Google Chrome’s Skia library is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to escape from a isolated software environment and execute arbitrary code...

10CVSS8.4AI score0.05786EPSS
Exploits0References10Affected Software4
SUSE CVE
SUSE CVE
added 2023/02/15 5:32 a.m.3 views

SUSE CVE-2014-0211

Multiple integer overflows in the 1 fsgetreply, 2 fsallocglyphs, and 3 fsreadextentinfo functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow...

7.5CVSS8.2AI score0.04362EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2022/11/11 12:0 a.m.4 views

The vulnerability of the file system driver of the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the file system driver for the Microsoft Windows operating system is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created ISO file...

10CVSS7.7AI score0.56269EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/10/26 12:0 a.m.3 views

The vulnerability of the gst_matroska_decompress_data function in the Gstreamer multimedia framework, which allows a hacker to cause a service failure

The vulnerability of the gstmatroskadecompressdata function in the Gstreamer multimedia framework is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS7.3AI score0.00436EPSS
Exploits1References13Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/09/26 12:0 a.m.2 views

The vulnerability of the XAUTOCLAIM command implementation in the Redis database management system allows a hacker to execute arbitrary code.

The vulnerability of the XAUTOCLAIM command in the Redis database management system is related to a numerical overflow when processing the COUNT argument. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7CVSS6.2AI score0.02719EPSS
Exploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.2 views

The vulnerability of the ext4_mount function in the Cboot module of the NVIDIA Jetson embedded software driver package allows a attacker to execute arbitrary code, gain elevated privileges, or cause partial service failure.

The vulnerability of the ext4mount function in the Cboot module of the NVIDIA Jetson software driver suite is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to execute arbitrary code, gain elevated privileges, or cause partial service interruptions...

5CVSS6.1AI score0.00197EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.3 views

The vulnerability of the fread function (ext/standard/file.c) in the PHP programming language allows a hacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the fread function ext/standard/file.c in the PHP programming language interpreter is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause service failures or potentially other adverse effects...

9CVSS7.5AI score0.04397EPSS
Exploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.3 views

The vulnerability of the phar_parse_pharfile function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the pharparsepharfile function in the PHP programming language is caused by a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service interruptions...

7.8CVSS6.9AI score0.07618EPSS
Exploits0References12Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.2 views

The vulnerability of the `gdimagewebpctx` function in the GD Graphics Library, a programming language interpreter for PHP, allows attackers to trigger a service failure or potentially cause other adverse effects.

The vulnerability of the gdimagewebpctx function in the GD Graphics Library, a programming language interpreter for PHP, is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause service interruptions or potentially have other effects through the invocation...

10CVSS7.9AI score0.05005EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/03/30 12:0 a.m.3 views

The vulnerability of the NetUSB module in the embedded software of Netgear routers such as D7800, R6220, R6230, R6400v2, R6700v3, R7000, and R7800 allows a hacker to execute arbitrary code.

The vulnerability of the NetUSB module in the embedded software of Netgear routers such as D7800, R6220, R6230, R6400v2, R6700v3, R7000, and R7800 is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely by using port...

6.5CVSS8.1AI score0.01234EPSS
Exploits0References3Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/02/28 12:0 a.m.2 views

The vulnerability of the NetUSB.ko module of TP-Link AC1750 Archer C7 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the NetUSB.ko module of TP-Link AC1750 Archer C7 router’s microprogramming software is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

8.8CVSS7.9AI score0.01674EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.1 views

The vulnerability of the ANGLE library in Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the ANGLE library in Microsoft Edge and Google Chrome is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by sending a specially crafted request...

10CVSS8.2AI score0.01372EPSS
Exploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/02 12:0 a.m.4 views

The vulnerability of the ReadTXTImage() function in the ImageMagick console graphics editor’s coders/txt.c component allows a malicious actor to cause a service failure due to a numerical overflow of the value being read.

The vulnerability of the ReadTXTImage function in the ImageMagick console graphics editor’s coders/txt.c component is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure by invoking the TXT file, which requires a very large value ...

6.5CVSS6.7AI score0.01939EPSS
Exploits1References12Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.2 views

The vulnerability of the Blink display module in Google Chrome browsers allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s Blink rendering module is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.3CVSS7.7AI score0.0147EPSS
Exploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/10/27 12:0 a.m.2 views

The vulnerability of the FTS3 extension of the SQLite database management system allows a hacker to execute arbitrary code.

The vulnerability of the FTS3 extension of the SQLite database management system arises from a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

9.3CVSS6.9AI score0.09683EPSS
Exploits1References9Affected Software8
Prion
Prion
added 2020/05/14 9:15 p.m.15 views

Buffer overflow

Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocation could potentially return a pointer within the previous allocation's memory, which could lead to improper memory access.Product: AndroidVersions: Android kernelAndroid ID:...

7.5CVSS8.9AI score0.00466EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/05/14 8:17 p.m.17 views

CVE-2020-0221

Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocation could potentially return a pointer within the previous allocation's memory, which could lead to improper memory access.Product: AndroidVersions: Android kernelAndroid ID:...

9.4AI score0.00466EPSS
Exploits0References1
CVE
CVE
added 2020/05/14 8:17 p.m.49 views

CVE-2020-0221

CVE-2020-0221 affects Airbrush’s scratch memory allocator in the Android kernel. The root cause is a numeric overflow in the allocator, which could cause the next allocation to return a pointer within a previously allocated region, enabling improper memory access and elevation of privilege on aff...

9.8CVSS9.1AI score0.00466EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.1 views

The vulnerability of Qualcomm IPS’s PostScript- and PDF-compliant software interpreters, caused by a full-integer overflow, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Qualcomm IPS’s PostScript- and PDF-compliant software interpreters is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker operating remotely to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.8AI score0.01389EPSS
Exploits0References4Affected Software14
Rows per page
Query Builder