Lucene search
+L

119 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/14 12:00 a.m.•3 views

CVE-2020-0221: Incorrect Calculation

Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocation could potentially return a pointer within the previous allocation's memory, which could lead to improper memory access.Product: AndroidVersions: Android kernelAndroid ID:...

9.8CVSS7.1AI score0.00466EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/03/04 12:00 a.m.•11 views

The vulnerability of Qualcomm IPS’s PostScript- and PDF-compliant software interpreters, caused by a full-integer overflow, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Qualcomm IPS’s PostScript- and PDF-compliant software interpreters is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker operating remotely to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.8AI score0.01351EPSS
SaveExploits0References4Affected Software14
BDU FSTEC
BDU FSTEC
•added 2020/02/27 12:00 a.m.•14 views

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PDFium PDF-content processor in the Google Chrome browser is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures through the use of a...

8.8CVSS7AI score0.01223EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2020/02/27 12:00 a.m.•13 views

The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows a perpetrator to compromise data integrity, gain access to confidential information, and cause service interruptions.

The vulnerability of Blink’s web page rendering mechanism in the Google Chrome browser is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain access to confidential information, and cause service interruptions through...

9.3CVSS7AI score0.09088EPSS
SaveExploits2References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2020/02/27 12:00 a.m.•15 views

The vulnerability of Google Chrome browser’s WebMIDI function, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebMIDI function in Google Chrome browser is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a specially created HTML...

9.3CVSS7AI score0.09259EPSS
SaveExploits2References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2019/12/09 12:00 a.m.•13 views

Vulnerability of the dwc3pci_probe() function (drivers/usb/dwc3/dwc3-pci.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the dwc3pciprobe function drivers/usb/dwc3/dwc3-pci.c in the Linux kernel is due to a numerical overflow. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

10CVSS6.6AI score0.03431EPSS
SaveExploits0References15Affected Software3
BDU FSTEC
BDU FSTEC
•added 2019/11/25 12:00 a.m.•14 views

The vulnerability of the RADIANCE module, a software component used for creating 3D computer graphics in Blender, arises from integer overflow. This allows an attacker to execute arbitrary code.

The vulnerability of the RADIANCE module in the software suite used to create 3D computer graphics in Blender is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created HDR file...

7.8CVSS7.8AI score0.01806EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/11/25 12:00 a.m.•33 views

The vulnerability of the animation reproduction function in Blender’s software for creating 3D computer graphics is caused by a full-integer overflow, allowing an attacker to execute arbitrary code.

The vulnerability of the animation reproduction function in Blender’s 3D computer graphics software is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created AVI file...

7.8CVSS7.9AI score0.01806EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/11/18 12:00 a.m.•18 views

The vulnerability of the Mesh component of the software suite used to create 3D computer graphics in Blender allows a hacker to execute arbitrary code.

The vulnerability of the Mesh component in Blender’s 3D computer graphics software is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created blend file...

10CVSS7.9AI score0.01953EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/10/03 12:00 a.m.•9 views

The vulnerability of the Skia library used by Firefox and Firefox ESR browsers, as well as the Thunderbird email client, allows attackers to trigger a service failure.

The vulnerability of the Skia library used by Firefox and Firefox ESR browsers, as well as the Thunderbird email client, is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

6.4CVSS5.5AI score0.01446EPSS
SaveExploits1References8Affected Software5
BDU FSTEC
BDU FSTEC
•added 2019/08/13 12:00 a.m.•20 views

The vulnerability in the Google Chrome web browser allows a perpetrator to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the Google Chrome web browser is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to influence the confidentiality, integrity, and accessibility of the protected information through a specially crafted HTML page...

10CVSS7.2AI score0.01948EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
•added 2019/08/13 12:00 a.m.•26 views

The vulnerability of the PDFium browser’s PDF-content processor in Google Chrome, which allows a hacker to trigger a service failure.

The vulnerability of the PDFium browser’s PDF-content processing component in Google Chrome is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially crafted web page...

6.8CVSS7.8AI score0.00723EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
•added 2019/06/21 12:00 a.m.•11 views

The vulnerability of the TCP Selective Acknowledgment mechanism in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the TCP SACK mechanism TCP Selective Acknowledgement in the Linux operating system is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure by sending a specially crafted sequence of SACK packets remotely...

7.8CVSS6.9AI score0.98745EPSS
SaveExploits4References47Affected Software22
BDU FSTEC
BDU FSTEC
•added 2019/04/25 12:00 a.m.•20 views

The vulnerability of the NTFS-3G driver for the NTFS file system in FUSE modules of Unix-like operating systems, related to buffer overflows, allows attackers to elevate their privileges to a superuser level.

The vulnerability of the NTFS-3G driver for the NTFS file system in the FUSE module of Unix-like operating systems is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to elevate their privileges to a superuser level...

5.5CVSS6.4AI score0.00531EPSS
SaveExploits0References10Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/03/22 12:00 a.m.•19 views

The compatibility subsystem for running Linux applications allows the Windows Subsystem for Linux operating systems to enable attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the compatibility subsystem for running Linux applications stems from a numerical overflow. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code using a specially created application...

7CVSS7.7AI score0.00934EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/03/22 12:00 a.m.•16 views

The compatibility subsystem for running Linux applications allows the Windows Subsystem for Linux operating systems. This enables attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the compatibility subsystem for running Linux applications stems from a numerical overflow. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code through a specially created application...

7CVSS7.7AI score0.00934EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/02/05 12:00 a.m.•15 views

The vulnerability of the ReadRealIndex function in the Real demuxer plugin of the VideoLAN VLC media player allows a hacker to execute arbitrary code.

The vulnerability of the ReadRealIndex function in the Real demuxer plugin of the VideoLAN VLC media player is due to a numerical overflow that causes a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious RealMedia .rm fi...

9.3CVSS6.5AI score0.07842EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/01/22 12:00 a.m.•13 views

The vulnerability of the file2strvec function in console applications for monitoring and terminating system processes in Props-ng allows a perpetrator to execute arbitrary code.

The vulnerability of the file2strvec function in console applications for monitoring and terminating system processes in Props-ng is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.01901EPSS
SaveExploits5References3Affected Software2
CNVD
CNVD
•added 2018/07/12 12:00 a.m.•11 views

EXGROUP Numeric Error Vulnerability

EXGROUP is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in EXGROUP's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

7.5CVSS7.7AI score0.01024EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2018/07/05 12:00 a.m.•12 views

The vulnerability of the Qualcomm Video Services component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Qualcomm Video Services on the Android operating system is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS5.5AI score0.01243EPSS
SaveExploits0References3
Rows per page
Query Builder