Lucene search
+L

237 matches found

BDU FSTEC
BDU FSTEC
added 2019/08/13 12:0 a.m.11 views

The vulnerability of the PDFium browser’s PDF-content processor in Google Chrome, which allows a hacker to trigger a service failure.

The vulnerability of the PDFium browser’s PDF-content processing component in Google Chrome browser is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially crafted web page...

6.8CVSS7.8AI score0.00909EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.7 views

The vulnerability of the MDC2_Update function in the OpenSSL library, which allows a hacker to trigger a service failure

The vulnerability of the MDC2Update function crypto/mdc2/mdc2dgst.c in the OpenSSL library is due to a numerical overflow condition. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

9.8CVSS7AI score0.31985EPSS
SaveExploits1References18Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/05/16 12:0 a.m.7 views

The vulnerability of the mempcpy function in libraries that handle system calls and core glibc functions allows a hacker to execute arbitrary code.

The vulnerability of the mempcpy function in the library that handles system calls and core functions of glibc is caused by a numerical overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

10CVSS7.9AI score0.07307EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/05/07 12:0 a.m.3 views

The vulnerability of the ntlmdecode_type2_target function in the libcurl library, which allows a hacker to cause a service failure

The vulnerability of the ntlmDecodeType2target function lib/vauth/ntlm.c in the curl library is caused by a numerical overflow. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS6.6AI score0.05351EPSS
SaveExploits0References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.7 views

Vulnerability of Firefox web browsers, Firefox ESR, and Thunderbird email client, related to a numerical overflow condition, allowing an attacker to perform write-offs beyond the buffer in memory.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to perform write-offs beyond the buffer in memory...

10CVSS7.9AI score0.04032EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.5 views

The vulnerability of the libssh2 library, caused by a numerical overflow, allows an attacker to execute arbitrary code.

The vulnerability of the libssh2 library arises due to a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code on the client system at the moment the user connects to the server...

4.3CVSS7.5AI score0.06131EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:0 a.m.7 views

The compatibility subsystem for running Linux applications allows the Windows Subsystem for Linux operating systems to enable attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the compatibility subsystem for running Linux applications stems from a numerical overflow. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code using a specially created application...

7CVSS7.8AI score0.00934EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:0 a.m.9 views

The compatibility subsystem for running Linux applications allows the Windows Subsystem for Linux operating systems to enable attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the compatibility subsystem for running Linux applications stems from a numerical overflow. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code using a specially created application...

7CVSS7.7AI score0.00934EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:0 a.m.10 views

The compatibility subsystem for running Linux applications allows the Windows Subsystem for Linux operating systems to enable attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the compatibility subsystem for running Linux applications stems from a numerical overflow. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code through a specially created application...

7CVSS7.8AI score0.00934EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/03/12 12:0 a.m.8 views

The vulnerability of the libzmq library in the messaging system ZeroMQ allows a hacker to execute arbitrary code.

The vulnerability of the libzmq library in the messaging system ZeroMQ is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

9CVSS7.7AI score0.09444EPSS
SaveExploits2References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/02/26 12:0 a.m.5 views

The vulnerability of the `update_read_bitmap_update` function in the RDP client FreeRDP allows a hacker to execute arbitrary code.

The vulnerability of the updatereadbitmapupdate function in the RDP client FreeRDP is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause memory corruption...

7.6CVSS8.3AI score0.08156EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/12 12:0 a.m.5 views

The vulnerability of the `load_specificdebug_section` function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the GNU Binutils development tool is related to a numerical overflow of the loadspecific DebugSection function in objdump.c, which results in the allocation of zero-sized memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6.6AI score0.02285EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2019/01/10 12:0 a.m.8 views

The vulnerability of the Skia graphic library in Google Chrome web browsers allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Skia graphic library in Google Chrome’s web browser is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML...

8.8CVSS6.7AI score0.0313EPSS
SaveExploits0References5Affected Software6
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:0 a.m.10 views

The vulnerability of VMware Workstation and VMware Fusion hypervisors arises from numerical overflow conditions, allowing an attacker to execute arbitrary code.

The vulnerability of VMware Workstation and VMware Fusion hypervisors is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

10CVSS8AI score0.00452EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2018/12/25 12:0 a.m.9 views

The vulnerability of the readBytes function in the Android operating system, which allows a hacker to disclose protected information

The vulnerability of the readBytes function in the xltdecwbxml.c file of the Android operating system is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted request...

7.8CVSS7.2AI score0.01143EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.5 views

The vulnerability of JavaScript script handlers in web browsers Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of JavaScript script handlers in web browsers Firefox, Firefox ESR, and the email client Thunderbird is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...

7.6CVSS8AI score0.03924EPSS
SaveExploits0References4Affected Software8
Tenable Nessus
Tenable Nessus
added 2018/11/23 12:0 a.m.26 views

Debian DLA-1587-1 : pixman security update

CVE-2015-5297 Numerical overflow in pointer arithmetic. For Debian 8 'Jessie', this problem has been fixed in version 0.32.6-3+deb8u1. We recommend that you upgrade your pixman packages. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security...

9.8CVSS7.5AI score0.01488EPSS
SaveExploits1References3
Debian
Debian
added 2018/11/22 4:10 p.m.242 views

[SECURITY] [DLA 1587-1] pixman security update

Package : pixman Version : 0.32.6-3+deb8u1 CVE ID : CVE-2015-5297 CVE-2015-5297 Numerical overflow in pointer arithmetic. For Debian 8 "Jessie", this problem has been fixed in version 0.32.6-3+deb8u1. We recommend that you upgrade your pixman packages. Further information about Debian LTS securit...

9.8CVSS8.2AI score0.01488EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2018/11/22 12:0 a.m.35 views

Debian: Security Advisory (DLA-1587-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.01488EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2018/10/11 12:0 a.m.6 views

The vulnerability of the SkSampler::Fill method in the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the SkSampler::Fill method SkSampler.cpp in the Android operating system is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code...

10CVSS5.9AI score0.01625EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder