Lucene search
+L

9267 matches found

Positive Technologies
Positive Technologies
added 2024/11/21 12:0 a.m.15 views

PT-2024-17068 · Irfan Skiljan · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

7.8CVSS7.3AI score0.00395EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/11/21 12:0 a.m.7 views

PT-2024-17094 · Irfan Skiljan · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this issue, where the target must visit a...

7.8CVSS7.2AI score0.00421EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/11/21 12:0 a.m.9 views

PT-2024-17062 · Irfan Skiljan · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this issue, where the target must visit a...

7.8CVSS7.2AI score0.00394EPSS
SaveExploits0References4
OSV
OSV
added 2024/11/20 6:15 p.m.4 views

CVE-2018-9484

In l2cusendpeerconfigrej of l2cutils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS5.9AI score0.00277EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/20 12:0 a.m.9 views

The vulnerability of the mlxbf_gige component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlxbfgige component in the Linux operating system is related to errors in reading data beyond the buffer boundaries in the mlxbfgigeopen function. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00227EPSS
SaveExploits0References30Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/11/20 12:0 a.m.11 views

The vulnerability of the cachestat component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the cachestat component in the Linux operating system’s kernel is related to errors in reading beyond the buffer boundaries of the filemapcachestat function. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00661EPSS
SaveExploits0References20Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/11/19 12:0 a.m.14 views

The vulnerability of the Linux operating system’s crypto kernel component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s crypto kernel component is related to errors in reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00684EPSS
SaveExploits0References28Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/11/19 12:0 a.m.9 views

The vulnerability of the “Simple Authentication and Security Layer” GNU SASL implementation, which arises from reading beyond the allocated buffer in memory, allows attackers to gain access to confidential information.

The vulnerability of the “Simple Authentication and Security Layer” GNU SASL implementation lies in reading data beyond the bounds of the allocated buffer in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

8.5CVSS7.4AI score0.01404EPSS
SaveExploits0References7Affected Software3
Tenable Nessus
Tenable Nessus
added 2024/11/19 12:0 a.m.33 views

Oracle Linux 9 : openssl / and / openssl-fips-provider (ELSA-2024-9333)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9333 advisory. - Fix CVE-2024-6119: Possible denial of service in X.509 name checks Resolves: RHEL-55339 - Fix CVE-2024-5535: SSLselectnextproto buffer overread...

9.1CVSS7.4AI score0.92488EPSS
SaveExploits7References5
BDU FSTEC
BDU FSTEC
added 2024/11/19 12:0 a.m.6 views

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to errors in reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00227EPSS
SaveExploits0References38Affected Software8
OSV
OSV
added 2024/11/18 10:15 a.m.1 views

DEBIAN-CVE-2023-39176

A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose...

7.5CVSS5.5AI score0.00663EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/11/18 10:15 a.m.13 views

CVE-2023-39179

A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on...

7.5CVSS7AI score0.01095EPSS
SaveExploits0References4
OSV
OSV
added 2024/11/18 10:15 a.m.2 views

DEBIAN-CVE-2023-39179

A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on...

7.5CVSS6.9AI score0.01095EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/18 10:15 a.m.10 views

UBUNTU-CVE-2023-39176

A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose...

7.5CVSS5.7AI score0.00663EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.11 views

The vulnerability of the FactoryTalk platform for centralized application management by Rockwell Automation’s ThinManage application allows a attacker to perform a “disruption of service” attack.

The vulnerability of the FactoryTalk platform for centralized application management by Rockwell Automation’s ThinManage lies in the ability to read data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to carry out a DoS Denial-of-Service attack remotely...

7.8CVSS5.7AI score0.07916EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.10 views

The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

5.5CVSS5.6AI score0.0022EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.12 views

The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

5.5CVSS5.6AI score0.0022EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.11 views

The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

5.5CVSS5.6AI score0.0022EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.15 views

The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

5.5CVSS5.6AI score0.0022EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.8 views

The vulnerability of Adobe Illustrator, related to reading beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Illustrator graphic editor is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00265EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder