Lucene search
+L

9273 matches found

Positive Technologies
Positive Technologies
added 2024/09/27 12:0 a.m.4 views

PT-2024-39531 · Adobe · Flash

Name of the Vulnerable Software and Affected Versions: Adobe Flash affected versions not specified Description: A buffer overread issue has been identified. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no information about...

7.2AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:0 a.m.9 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created U3D file...

3.3CVSS6.1AI score0.00273EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2024/09/26 12:0 a.m.9 views

PT-2025-4094 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this, where the targ...

8.8CVSS6.6AI score0.00682EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:0 a.m.12 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created U3D file...

3.3CVSS6.1AI score0.00273EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:0 a.m.11 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created U3D file...

3.3CVSS6.1AI score0.00347EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:0 a.m.15 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created U3D file...

3.3CVSS6.1AI score0.00304EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:0 a.m.7 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created JB2 file...

3.3CVSS6.1AI score0.00347EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/09/25 5:15 p.m.8 views

CVE-2024-41445

Library MDF mdflib v2.1 is vulnerable to a heap-based buffer overread via a crafted mdf4 file is parsed using the ReadData function...

6.5CVSS6AI score0.00376EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/25 5:15 p.m.19 views

CVE-2024-41445

Library MDF mdflib v2.1 is vulnerable to a heap-based buffer overread via a crafted mdf4 file is parsed using the ReadData function...

6.5CVSS0.00376EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/09/25 12:0 a.m.14 views

CVE-2024-41445

Library MDF mdflib v2.1 is vulnerable to a heap-based buffer overread via a crafted mdf4 file is parsed using the ReadData function...

6.9AI score0.00376EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/25 12:0 a.m.29 views

CVE-2024-41445

Library MDF mdflib v2.1 is vulnerable to a heap-based buffer overread via a crafted mdf4 file is parsed using the ReadData function...

0.00376EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/25 12:0 a.m.12 views

PT-2024-29405 · Mdflib · Mdflib

Name of the Vulnerable Software and Affected Versions: Library MDF mdflib version 2.1 Description: The issue is a heap-based buffer overread that occurs when a crafted mdf4 file is parsed using the ReadData function. This can be exploited via a crafted mdf4 file. Recommendations: For version 2.1,...

6.5CVSS7.3AI score0.00376EPSS
SaveExploits0References7
CVE
CVE
added 2024/09/25 12:0 a.m.58 views

CVE-2024-41445

CVE-2024-41445 affects Library MDF (mdflib) v2.1. The issue is a heap-based buffer overread that occurs when parsing a crafted MDF4 file using the ReadData function. Multiple connected sources (PT-2024-29405, Red Hat advisory, NVD/NVD-derived reports, CNNVD) corroborate the vulnerability in mdfli...

6.5CVSS7.2AI score0.00376EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/24 12:0 a.m.13 views

The vulnerability of the Native Scoring component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Scoring component of the Microsoft SQL Server database management system relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

9CVSS6.3AI score0.01623EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.8 views

The vulnerability of the web page rendering module in WebKitGTK and WPE WebKit, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Web page rendering module in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

10CVSS8AI score0.00902EPSS
SaveExploits0References14Affected Software5
OpenVAS
OpenVAS
added 2024/09/23 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2024:3353-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.3AI score0.00744EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.8 views

The vulnerability of the vhost_user_set_inflight_fd() function in the set of libraries and drivers for DPDK’s fast packet processing allows a attacker to cause a service failure.

The vulnerability of the vhostusersetinflightfd function in the set of libraries and drivers for the DPDK fast packet processing framework is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.01266EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.8 views

The vulnerability of the get_huffman_diff() function in the src\x3f\x3futils_patched.cpp component of the LibRaw image processing library allows a attacker to cause a service failure.

The vulnerability of the gethuffmandiff function in the src\x3f\x3futilspatched.cpp component of the LibRaw image processing library is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS6AI score0.00289EPSS
SaveExploits0References8Affected Software4
Tenable Nessus
Tenable Nessus
added 2024/09/22 12:0 a.m.11 views

GLSA-202409-06 : file: Stack Buffer Overread

The remote host is affected by the vulnerability described in GLSA-202409-06 file: Stack Buffer Overread Multiple vulnerabilities have been discovered in file. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the...

5.5CVSS6.8AI score0.00656EPSS
SaveExploits1References3
OSV
OSV
added 2024/09/20 9:32 a.m.19 views

SUSE-SU-2024:3353-1 Security update for python36

This update for python36 fixes the following issues: - CVE-2024-5642: Fixed invalid value sent to underlying OpenSSL API may cause a buffer overread when NPN is used bsc1227233...

6.5CVSS5.4AI score0.00744EPSS
SaveExploits1References3
Rows per page
Query Builder