Lucene search
+L

9287 matches found

Positive Technologies
Positive Technologies
added 2024/05/19 12:0 a.m.17 views

PT-2024-6425 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

5.5CVSS7.1AI score0.00273EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2024/05/18 2:9 a.m.30 views

CVE-2023-52669

In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual length left and cop...

5.5CVSS6.9AI score0.00684EPSS
SaveExploits0References4
OSV
OSV
added 2024/05/17 2:15 p.m.12 views

DEBIAN-CVE-2023-52669

In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual length left and cop...

7.8CVSS6AI score0.00684EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/17 2:15 p.m.27 views

CVE-2023-52669

In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual length left and cop...

8.2CVSS7.6AI score0.00684EPSS
SaveExploits0References7
OSV
OSV
added 2024/05/17 2:15 p.m.6 views

UBUNTU-CVE-2023-52669

In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual length left and cop...

8.2CVSS6.4AI score0.00684EPSS
SaveExploits0References17
UbuntuCve
UbuntuCve
added 2024/05/17 2:15 p.m.25 views

CVE-2023-52669

In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual length left and cop...

8.2CVSS6.5AI score0.00684EPSS
SaveExploits0References16
CVE
CVE
added 2024/05/17 2:1 p.m.155 views

CVE-2023-52669

CVE-2023-52669 : In the Linux kernel, the s390/aes CTR code can overread the last block when data length isn’t a full block. The fix uses the actual remaining length and copies it into a buffer before processing, eliminating the overread. This is a local-attack surface issue that could enable a d...

8.2CVSS7.1AI score0.00684EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2024/05/17 2:1 p.m.16 views

CVE-2023-52669 crypto: s390/aes - Fix buffer overread in CTR mode

In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual length left and cop...

8.2CVSS6.3AI score
SaveExploits0References10
Debian CVE
Debian CVE
added 2024/05/17 2:1 p.m.23 views

CVE-2023-52669

In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual length left and cop...

8.2CVSS7.4AI score0.00684EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/05/17 2:1 p.m.23 views

CVE-2023-52669 crypto: s390/aes - Fix buffer overread in CTR mode

In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual length left and cop...

8.2CVSS7.2AI score0.00684EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2024/05/17 2:1 p.m.36 views

CVE-2023-52669 crypto: s390/aes - Fix buffer overread in CTR mode

In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual length left and cop...

8.2CVSS6.8AI score0.00684EPSS
SaveExploits0References6
Microsoft CVE
Microsoft CVE
added 2024/05/17 7:0 a.m.6 views

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

...

7.5CVSS6.2AI score0.02298EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.9 views

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to reading data beyond the buffer in memory, allows a hacker to bypass the ASLR protection mechanism.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection mechanism by using a specially created file...

5.5CVSS5.7AI score0.00262EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.12 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by opening a specially created malicious file...

7.8CVSS6.2AI score0.00281EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.9 views

The vulnerability of Adobe Acrobat and Acrobat Reader PDF viewer/editor programs, related to reading beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe Acrobat and Acrobat Reader PDF viewer/editor programs relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS7.8AI score0.00512EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.8 views

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading beyond the buffer boundary in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created malicious file...

7.8CVSS6.2AI score0.00286EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.10 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of the Adobe Framemaker desktop publishing system relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

5.5CVSS5.6AI score0.00228EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2024/05/16 2:20 a.m.4 views

SUSE CVE-2024-34459

An issue was discovered in xmllint from libxml2 before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c...

3.3CVSS8.3AI score0.02298EPSS
SaveExploits1References12
BDU FSTEC
BDU FSTEC
added 2024/05/15 12:0 a.m.10 views

The vulnerability of the sof_ipc3_fw_parse_ext_man() function in the sound/soc/sof/ipc3-loader.c kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sofipc3fwparseextman function in the sound/soc/sof/ipc3-loader.c file of the Linux kernel is related to reading beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00293EPSS
SaveExploits0References15Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/05/15 12:0 a.m.12 views

The vulnerability of the __handle_ksmbd_work() function in the implementation of the SMB protocol within the in-core CIFS/SMB3-server ksmbd server kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the handleksmbdwork function in the fs/smb/server/server.c module, which is part of the SMB Server Message Block networking implementation within the Linux-based CIFS/SMB3-server ksmbd server, relates to memory reading beyond the allocated buffer. Exploiting this vulnerabilit...

5.5CVSS5.9AI score0.00615EPSS
SaveExploits0References27Affected Software4
Rows per page
Query Builder