Lucene search
+L

9296 matches found

BDU FSTEC
BDU FSTEC
added 2024/02/14 12:0 a.m.8 views

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer boundaries in memory, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of the Substance 3D Stager software-related 3D design software lies in reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS6.1AI score0.00319EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/14 12:0 a.m.10 views

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created GLTF file...

5.5CVSS5.7AI score0.00367EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/14 12:0 a.m.11 views

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer boundaries in memory, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of the Substance 3D Stager software-related 3D design software lies in reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS6.1AI score0.00319EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/14 12:0 a.m.8 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer limit in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using a specially created AEP file...

5.5CVSS5.7AI score0.00377EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/14 12:0 a.m.9 views

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created GLB file...

5.5CVSS5.7AI score0.00424EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/13 12:0 a.m.9 views

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to reading data beyond the buffer in memory, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS6.1AI score0.00341EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/13 12:0 a.m.10 views

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

9.6CVSS7.8AI score0.00308EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/13 12:0 a.m.9 views

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to reading data beyond the buffer in memory, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS6.1AI score0.0032EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/13 12:0 a.m.11 views

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to reading data outside the buffer in memory, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS6.1AI score0.00319EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2024/02/12 8:38 a.m.9 views

squid: Buffer over-read in the HTTP Message processing feature

A buffer over-read flaw was found in Squid's HTTP Message processing feature. This issue may allow attackers to perform remote denial of service...

8.6CVSS5.9AI score0.88818EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/02/12 12:0 a.m.36 views

RHEL 8 : squid:4 (RHSA-2024:0772)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0772 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid: DoS against...

9.8CVSS8.1AI score0.88818EPSS
SaveExploits1References15
BDU FSTEC
BDU FSTEC
added 2024/02/12 12:0 a.m.9 views

The vulnerability of the loginAuth function (/cgi-bin/cstecgi.cgi) in the Totolink N350RT router software allows a hacker to execute arbitrary code.

The vulnerability of the loginAuth function /cgi-bin/cstecgi.cgi in the Totolink N350RT router software lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS7.8AI score0.01303EPSS
SaveExploits1References4Affected Software1
SUSE CVE
SUSE CVE
added 2024/02/09 3:0 a.m.4 views

SUSE CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS6.9AI score0.33558EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/07 5:15 p.m.2 views

DEBIAN-CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS6.9AI score0.33558EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/07 5:15 p.m.6 views

UBUNTU-CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.3AI score0.33558EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/02/07 12:0 a.m.7 views

Cisco Secure Endpoint 缓冲区错误漏洞

Cisco Secure Endpoint Cisco AMP for Endpoints is the United States Cisco Cisco company's set of integrated static and dynamic malware analysis and threat intelligence in one of the endpoint applications. A buffer overflow vulnerability exists in the Cisco Secure Endpoint Connector for Windows...

7.5CVSS7AI score0.33558EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/02/07 12:0 a.m.5 views

PT-2024-1550 · Clamav +1 · Clamav +1

Name of the Vulnerable Software and Affected Versions: ClamAV affected versions not specified Description: A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability ...

7.8CVSS6.2AI score0.84841EPSS
SaveExploits0References27
BDU FSTEC
BDU FSTEC
added 2024/02/06 12:0 a.m.10 views

The vulnerability of Apple Neural Engine in the macOS operating system allows a hacker to execute arbitrary code with root privileges.

The vulnerability of Apple Neural Engine in the macOS operating system relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code with root privileges...

7.8CVSS8.1AI score0.00224EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/05 12:0 a.m.17 views

The vulnerability of the formOfflineSet function in the httpd component of the wireless access point Tenda W9 allows a attacker to execute arbitrary code.

The vulnerability of the formOfflineSet function in the httpd component of the wireless access point Tenda W9 microprogramming system involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS7.4AI score0.00793EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/02/05 12:0 a.m.19 views

The vulnerability in the web interface of the wireless access point Tenda A15’s microprogramming software allows a perpetrator to execute arbitrary code.

The vulnerability of the web interface for managing microprogramming software in the Tenda A15 wireless access point is related to reading data outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.3CVSS7.7AI score0.01679EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder