Lucene search
+L

9287 matches found

Positive Technologies
Positive Technologies
added 2022/03/26 12:0 a.m.3 views

PT-2022-18708 · Tcpreplay +2 · Tcpreplay +2

Name of the Vulnerable Software and Affected Versions: Tcpreplay version 4.4.1 Description: The issue is related to a heap-based buffer over-read in the get ipv6 next function located in common/get.c. This problem can potentially lead to information disclosure or other security issues...

7.8CVSS6.6AI score0.01975EPSS
SaveExploits11References40
Positive Technologies
Positive Technologies
added 2022/03/26 12:0 a.m.3 views

PT-2022-18709 · Tcpreplay +2 · Tcpreplay +2

Name of the Vulnerable Software and Affected Versions: Tcpreplay version 4.4.1 Description: The issue is related to a heap-based buffer over-read in the get l2len protocol function located in common/get.c. This occurs in the tcprewrite component of Tcpreplay. Recommendations: For Tcpreplay versio...

7.8CVSS6.6AI score0.01975EPSS
SaveExploits11References41
CNNVD
CNNVD
added 2022/03/26 12:0 a.m.8 views

Appneta Tcpreplay 缓冲区错误漏洞

Appneta Tcpreplay is a suite of open source utilities for editing and replaying network traffic on UNIX-based operating systems from AppNeta Appneta, USA. AppNeta Tcpreplay 4.4.1 suffers from a buffer error vulnerability that stems from tcpprep having a heap-based buffer over-read in common/get.c...

7.8CVSS7.7AI score0.01122EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2022/03/26 12:0 a.m.8 views

PT-2022-18710 · Tcpreplay +2 · Tcpreplay +2

Name of the Vulnerable Software and Affected Versions: Tcpreplay version 4.4.1 Description: The issue is related to a heap-based buffer over-read in the parse mpls function located in common/get.c. This occurs in the tcpprep component of Tcpreplay. Recommendations: For Tcpreplay version 4.4.1, at...

7.8CVSS6.5AI score0.01975EPSS
SaveExploits11References40
BDU FSTEC
BDU FSTEC
added 2022/03/25 12:0 a.m.14 views

The vulnerability of PostScript interpreter devices from HP Print allows a perpetrator to execute arbitrary code.

The vulnerability of PostScript devices from HP Print involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS7.4AI score0.07488EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2022/03/25 12:0 a.m.12 views

The vulnerability of the `pjsua_recorder_create` function in the multimedia communication library PJSIP, related to reading beyond the buffer limit in memory, allows attackers to cause service failures.

The vulnerability of the pjsuarecordercreate function in the PJSIP multimedia communication library is related to reading beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS8.2AI score0.02198EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.10 views

The vulnerability of the software for working with animations in Adobe Character Animator, related to reading data beyond the buffer in memory, allows attackers to exploit the protected information.

The vulnerability of the software for working with animations in Adobe Character Animator is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

4.4CVSS5.7AI score0.01173EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.15 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the memory boundaries. This allows attackers to gain unauthorized access to protected information and also cause system failures.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information, as well as cause service failures for the current user...

8.8CVSS7.1AI score0.01739EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/03/21 11:15 p.m.13 views

UBUNTU-CVE-2022-27607

Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4HvccAtom class, a different issue than CVE-2018-14531...

8.1CVSS7.5AI score0.00985EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/21 8:36 a.m.7 views

UBUNTU-CVE-2022-23124

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getfinderinfo method. The issue results from the lack of proper validation of...

9.8CVSS6.3AI score0.02837EPSS
SaveExploits0References5
OSV
OSV
added 2022/03/21 8:36 a.m.20 views

UBUNTU-CVE-2022-23123

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getdirparams method. The issue results from the lack of proper validation of...

9.8CVSS6.3AI score0.03848EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/03/17 12:0 a.m.7 views

PT-2022-4883 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to a buffer over-read in the Bluetooth driver while reading l2cap length, potentially allowing an unauthorized access to protected information or...

8.5CVSS7.5AI score0.00377EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.10 views

The vulnerability of the development environment “CX-Programmer,” which is part of the software suite “CX-One” designed for programming and configuring Omron PLCs, arises from reading data from within allowable buffer limits. This allows attackers to disclose sensitive information or execute arbitrary code.

The vulnerability of the development environment provided by CX-Programmer, which is part of the CX-One software suite designed for programming and configuring Omron PLCs, relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose sensitive...

7.8CVSS7.2AI score0.01025EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.13 views

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows attackers to disclose protected information.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

7.8CVSS7.3AI score0.00979EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.11 views

The vulnerability of the WebXR components in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the WebXR components in Google Chrome and Microsoft Edge relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.1CVSS8AI score0.01056EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/03/11 12:0 a.m.10 views

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System (IGSS), related to reading data beyond the specified buffer, allows a intruder to trigger a service failure.

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System IGSS, is related to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

7.8CVSS7.2AI score0.18178EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/09 12:0 a.m.14 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its ability to read data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to reading data outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted fi...

9.3CVSS7.8AI score0.03201EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/09 12:0 a.m.11 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to reading beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to reading data beyond the buffer in memory. Exploiting this...

8.5CVSS7.8AI score0.0339EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:0 a.m.17 views

The vulnerability of Adobe Audition for Windows and macOS, related to the operation of operations beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Audition for Windows and macOS relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.0169EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:0 a.m.15 views

The vulnerability of the `__f2fs_setxattr` function in the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f2fssetxattr function fs/f2fs/xattr.c in the Linux operating system exists due to the reading of data beyond the specified buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

7.8CVSS6.6AI score0.00549EPSS
SaveExploits1References29Affected Software6
Rows per page
Query Builder