Lucene search
+L

9287 matches found

OSV
OSV
added 2021/10/06 6:15 p.m.10 views

CVE-2021-25492

Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read...

7.1CVSS7.3AI score0.00227EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.6 views

The vulnerability of the f2fs kernel module in the Linux operating system, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the f2fs kernel module in the Linux operating system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

7.1CVSS6.8AI score0.00366EPSS
SaveExploits0References27Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.10 views

The vulnerability of the eBPF subsystem in the Linux operating system, related to reading beyond the buffer in memory, allows a hacker to execute arbitrary code in the kernel context.

The vulnerability of the eBPF subsystem in the Linux operating system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the kernel context...

7.8CVSS7.2AI score0.27477EPSS
SaveExploits7References20Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.9 views

The vulnerability of the Linux operating system’s kernel, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.4CVSS6.8AI score0.00277EPSS
SaveExploits0References9Affected Software4
OSV
OSV
added 2021/10/04 6:15 p.m.12 views

AZL-6847 CVE-2021-32672 affecting package redis for versions less than 6.2.6-1

Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support 3.2 or newer...

4.3CVSS6.6AI score0.01831EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/04 6:15 p.m.5 views

DEBIAN-CVE-2021-32672

Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support 3.2 or newer...

4.3CVSS6.2AI score0.01831EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/04 6:15 p.m.5 views

CVE-2021-32672

Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support 3.2 or newer...

5.3CVSS6.7AI score0.01831EPSS
SaveExploits0References13Affected Software1
CNNVD
CNNVD
added 2021/10/04 12:0 a.m.12 views

多款Qualcomm产品缓冲区错误漏洞

The Qualcomm MDM9206 and others are products of Qualcomm Incorporated.The MDM9206 is a central processing unit CPU.The MDM9607 is a central processing unit CPU.The MDM9650 is a central processing unit CPU.The MDM9650 is a central processing unit CPU. A security vulnerability exists in Qualcomm th...

9.1CVSS8.5AI score0.00611EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/10/04 12:0 a.m.8 views

多款Qualcomm产品缓冲区错误漏洞

Qualcomm QCA6574AU and others are products of Qualcomm Incorporated Qualcomm.QCA6574AU is a central processing unit CPU product.APQ8053 is a central processing unit CPU product.SDX55 is a modem. Multiple Qualcomm Products A buffer error vulnerability exists in the DSP service that stems from an...

8.4CVSS7.3AI score0.0015EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/10/04 12:0 a.m.10 views

PT-2023-3600 · Qt Company +8 · Qt +8

Name of the Vulnerable Software and Affected Versions: Qt versions 5.x before 5.15.14 Qt versions 6.x before 6.2.9 Qt versions 6.3.x through 6.5.x before 6.5.1 Description: The issue is related to a buffer over-read in the QDnsLookup component of the Qt framework, which can be exploited by a remo...

9.8CVSS6.6AI score0.03085EPSS
SaveExploits2References171
Positive Technologies
Positive Technologies
added 2021/10/04 12:0 a.m.9 views

PT-2021-7752 · Redis +5 · Redis +5

Name of the Vulnerable Software and Affected Versions: Redis versions 3.2 through 6.2.5 Redis versions 3.2 through 6.0.15 Redis versions 3.2 through 5.0.13 can be simplified to: Redis versions 3.2 through 6.2.5 Description: The issue affects Redis, an open source, in-memory database that persists...

9CVSS6.5AI score0.31049EPSS
SaveExploits3References111
OSV
OSV
added 2021/09/28 12:15 p.m.7 views

CVE-2021-41533

A vulnerability has been identified in NX 1980 Series All versions V1984, Solid Edge SE2021 All versions SE2021MP8. The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak...

3.3CVSS5.9AI score0.00966EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/09/28 12:0 a.m.9 views

Siemens Solid Edge 缓冲区错误漏洞

Solid Edge is a 3D CAD, parametric feature and synchronous technology solid modeling software. buffer out-of-bounds read vulnerability exists in versions prior to Siemens Solid Edge SE2021MP8. An attacker can exploit the vulnerability to disclose information in the context of the current process...

4.3CVSS5.2AI score0.00966EPSS
SaveExploits0References10
OpenVAS
OpenVAS
added 2021/09/28 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2021-2542)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.78675EPSS
SaveExploits4References2
ATTACKERKB
ATTACKERKB
added 2021/09/24 3:15 a.m.7 views

CVE-2021-41581

x509constraintsparsemailbox in lib/libcrypto/x509/x509constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When the input exceeds DOMAINPARTMAXLEN, the buffer lacks '\0' termination...

5.5CVSS6.3AI score0.00646EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.10 views

The vulnerability in the imap/util.c component of the Mutt and NeoMutt email clients arises from reading data beyond the allowed buffer size. This allows an attacker to access confidential data and also cause service interruptions.

The vulnerability in the imap/util.c component of the Mutt and NeoMutt email clients is related to incorrect handling of the IMAP sequence set, which ends with a semicolon. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service failures...

9.1CVSS7.7AI score0.02551EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/09/17 12:0 a.m.14 views

The vulnerability of the OpenSLP supervisor of VMware ESXi and the VMware Cloud Foundation virtualization platform allows a attacker to trigger a service failure.

The vulnerability of the OpenSLP supervisor of VMware ESXi and the VMware Cloud Foundation virtualization platform relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures by connecting through port 427...

7.5CVSS7.4AI score0.00961EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/09/16 3:15 p.m.1 views

DEBIAN-CVE-2021-36160

A carefully crafted request uri-path can cause modproxyuwsgi to read above the allocated memory and crash DoS. This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 inclusive...

7.5CVSS7.7AI score0.62887EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/16 3:15 p.m.5 views

ALPINE-CVE-2021-36160

A carefully crafted request uri-path can cause modproxyuwsgi to read above the allocated memory and crash DoS. This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 inclusive...

7.5CVSS6.9AI score0.62887EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/15 5:15 p.m.8 views

CVE-2021-27045

A maliciously crafted PDF file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the PDF file. This vulnerability can be exploited to execute arbitrary code...

7.8CVSS6AI score0.00957EPSS
SaveExploits0References1
Rows per page
Query Builder