Lucene search
+L

112 matches found

BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.13 views

The vulnerability of the TrustZone component of the Android operating system from the CAF repository, which allows a perpetrator to gain unauthorized access to protected memory.

The vulnerability of the TrustZone component of the Android operating system from the CAF repository relates to the use of an uninitialized variable during system calls. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected memor...

10CVSS7.8AI score0.00836EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.8 views

The vulnerability of the Sample App component of the Android operating system from the CAF repository allows a perpetrator to gain unauthorized access to protected memory.

The vulnerability of the Sample App component of the Android operating system in the CAF repository arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected memory...

10CVSS8AI score0.00836EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/06/30 12:0 a.m.13 views

The vulnerability of the RPMB process in the Android operating system allows a hacker to bypass certificate verification.

The vulnerability of the RPMB process in the Android operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to bypass certificate verification...

9.3CVSS7.2AI score0.00619EPSS
SaveExploits0References3
CNVD
CNVD
added 2017/06/16 12:0 a.m.7 views

Google Android is vulnerable

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There is a security vulnerability in Android. An attacker can exploit the vulnerability to overwrite dynamically protected DDR regions...

5.5CVSS6.8AI score0.005EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/05/11 12:0 a.m.8 views

Microsoft Windows ActiveX Control Local Information Disclosure Vulnerability

Microsoft Windows is the popular computer operating system. An information disclosure vulnerability exists in the instantiation of ActiveX objects in some versions of Windows, allowing an attacker to access protected memory...

5.5CVSS6.2AI score0.07939EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2017/05/05 12:0 a.m.9 views

The vulnerability of the SMBv1 protocol in the Microsoft Windows operating system allows a perpetrator to gain access to protected information.

The vulnerability of the SMBv1 protocol in Microsoft Windows exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to protected information in the process memory using specially crafted packets...

4.3CVSS6.8AI score0.99693EPSS
SaveExploits22References7
BDU FSTEC
BDU FSTEC
added 2016/07/19 12:0 a.m.12 views

The vulnerability of the ASN1_TFLG_COMBINE implementation in the OpenSSL library allows a hacker to extract sensitive information from the process’ memory.

The vulnerability of the ASN1TFLGCOMBINE implementation crypto/asn1/tasndec.c in the OpenSSL library is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain protected information from the process’s memory...

5CVSS6.7AI score0.38709EPSS
SaveExploits1References12Affected Software9
BDU FSTEC
BDU FSTEC
added 2016/06/09 12:0 a.m.14 views

The vulnerability of the Mac OS X operating system allows a perpetrator to gain access to protected information in the kernel’s memory or cause a service failure.

The vulnerability of the Mac OS X operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information in the kernel’s memory or cause a service failure through a...

4.3CVSS6.6AI score0.00964EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/04/06 12:0 a.m.10 views

Vulnerabilities of iOS and Mac OS X operating systems, which allow attackers to gain access to the protected information in the memory structure

The vulnerability of the IOHIDFamily component in iOS and Mac OS X operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to the protected memory structure through a specially created application...

4.3CVSS6.7AI score0.01028EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2015/10/29 12:0 a.m.12 views

The vulnerabilities of Adobe Acrobat and Adobe Acrobat Document Cloud for PDF file editing, as well as Adobe Reader and Adobe Reader Document Cloud for PDF file viewing, allow attackers to gain access to protected information stored in the process memory.

The vulnerabilities of Adobe Acrobat and Adobe Acrobat Document Cloud for editing PDF files, as well as Adobe Reader and Adobe Reader Document Cloud for viewing PDF files, are related to deficiencies in access control mechanisms. Exploiting these vulnerabilities can allow attackers to gain access...

4.3CVSS5.5AI score0.03836EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2015/10/01 12:0 a.m.13 views

The vulnerability of the iOS operating system, which allows a perpetrator to gain access to protected information stored in memory

The vulnerability of the NetworkExtension kernel component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information stored in memory through a specially...

5CVSS5.5AI score0.01617EPSS
SaveExploits0References3Affected Software1
Mozilla
Mozilla
added 2014/03/18 12:0 a.m.57 views

Information disclosure through polygon rendering in MathML — Mozilla

Security researcher Tyson Smith and Jesse Schwartzentruber of the BlackBerry Security Automated Analysis Team used the Address Sanitizer tool while fuzzing to discover an out-of-bounds read during polygon rendering in MathML. This can allow web content to potentially read protected memory...

9.1CVSS8.6AI score0.0427EPSS
SaveExploits1References3Affected Software4
Rows per page
Query Builder