Lucene search
K

135 matches found

OSV
OSV
added 2022/08/11 3:15 p.m.1 views

CVE-2022-35670

Adobe Acrobat Reader versions 22.001.20169 and earlier, 20.005.30362 and earlier and 17.012.30249 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

5.5CVSS6.6AI score
Exploits0References1
OSV
OSV
added 2022/06/15 9:15 p.m.2 views

CVE-2022-30669

Adobe Illustrator versions 26.0.2 and earlier and 25.4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

5.5CVSS5.8AI score0.01987EPSS
Exploits0References1
OSV
OSV
added 2022/05/11 6:15 p.m.1 views

CVE-2022-28248

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

5.5CVSS7.1AI score0.09239EPSS
Exploits0References1
OSV
OSV
added 2022/05/06 6:15 p.m.1 views

CVE-2022-24099

Adobe Photoshop versions 22.5.6 and earlierand 23.2.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

3.3CVSS6.7AI score
Exploits0References1
OSV
OSV
added 2022/03/16 3:15 p.m.2 views

CVE-2021-40769

Adobe Character Animator version 4.4 and earlier versions are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...

3.3CVSS5.6AI score0.01124EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2022/03/01 8:0 a.m.4 views

A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity because software that relies on UDP source port randomization are indirectly affected as well.

...

7.4CVSS7.2AI score0.0674EPSS
Exploits0
OSV
OSV
added 2022/02/16 5:15 p.m.2 views

CVE-2022-23195

Adobe Illustrator versions 25.4.3 and earlier and 26.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

5.5CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2022/01/14 8:15 p.m.2 views

CVE-2021-44715

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

5.5CVSS6.7AI score0.14701EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/12/27 12:0 a.m.2 views

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust abomonation crate in versions prior to 2021-10-17, which could allow information leakage or ASLR bypass...

7.5CVSS7.3AI score0.00972EPSS
Exploits0References3
OSV
OSV
added 2021/11/15 8:15 p.m.1 views

CVE-2020-12901

Arbitrary Free After Use in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or information disclosure...

5.5CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2021/11/15 4:15 p.m.2 views

CVE-2020-12897

Kernel Pool Address disclosure in AMD Graphics Driver for Windows 10 may lead to KASLR bypass...

5.5CVSS5.8AI score0.00239EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.3 views

AMD Graphics Driver 信息泄露漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver for Windows 10 suffers from an information disclosure vulnerability that can be exploited by attackers to cause a KASLR bypass...

5.5CVSS5.6AI score0.00239EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/11/09 12:0 a.m.2 views

AMD Graphics Driver 安全漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. A security vulnerability exists in AMD Graphics Driver, which can be exploited by attackers to cause privilege escalation, denial of service, information disclosure, KASLR bypass, or arbitrary write to kernel memory...

5.5CVSS5.8AI score0.00212EPSS
Exploits0References3
OSV
OSV
added 2021/09/29 4:15 p.m.1 views

CVE-2021-40697

Adobe Framemaker versions 2019 Update 8 and earlier and 2020 Release Update 2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this...

3.3CVSS7.2AI score0.01453EPSS
Exploits0References1
OSV
OSV
added 2021/09/01 3:15 p.m.1 views

CVE-2021-36074

Adobe Bridge versions 11.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim mus...

3.3CVSS5.9AI score0.01818EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/08/26 12:0 a.m.19 views

PT-2021-7066 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw in the processing of received ICMP errors, specifically ICMP fragment needed and ICMP redirect, allows an off-path remote user to quickly scan open UDP ports and bypass the sour...

9.8CVSS7.8AI score0.93838EPSS
Exploits345References1704
RedHat Linux
RedHat Linux
added 2021/06/09 9:35 a.m.3 views

kernel: ICMP rate limiting can be used for DNS poisoning attack

A flaw in the way reply ICMP packets are limited in the Linux kernel functionality was found that allows to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentialit...

7.4CVSS6.8AI score0.06692EPSS
Exploits1References4
OSV
OSV
added 2021/04/29 7:15 p.m.2 views

CVE-2021-1087

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager vGPU plugin, which could allow an attacker to retrieve information that could lead to a Address Space Layout Randomization ASLR bypass. This affects vGPU version 12.x prior to 12.2, version 11.x prior to 11.4 and version 8.x...

5.5CVSS6.1AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2021/03/03 9:36 a.m.2 views

kernel: ICMP rate limiting can be used for DNS poisoning attack

A flaw in the way reply ICMP packets are limited in the Linux kernel functionality was found that allows to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentialit...

7.4CVSS6.8AI score0.06692EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2020/12/03 12:0 a.m.1 views

The vulnerability of the Linux operating system’s kernel allows a hacker to gain unauthorized access to protected information.

The vulnerability of Linux operating system kernels is related to ICMP packet inspection errors. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information by bypassing the UDP port randomization mechanism...

7.4CVSS6.9AI score0.06692EPSS
Exploits1References25Affected Software4
Rows per page
Query Builder