Lucene search
+L

2256 matches found

CNVD
CNVD
added 2023/03/17 12:00 a.m.46 views

Adobe Dimension Uninitialized Pointer Access Vulnerability (CNVD-2023-41424)

Adobe Dimension is a set of 2D and 3D composite design tools from the American company Audobee Adobe. An uninitialized pointer access vulnerability exists in Adobe Dimension, which can be exploited by an attacker to cause a sensitive memory leak...

5.5CVSS6.6AI score0.00332EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/16 9:15 p.m.9 views

CVE-2022-43606

A use-of-uninitialized-pointer vulnerability exists in the Forward Open connectionmanagemententry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP request can lead to use of a null pointer, causing the server to crash. An attacker can send a seri...

7.5CVSS5.8AI score0.08047EPSS
SaveExploits1References2
NVD
NVD
added 2023/03/16 9:15 p.m.39 views

CVE-2022-43606

A use-of-uninitialized-pointer vulnerability exists in the Forward Open connectionmanagemententry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP request can lead to use of a null pointer, causing the server to crash. An attacker can send a seri...

7.5CVSS7.4AI score0.08047EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/03/16 8:02 p.m.51 views

CVE-2022-43606

A use-of-uninitialized-pointer vulnerability exists in the Forward Open connectionmanagemententry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP request can lead to use of a null pointer, causing the server to crash. An attacker can send a seri...

7.5CVSS7.6AI score0.08047EPSS
SaveExploits1References1
CVE
CVE
added 2023/03/16 8:02 p.m.71 views

CVE-2022-43606

Summary (CVE-2022-43606) : In EIP Stack Group OpENer (development commit 58ee13c), a use-of-uninitialized-pointer occurs in the Forward Open connection_management_entry, when processing a specially crafted EtherNet/IP request. This can lead to a crash (server segmentation fault) due to dereferenc...

7.5CVSS7.4AI score0.08047EPSS
SaveExploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/03/16 12:00 a.m.33 views

Adobe Dimension < 3.4.8 Multiple Vulnerabilities (APSB23-20) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 3.4.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-20 advisory. - Adobe Dimension versions 3.4.7 and earlier is affected by a Stack-based Buffer Overflow vulnerability that could...

7.8CVSS7.5AI score0.00437EPSS
SaveExploits0References59
Positive Technologies
Positive Technologies
added 2023/03/16 12:00 a.m.17 views

PT-2023-14270 · Unknown · Eip Stack Group Opener

Name of the Vulnerable Software and Affected Versions: EIP Stack Group OpENer version 58ee13c Description: A use-of-uninitialized-pointer issue exists in the Forward Open connection management entry functionality. This can be triggered by a specially-crafted EtherNet/IP request, leading to the us...

7.5CVSS7.4AI score0.08047EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/03/15 12:00 a.m.9 views

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is a set of 2D and 3D composite design tools from the American company Audobee Adobe. An uninitialized pointer access vulnerability exists in Adobe Dimension, which can be exploited by an attacker to cause a sensitive memory leak...

5.5CVSS6.5AI score0.00332EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/07 5:15 p.m.13 views

CVE-2022-45861

An access of uninitialized pointer vulnerability CWE-824 in the SSL VPN portal of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.11 and FortiProxy version 7.2.0 through 7.2.1, version 7.0.0 through 7.0.7 and before 2.0.11 allows a remote authenticated...

6.5CVSS5.8AI score0.00818EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/03/07 4:21 p.m.63 views

CVE-2022-45861

An access of uninitialized pointer vulnerability CWE-824 in the SSL VPN portal of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.11 and FortiProxy version 7.2.0 through 7.2.1, version 7.0.0 through 7.0.7 and before 2.0.11 allows a remote authenticated...

6.5CVSS6.5AI score0.00818EPSS
SaveExploits0References1
CVE
CVE
added 2023/03/07 4:21 p.m.88 views

CVE-2022-45861

CVE-2022-45861 describes an access of uninitialized pointer vulnerability (CWE-824) in the SSL VPN portal of Fortinet FortiOS (versions 7.2.0–7.2.3, 7.0.0–7.0.9, and before 6.4.11) and FortiProxy (7.2.0–7.2.1, 7.0.0–7.0.7, and before 2.0.11). A remote authenticated attacker could crash the sslvpn...

6.5CVSS6.2AI score0.00818EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2023/03/07 12:00 a.m.10 views

Fortinet FortiOS 缓冲区错误漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam. A security vulnerabili...

6.5CVSS6.5AI score0.00818EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/03/07 12:00 a.m.7 views

PT-2023-1862 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.4.11 and earlier, 7.0.0 through 7.0.9, 7.2.0 through 7.2.3 FortiProxy versions 2.0.11 and earlier, 7.0.0 through 7.0.7, 7.2.0 through 7.2.1 Description: The issue is related to an access of uninitialized pointer vulnerabili...

6.8CVSS6.1AI score0.00818EPSS
SaveExploits0References7
OSV
OSV
added 2023/03/02 7:07 p.m.10 views

CLSA-2023-1677784062 Fix CVE(s): CVE-2022-34480

SECURITY UPDATE: Within the lginit function, if several allocations succeed but then one fails, an uninitialized pointer would have been freed despite never being allocated. - debian/patches/CVE-2022-34480.patch: avoid using uninitialized pointer - CVE-2022-34480...

8.8CVSS7.3AI score0.00546EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/02 7:03 p.m.12 views

CLSA-2023-1677783798 nss: Fix of CVE-2022-34480

CVE-2022-34480: nss: fix using of uninitialized pointer in lginit...

8.8CVSS7.3AI score0.00546EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/02 7:00 p.m.9 views

CLSA-2023-1677783628 nss: Fix of CVE-2022-34480

CVE-2022-34480: nss: fix using of uninitialized pointer in lginit...

8.8CVSS7.3AI score0.00546EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:00 a.m.36 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.7AI score0.00226EPSS
SaveExploits0References1
Talos
Talos
added 2023/02/23 12:00 a.m.39 views

EIP Stack Group OpENer Forward Open connection_management_entry use of uninitialized pointer vulnerability

Talos Vulnerability Report TALOS-2022-1663 EIP Stack Group OpENer Forward Open connectionmanagemententry use of uninitialized pointer vulnerability February 23, 2023 CVE Number CVE-2022-43606 SUMMARY A use-of-uninitialized-pointer vulnerability exists in the Forward Open connectionmanagemententry...

7.5CVSS7.3AI score0.08047EPSS
SaveExploits1
CNNVD
CNNVD
added 2023/02/23 12:00 a.m.13 views

EIPStackGroup OpENer 缓冲区错误漏洞

EIPStackGroup OpENer is a software from the EIPStackGroup organization for providing EtherNet/IP stacking functionality to IO adapter devices . A buffer error vulnerability exists in EIPStackGroup OpENer version 58ee13c, which stems from a vulnerability in the use of an uninitialized pointer in t...

7.5CVSS7.5AI score0.08047EPSS
SaveExploits1References3
F5 Networks
F5 Networks
added 2023/02/21 6:08 p.m.81 views

K17503: PHP vulnerabilities CVE-2015-7803 and CVE-2015-7804

Security Advisory Description CVE-2015-7803 A NULL pointer dereference flaw was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash. CVE-2015-7804 An uninitialized pointer use flaw was found in the pharmakedirstream function of PHP's Ph...

6.8CVSS8.4AI score0.10288EPSS
SaveExploits0
Rows per page
Query Builder