Lucene search
K

2110 matches found

Positive Technologies
Positive Technologies
added 2023/06/19 12:0 a.m.1 views

PT-2023-7050 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the drm mode setcrtc function in the drivers/gpu/drm/drm crtc.c module of the Linux kernel's DRM driver. It involves the use of an uninitialized pointer...

6.8CVSS7.1AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/06/16 4:15 p.m.1 views

CVE-2023-34795

xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioreadsheetlistclose function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted XLSX file...

7.8CVSS7.1AI score0.00353EPSS
Exploits1References4
NVD
NVD
added 2023/06/16 4:15 p.m.11 views

CVE-2023-34795

xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioreadsheetlistclose function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted XLSX file...

7.8CVSS7.4AI score0.00353EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/06/16 12:0 a.m.7 views

CVE-2023-34795

xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioreadsheetlistclose function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted XLSX file...

7AI score0.00353EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/06/16 12:0 a.m.3 views

PT-2023-25009 · Xlsxio · Xlsxio

Name of the Vulnerable Software and Affected Versions: xlsxio versions 0.1.2 through 0.2.34 Description: The issue is related to a free of an uninitialized pointer in the xlsxioread sheetlist close function, which can be exploited by attackers to cause a Denial of Service DoS via a crafted XLSX...

7.8CVSS7.3AI score0.00353EPSS
Exploits1References5
CNNVD
CNNVD
added 2023/06/16 12:0 a.m.3 views

xlsxio 资源管理错误漏洞

xlsxio is a cross-platform C library for reading values from and writing values to .xlsx files from the individual developer Brecht Sanders. A security vulnerability exists in xlsxio versions v0.1.2 through v0.2.34, which stems from the inclusion of an uninitialized pointer in the...

7.8CVSS7.3AI score0.00353EPSS
Exploits1References4
NVD
NVD
added 2023/06/15 7:15 p.m.15 views

CVE-2023-21618

Adobe Substance 3D Designer version 12.4.1 and earlier is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.00303EPSS
Exploits0References1
OSV
OSV
added 2023/06/15 7:15 p.m.3 views

CVE-2023-21618

Adobe Substance 3D Designer version 12.4.1 and earlier is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.3AI score0.00303EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/06/15 12:0 a.m.9 views

CVE-2023-21618 ZDI-CAN-20963: Adobe Substance 3D Designer SBS File Parsing Uninitialized Variable Remote Code Execution Vulnerability

Adobe Substance 3D Designer version 12.4.1 and earlier is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.5AI score0.00303EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/06/15 12:0 a.m.15 views

CVE-2023-21618 ZDI-CAN-20963: Adobe Substance 3D Designer SBS File Parsing Uninitialized Variable Remote Code Execution Vulnerability

Adobe Substance 3D Designer version 12.4.1 and earlier is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.9AI score0.00303EPSS
Exploits0References1
OSV
OSV
added 2023/06/13 9:15 a.m.4 views

CVE-2023-29178

A access of uninitialized pointer vulnerability CWE-824 in Fortinet FortiProxy version 7.2.0 through 7.2.3 and before 7.0.9 and FortiOS version 7.2.0 through 7.2.4 and before 7.0.11 allows an authenticated attacker to repetitively crash the httpsd process via crafted HTTP or HTTPS requests...

4.3CVSS5.8AI score0.00884EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/06/13 12:0 a.m.2 views

Fortinet FortiProxy 缓冲区错误漏洞

Fortinet FortiProxy is a secure network proxy from Fortinet that protects employees from cyberattacks by combining multiple detection technologies such as Web filtering, DNS filtering, DLP, anti-virus, intrusion prevention, and advanced threat protection.FortiProxy helps reduce bandwidth...

4.3CVSS5.1AI score0.00884EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/06/13 12:0 a.m.6 views

PT-2023-3288 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Designer versions 12.4.1 and earlier Description: The issue is related to an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...

7.8CVSS7.7AI score0.00303EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2023/06/12 12:0 a.m.14 views

Fortinet Fortigate Access of uninitialized pointer in administrative interface API (FG-IR-23-095)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-095 advisory. - A access of uninitialized pointer vulnerability CWE-824 in Fortinet FortiProxy version 7.2.0 through 7.2.3 and before 7.0.9...

4.3CVSS5.2AI score0.00884EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/06/08 12:0 a.m.3 views

PT-2023-24786 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this issue, where the...

7.8CVSS7.2AI score0.00348EPSS
Exploits0References4
OSV
OSV
added 2023/06/06 5:15 p.m.3 views

CVE-2023-31244

The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer...

7.8CVSS7.4AI score0.00227EPSS
Exploits0References1
NVD
NVD
added 2023/06/06 5:15 p.m.7 views

CVE-2023-31244

The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer...

7.8CVSS7.9AI score0.00227EPSS
Exploits0References1
Prion
Prion
added 2023/06/06 5:15 p.m.16 views

Null pointer dereference

The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer...

4.4CVSS7.8AI score0.00227EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2023/06/06 4:27 p.m.13 views

CVE-2023-31244

The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer...

7.8CVSS8AI score0.00227EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/06/06 4:27 p.m.6 views

CVE-2023-31244

The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer...

7.8CVSS7.6AI score0.00227EPSS
Exploits0References1
Rows per page
Query Builder