Lucene search
K

2110 matches found

Vulnrichment
Vulnrichment
added 2022/12/18 12:0 a.m.7 views

CVE-2020-36617 ewxrjk sftpserver parse.c sftp_parse_path uninitialized pointer

A vulnerability was found in ewxrjk sftpserver. It has been declared as problematic. Affected by this vulnerability is the function sftpparsepath of the file parse.c. The manipulation leads to uninitialized pointer. The real existence of this vulnerability is still doubted at the moment. The name...

4.6CVSS7.1AI score0.00545EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/12/18 12:0 a.m.3 views

PT-2022-9013 · Unknown · Ewxrjk Sftpserver

Name of the Vulnerable Software and Affected Versions: ewxrjk sftpserver affected versions not specified Description: A vulnerability was found in the ewxrjk sftpserver, affecting the function sftp parse path of the file parse.c. The manipulation leads to an uninitialized pointer. The real...

9.8CVSS7.2AI score0.00545EPSS
Exploits0References7
CNNVD
CNNVD
added 2022/12/18 12:0 a.m.3 views

Green End SFTP Server 安全漏洞

Green End SFTP Server is an SFTP server supporting protocol version 6 by Richard Kettlewell, an individual developer. A security vulnerability exists in Green End SFTP Server that stems from an uninitialized pointer due to the sftpparsepath function in its parse.c file...

9.8CVSS8.2AI score0.00545EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/12/12 12:0 a.m.6 views

The vulnerability of IronCAD’s three-dimensional modeling software, related to the use of an uninitialized pointer, allows a hacker to execute arbitrary code.

The vulnerability of the IronCAD three-dimensional modeling software relates to the use of an uninitialized pointer during the syntax analysis of STP files. Exploiting this vulnerability allows a attacker to execute arbitrary code using a specially created malicious web page or a specially create...

7.8CVSS7.6AI score0.00534EPSS
Exploits0References5
Cvelist
Cvelist
added 2022/12/07 11:0 p.m.29 views

CVE-2022-3084 GE CIMPLICITY Access of Uninitialized Pointer

GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, which could allow an attacker to execute arbitrary code...

7.8CVSS8AI score0.00232EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/12/07 11:0 p.m.7 views

CVE-2022-3084 GE CIMPLICITY Access of Uninitialized Pointer

GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, which could allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00232EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/12/07 10:59 p.m.10 views

CVE-2022-2952 GE CIMPLICITY Access of Uninitialized Pointer

GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00232EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/12/07 10:59 p.m.24 views

CVE-2022-2952 GE CIMPLICITY Access of Uninitialized Pointer

GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code...

7.8CVSS8AI score0.00232EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/12/07 12:0 a.m.4 views

The vulnerability of the SSL-VPN portal for operating systems FortiOS and the proxy server used for protecting against internet attacks by FortiProxy allows attackers to induce a service failure.

The vulnerability of the SSL-VPN portal for FortiOS operating systems and the FortiProxy proxy server used to protect against internet attacks is related to access to an uninitialized pointer. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending a...

7.8CVSS7.2AI score0.00868EPSS
Exploits0References4Affected Software2
CNNVD
CNNVD
added 2022/11/23 12:0 a.m.5 views

GE CIMPLICITY HMI/SCADA Software 缓冲区错误漏洞

GE CIMPLICITY HMI/SCADA Software is an automated industrial platform from General Electric GE. It provides true client-server visualization and control from a single machine to plant locations around the world to help manage operations and improve decision making. A buffer error vulnerability...

7.8CVSS7.9AI score0.00232EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/11/22 12:0 a.m.5 views

The vulnerability of the Poppler library for displaying PDF files, related to access to an uninitialized pointer, allows a malicious actor to cause a service failure.

The vulnerability of the Poppler library for displaying PDF files relates to access to an uninitialized pointer. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a malicious PDF file...

7.8CVSS7.4AI score0.02174EPSS
Exploits1References9Affected Software4
OSV
OSV
added 2022/11/15 9:15 p.m.4 views

CVE-2022-3377

Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory...

7.8CVSS6AI score0.00237EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2022/11/15 3:21 p.m.2 views

openjpeg: segmentation fault in opj2_decompress due to uninitialized pointer

A flaw was found in the opj2decompress program in openjpeg2 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and a...

5.5CVSS7.5AI score0.01078EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/11/15 3:21 p.m.26 views

Low: Red Hat Security Advisory: openjpeg2 security update

An update for openjpeg2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

5.5CVSS6.7AI score0.01078EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2022/11/09 12:0 a.m.32 views

CentOS 8 : openjpeg2 (CESA-2022:7645)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7645 advisory. - openjpeg: segmentation fault in opj2decompress due to uninitialized pointer CVE-2022-1122 Note that Nessus has not tested for this issue but has instead relie...

5.5CVSS6.8AI score0.01078EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2022/11/08 9:37 a.m.3 views

openjpeg: segmentation fault in opj2_decompress due to uninitialized pointer

A flaw was found in the opj2decompress program in openjpeg2 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and a...

5.5CVSS7.5AI score0.01078EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/11/08 9:37 a.m.28 views

Low: Red Hat Security Advisory: openjpeg2 security update

An update for openjpeg2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

5.5CVSS6.7AI score0.01078EPSS
Exploits0References3
Rockylinux
Rockylinux
added 2022/11/08 6:25 a.m.35 views

openjpeg2 security update

An update is available for openjpeg2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenJPEG is an open source library for reading and writing image files in...

5.5CVSS1.6AI score0.01078EPSS
Exploits0
OSV
OSV
added 2022/10/27 11:15 p.m.2 views

CVE-2022-3378

Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory...

7.8CVSS6AI score0.00237EPSS
Exploits0References1
NVD
NVD
added 2022/10/27 11:15 p.m.23 views

CVE-2022-3378

Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory...

7.8CVSS0.00237EPSS
Exploits0References1
Rows per page
Query Builder