Lucene search
+L

2967 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/15 12:00 a.m.•6 views

CVE-2021-3595: Access of Uninitialized Pointer

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftpinput function and could occur while processing a udp packet that is smaller than the size of the 'tftpt' structure. This issue may lead to out-of-bounds read access or...

3.8CVSS5.8AI score0.00326EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/06/11 4:15 p.m.•33 views

CVE-2021-22758

A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack validation of user-supplied input data, when a malicious CGF file is imported to IGSS Definition...

7.8CVSS6.3AI score0.01172EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/06/11 4:15 p.m.•19 views

CVE-2021-22758

A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack validation of user-supplied input data, when a malicious CGF file is imported to IGSS Definition...

7.8CVSS7.7AI score0.01172EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/06/11 3:40 p.m.•57 views

CVE-2021-22758

A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack validation of user-supplied input data, when a malicious CGF file is imported to IGSS Definition...

8.2AI score0.01172EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/11 12:00 a.m.•9 views

CVE-2021-22758: Access of Uninitialized Pointer

A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack validation of user-supplied input data, when a malicious CGF file is imported to IGSS Definition...

7.8CVSS6.2AI score0.01172EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/06/08 3:15 p.m.•18 views

CVE-2021-34280

Polaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll that may cause a Remote Code Execution. To exploit the vulnerability, someone must open a crafted PDF file...

7.8CVSS7.2AI score0.01309EPSS
SaveExploits0References1
NVD
NVD
•added 2021/06/08 3:15 p.m.•34 views

CVE-2021-34280

Polaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll that may cause a Remote Code Execution. To exploit the vulnerability, someone must open a crafted PDF file...

7.8CVSS0.01309EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/06/08 3:15 p.m.•16 views

CVE-2021-34280

Polaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll that may cause a Remote Code Execution. To exploit the vulnerability, someone must open a crafted PDF file...

7.8CVSS7.1AI score0.01309EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/06/08 2:28 p.m.•40 views

CVE-2021-34280

Polaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll that may cause a Remote Code Execution. To exploit the vulnerability, someone must open a crafted PDF file...

7.9AI score0.01309EPSS
SaveExploits0References1
CVE
CVE
•added 2021/06/08 2:28 p.m.•63 views

CVE-2021-34280

CVE-2021-34280 affects Polaris Office v9.103.83.44230, with an uninitialized pointer vulnerability in PolarisOffice.exe and EngineDLL.dll that may enable remote code execution when a user opens a crafted PDF. Connected data corroborate the vulnerability’s impact and affected components; the CVSS ...

7.8CVSS7.6AI score0.01309EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2021/06/08 12:00 a.m.•20 views

PolarisOffice buffer error vulnerability

Polaris Office is an application from Polaris Office, a South Korean company that provides greater convenience by improving file opening speed, storage reliability and printing performance. A security vulnerability exists in PolarisOffice v9.103.83.44230, which originates from PolarisOffice...

7.8CVSS7.8AI score0.01309EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/06/08 12:00 a.m.•8 views

PT-2021-20421

Name of the Vulnerable Software and Affected Versions: Polaris Office version 9.103.83.44230 Description: The issue is related to an Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll, which may cause a Remote Code Execution. To exploit the issue, an attacker must open a...

7.8CVSS0.01309EPSS
SaveExploits0References5
ICS
ICS
•added 2021/06/08 12:00 a.m.•77 views

Schneider Electric IGSS

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Schneider Electric Equipment: IGSS Interactive Graphical SCADA System Vulnerabilities: Out-of-bounds Write, Out-of-bounds Read, Access of Uninitialized Pointer, Use After Free, Release of Invalid Pointer or Reference,...

7.8CVSS8.6AI score0.01395EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/08 12:00 a.m.•11 views

CVE-2021-34280: Access of Uninitialized Pointer

Polaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll that may cause a Remote Code Execution. To exploit the vulnerability, someone must open a crafted PDF file...

7.8CVSS5.8AI score0.01309EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/06/02 12:00 a.m.•21 views

OpenText Brava! Buffer Error Vulnerability

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. A remote code execution vulnerability exists in the parsing of PDF files in OpenText Brava! Desktop. The vulnerability stems from a failure to properly initializ...

7.8CVSS6.7AI score0.01419EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/06/02 12:00 a.m.•19 views

PT-2021-19360 · Opentext · Opentext Brava! Desktop

Name of the Vulnerable Software and Affected Versions: OpenText Brava! Desktop version 16.6.3.84 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

7.8CVSS7.8AI score0.01419EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2021/06/02 12:00 a.m.•50 views

OpenText Brava! Desktop pdf2dl Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.7AI score0.01419EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2021/05/18 2:53 p.m.•67 views

poppler: pdftohtml: access to uninitialized pointer could lead to DoS

A flaw was found in Poppler in the way certain PDF files were converted into HTML. This flaw allows a remote attacker to provide a malicious PDF file that, when processed by the 'pdftohtml' program, crashes the application, causing a denial of service. The highest threat from this vulnerability i...

7.5CVSS5.8AI score0.02201EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/14 12:00 a.m.•6 views

CVE-2021-29568: Access of Uninitialized Pointer

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger undefined behavior by binding to null pointer in tf.rawops.ParameterizedTruncatedNormal. This is because the...

7.8CVSS5.6AI score0.00197EPSS
SaveExploits1References3
Zero Day Initiative
Zero Day Initiative
•added 2021/03/30 12:00 a.m.•46 views

Esri ArcReader PMF File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS6.2AI score0.02021EPSS
SaveExploits0References1
Rows per page
Query Builder