Lucene search
+L

7535 matches found

OSV
OSV
added 2023/11/03 9:15 p.m.12 views

DEBIAN-CVE-2023-47233

The brcm80211 component in the Linux kernel through 6.5.10 has a brcmfcfg80211detach use-after-free in the device unplugging disconnect the USB by hotplug code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is related to...

4.3CVSS6.2AI score0.00315EPSS
SaveExploits0References1
Fedora
Fedora
added 2023/11/03 7:6 p.m.37 views

[SECURITY] Fedora 39 Update: usd-23.08-2.fc39

Universal Scene Description USD is a time-sampled scene description for interchange between graphics applications...

9.8CVSS7.3AI score0.01137EPSS
SaveExploits1
SUSE CVE
SUSE CVE
added 2023/11/02 2:45 a.m.4 views

SUSE CVE-2023-5849

Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.2AI score0.01253EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/11/02 12:0 a.m.25 views

The vulnerability in the interface for connecting peripheral devices via USB browsers like Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the interface for connecting peripheral devices via USB in Google Chrome browsers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created web page...

10CVSS8.5AI score0.01253EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/02 12:0 a.m.24 views

The vulnerability in the interface for connecting peripheral devices via USB browsers like Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the interface for connecting peripheral devices via USB in Google Chrome browsers is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

10CVSS8.1AI score0.07154EPSS
SaveExploits0References12Affected Software4
Circl
Circl
added 2023/11/01 9:22 p.m.17 views

CVE-2023-5857

creationtimestamp| type| source ---|---|--- 2023-11-01 21:22:12+00:00| seen| https://t.me/cibsecurity/73377...

8.8CVSS8AI score0.01291EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/01 6:15 p.m.2 views

DEBIAN-CVE-2023-5482

Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.9AI score0.07154EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/31 9:47 p.m.9 views

USN-6466-1 linux-nvidia-6.2 vulnerabilities

Hyunwoo Kim discovered that the DVB Core driver in the Linux kernel contained a race condition during device removal, leading to a use-after- free vulnerability. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...

9.8CVSS7.8AI score0.45301EPSS
SaveExploits8References41
CNNVD
CNNVD
added 2023/10/31 12:0 a.m.10 views

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that originates from an integer overflow vulnerability in the USB module...

8.8CVSS6.9AI score0.01253EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2023/10/31 12:0 a.m.8 views

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that originates from insufficient data validation in the USB module...

8.8CVSS6.6AI score0.07154EPSS
SaveExploits0References8
Openbugbounty
Openbugbounty
added 2023/10/30 7:10 p.m.7 views

reclams-universal-bibliothek.de Improper Access Control vulnerability OBB-3769412

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/10/27 12:0 a.m.11 views

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to reading data outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created USDC file...

7.8CVSS7.8AI score0.00345EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/25 12:0 a.m.15 views

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to reading data outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created USD file...

7.8CVSS7.8AI score0.00345EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2023/10/17 10:15 p.m.23 views

CVE-2023-22118

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

6.5CVSS6.5AI score0.00307EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/17 10:15 p.m.12 views

CVE-2023-22117

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

5.4CVSS5.8AI score0.00321EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/17 10:15 p.m.33 views

CVE-2023-22117

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

5.4CVSS5AI score0.00321EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/17 10:15 p.m.19 views

Design/Logic Flaw

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Difficult to exploit vulnerability allows low privileged attacker with network access v...

4.6CVSS6AI score0.00322EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/10/17 10:15 p.m.20 views

Design/Logic Flaw

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

4.9CVSS5.2AI score0.00321EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/10/17 9:3 p.m.72 views

CVE-2023-22118

CVE-2023-22118 affects Oracle FLEXCUBE Universal Banking (Infrastructure) with affected versions 12.3, 12.4, 14.0–14.3 and 14.5–14.7. Vulnerability allows a low‑privileged attacker with network access via HTTP, with required user interaction, to modify/read data and cause a partial DOS. Mitigatio...

6.5CVSS6.5AI score0.00307EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/10/17 9:3 p.m.60 views

CVE-2023-22119

The CVE affects Oracle FLEXCUBE Universal Banking (Infrastructure) in Oracle Financial Services Applications, with affected versions 12.3, 12.4, 14.0–14.3 and 14.5–14.7. The underlying issue is insufficient input validation, allowing a low-privileged attacker with network access via HTTP to compr...

5.9CVSS5.7AI score0.00322EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder