Lucene search
+L

323 matches found

Positive Technologies
Positive Technologies
added 2022/01/04 12:00 a.m.11 views

PT-2022-4823

Name of the Vulnerable Software and Affected Versions Blender versions prior to 2.83.19 Blender versions prior to 2.93.8 Blender versions prior to 3.1 Description An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read...

7.8CVSS7.1AI score0.01174EPSS
SaveExploits0References33
ICS
ICS
added 2021/12/16 12:00 a.m.76 views

Siemens Healthineers syngo fastView (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Healthineers, a subsidiary of Siemens Equipment: syngo fastView --------- Begin Update A Part 1 of 2 -------- Vulnerabilities: Out-of-bounds Write, Write-what-where Condition --------- End Update A Part 1 of 2...

7.8CVSS8.1AI score0.00323EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/12/14 12:00 a.m.9 views

PT-2021-7803 · Siemens · Syngo Fastview

Name of the Vulnerable Software and Affected Versions: syngo fastView All versions Description: A vulnerability has been identified in the affected application, which lacks proper validation of user-supplied data when parsing BMP files. This could result in a write-what-where condition, allowing ...

7.8CVSS7.5AI score0.00323EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2021/11/11 12:00 a.m.13 views

Eclipse Cyclone DDS 代码问题漏洞

Eclipse Cyclone DDS is a very high performance and robust open source DDS implementation from the Eclipse Foundation. A code issue vulnerability exists in Eclipse Cyclone DDS that stems from the product's failure to properly handle write-what-where logic. The vulnerability allows an attacker to...

9.8CVSS8.4AI score0.02046EPSS
SaveExploits0References4
ICS
ICS
added 2021/10/05 12:00 a.m.107 views

Emerson WirelessHART Gateway

1. EXECUTIVE SUMMARY CVSS v3 8.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Emerson Equipment: WirelessHART Gateway Vulnerabilities: Missing Authentication for Critical Function, Improper Input Validation, Improper Limitation of a Pathname to a Restricted Directory,...

8.8CVSS8.7AI score0.0148EPSS
SaveExploits0References5
NVD
NVD
added 2021/09/01 3:15 p.m.24 views

CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

4CVSS0.00645EPSS
SaveExploits0References3
OSV
OSV
added 2021/09/01 3:15 p.m.3 views

DEBIAN-CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

3.3CVSS6.5AI score0.00645EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/01 3:15 p.m.26 views

CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

3.3CVSS6.2AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2021/09/01 3:15 p.m.38 views

CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

4CVSS6.7AI score0.00645EPSS
SaveExploits0References3
OSV
OSV
added 2021/09/01 3:15 p.m.8 views

UBUNTU-CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

4CVSS6.7AI score0.00645EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2021/09/01 2:33 p.m.37 views

CVE-2021-36057 XMP Toolkit SDK Write-What-Where Condition Could Lead To Local Application Denial Of Service

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

4CVSS5.4AI score0.00645EPSS
SaveExploits0References2
CVE
CVE
added 2021/09/01 2:33 p.m.79 views

CVE-2021-36057

CVE-2021-36057 affects the XMP Toolkit SDK 2020.1 and earlier. The vulnerability is a write-what-where condition during the application’s memory allocation, which can cause mismatches in memory management and lead to local denial of service in the context of the current user. The issue is confirm...

4CVSS3.7AI score0.00645EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2021/09/01 2:33 p.m.43 views

CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

4CVSS5.2AI score0.00645EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/08/17 12:00 a.m.8 views

PT-2021-4888 · Adobe +2 · Xmp Toolkit Sdk +2

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become...

9.3CVSS8.1AI score0.05811EPSS
SaveExploits2References65
Tenable Nessus
Tenable Nessus
added 2021/08/10 12:00 a.m.31 views

Schneider-electric Unity Write-what-where Condition

A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert all versions and Unity Pro former name of EcoStruxure™ Control Expert all versions, that could cause a crash of the software or unexpected code execution when opening a malicious file in EcoStruxure™ Control...

6.8CVSS3.8AI score0.01387EPSS
SaveExploits0References2
Prion
Prion
added 2020/09/25 1:15 p.m.23 views

Buffer overflow

U.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code execution. An overflow in a global variable sBuffer leads to a Write-What-Where outcome. Writing beyond sBuffer will clobber most global variables until reaching a pointer such as DESinfo or imageinfo...

7.5CVSS9.9AI score0.02714EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/09/25 12:58 p.m.34 views

CVE-2020-13995

U.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code execution. An overflow in a global variable sBuffer leads to a Write-What-Where outcome. Writing beyond sBuffer will clobber most global variables until reaching a pointer such as DESinfo or imageinfo...

10AI score0.02714EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2020/08/10 12:00 a.m.35 views

Delta Industrial Automation TPEditor TPE File Parsing Write-what-where Condition Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation TPEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS4.7AI score0.02089EPSS
SaveExploits0References1
OSV
OSV
added 2020/08/07 12:15 a.m.10 views

CVE-2020-16225

Delta Electronics TPEditor Versions 1.97 and prior. A write-what-where condition may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execute arbitrary code, and/or crash the application...

7.8CVSS7.3AI score0.02089EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/07 12:15 a.m.31 views

CVE-2020-16225

Delta Electronics TPEditor Versions 1.97 and prior. A write-what-where condition may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execute arbitrary code, and/or crash the application...

7.8CVSS7.7AI score0.02089EPSS
SaveExploits0References2
Rows per page
Query Builder