Lucene search
K

16 matches found

RedHat Linux
RedHat Linux
added 2026/05/19 4:21 p.m.9 views

nginx: NGINX: Arbitrary Code Execution Vulnerability

A flaw was found in NGINX, specifically within the ngxhttprewritemodule. An unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests under specific rewrite configurations. This can lead to a heap buffer overflow in the NGINX worker process, which may result in...

9.2CVSS6.6AI score0.23018EPSS
Exploits39References6
RedHat Linux
RedHat Linux
added 2026/05/15 10:38 a.m.8 views

nginx: NGINX: Arbitrary Code Execution Vulnerability

A flaw was found in NGINX, specifically within the ngxhttprewritemodule. An unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests under specific rewrite configurations. This can lead to a heap buffer overflow in the NGINX worker process, which may result in...

9.2CVSS6.6AI score0.23018EPSS
Exploits39References6
Vulnrichment
Vulnrichment
added 2026/04/28 12:0 a.m.3 views

CVE-2025-60887

An issue was discovered in Cista v0.15 and below. Insecure deserialization of untrusted input under certain conditions may lead to leaking of stack/heap addresses which may be used to bypass ASLR. Classes with pointer-like mechanics under the cista::raw namespace are prone to reference tampering,...

5.3CVSS5.4AI score0.00236EPSS
Exploits0References2
OSV
OSV
added 2026/02/05 5:16 p.m.4 views

CVE-2020-37119

Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious DNS query payload to trigger a three-byte overwrite, bypass ASLR, and execute shellcode through a...

9.8CVSS6.4AI score0.00607EPSS
Exploits1References3
EUVD
EUVD
added 2026/01/29 8:48 a.m.5 views

EUVD-2026-4992

An out-of-bounds read vulnerability in the TeamViewer DEX Client former 1E Client - Content Distribution Service NomadBranch.exe prior version 26.1 for Windows allows an attacker on the adjacent network to cause information disclosure or denial-of-service via a special crafted packet. The leaked...

5.4CVSS5.9AI score0.00196EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/04/12 12:0 a.m.3 views

The vulnerability of the Adobe Framemaker desktop publishing system arises from the possibility of an operation going beyond the buffer boundaries in memory. This allows a hacker to bypass the ASLR protection mechanism and gain unauthorized access to protected information.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism and gain unauthorized access to protected information...

5.5CVSS5.8AI score0.00184EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/06/11 12:0 a.m.3 views

PT-2024-4223 · Adobe · Media Encoder

Name of the Vulnerable Software and Affected Versions: Adobe Media Encoder versions 23.6.5, 24.3 and earlier Description: The issue is related to an out-of-bounds read vulnerability in the Adobe Media Encoder application, which could allow an attacker to disclose sensitive memory information. Thi...

5.5CVSS6.9AI score0.00409EPSS
Exploits0References4
OSV
OSV
added 2023/12/13 1:15 p.m.3 views

CVE-2023-47078

Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

5.5CVSS5.8AI score0.00424EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.3 views

The vulnerability of the Adobe Photoshop graphic editor, related to reading beyond the buffer in memory, allows a hacker to bypass the ASLR protection mechanism.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection mechanism...

5.5CVSS6.1AI score0.00328EPSS
Exploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 5:11 a.m.3 views

SUSE CVE-2015-8453

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to bypass the ASLR protection mechanism via J...

4.3CVSS7.1AI score0.04978EPSS
Exploits0References6
OSV
OSV
added 2022/02/16 5:15 p.m.3 views

CVE-2022-23191

Adobe Illustrator versions 25.4.3 and earlier and 26.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

5.5CVSS5.8AI score0.01876EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.5 views

The vulnerability in the `drivers/net/ethernet/xilinx/xilinx_emaclite.c` component of the Linux operating system allows a hacker to bypass the ASLR protection mechanism.

The vulnerability in the drivers/net/ethernet/xilinx/xilinxemaclite.c component of the Linux kernel is related to the use of uninitialized memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...

3.3CVSS6.5AI score0.00328EPSS
Exploits0References26Affected Software4
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.3 views

The vulnerability of the Flash Player software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability exists in the Adobe Flash Player due to the possibility of accessing information related to memory addresses. Exploiting this vulnerability allows attackers to bypass the ASLR Address Space Layout Randomization protection mechanism...

10CVSS5.4AI score0.05032EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.3 views

The vulnerability in Microsoft.NET Framework software allows a malicious attacker to compromise the confidentiality of protected information.

Vulnerability exists in the Microsoft .NET Framework, and it allows attackers to circumvent the ASLR protection mechanism, which safeguards users against a wide range of vulnerabilities. Simply bypassing the protection mechanism itself does not allow the execution of arbitrary code. However,...

4.3CVSS5.8AI score0.14261EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2016/07/04 12:0 a.m.4 views

The vulnerability of the Windows operating system, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of the dynamically linked GDI32.dll library of the Windows operating system’s Graphics component is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism...

4.3CVSS5.9AI score0.24988EPSS
Exploits1References3
CNVD
CNVD
added 2015/02/21 12:0 a.m.2 views

Linux Kernel ASLR Implementation Insufficient Moisture Vulnerability

Linux Kernel is an open source operating system. The Linux Kernel ALSR implementation suffers from an insufficient moisture problem that allows attackers to exploit vulnerabilities to bypass security restrictions through brute force techniques for further attacks...

7AI score
Exploits0References1
Rows per page
Query Builder