Lucene search
+L

3 matches found

RubySec
RubySec
added 2024/04/23 12:0 a.m.49 views

Arbitrary memory address read vulnerability with Regex search

If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. We recommend to update the Ruby to version 3.3.1 or later. In order to ensure compatibility with older Ruby...

6.6CVSS7.3AI score0.00629EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2020/12/15 3:15 p.m.24 views

CVE-2020-8935

An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecallrestore function call to reallocate untrusted code and overwrite sections of the Enclave memory address. We recommend updating your library...

7.8CVSS6.1AI score0.00139EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/10/17 3:0 p.m.34 views

CVE-2017-17176

The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions earlier before MHA-TL00BC00B156, versions earlier before LON-AL00BC00B156,...

6.7AI score0.00309EPSS
SaveExploits0References1
Rows per page
Query Builder