Lucene search
+L

1223 matches found

osv_cve
osv_cve
•added 2022/10/12 8:15 p.m.•22 views

CVE-2022-32491

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM...

7.8CVSS5.9AI score0.00167EPSS
SaveExploits0References1
NVD
NVD
•added 2022/10/12 8:15 p.m.•42 views

CVE-2022-32491

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM...

7.8CVSS0.00167EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/12 8:15 p.m.•36 views

Buffer overflow

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM...

4.3CVSS7.5AI score0.00167EPSS
SaveExploits0References1Affected Software290
Vulnrichment
Vulnrichment
•added 2022/10/12 7:25 p.m.•16 views

CVE-2022-32491

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM...

4.1CVSS7.5AI score0.00167EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/10/12 7:25 p.m.•50 views

CVE-2022-32491

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM...

4.1CVSS7.7AI score0.00167EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/12 12:00 a.m.•11 views

CVE-2022-32491: Improper Restriction of Operations within the Bounds of a Memory Buffer

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM...

7.8CVSS7.5AI score0.00167EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/09/20 5:35 p.m.•60 views

CVE-2022-40246 Arbitrary write vulnerability in SbPei module leads to arbitrary code execution during PEI phase.

A potential attacker can write one byte by arbitrary address at the time of the PEI phase only during S3 resume boot mode and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines V...

7AI score0.0049EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/09/20 5:35 p.m.•20 views

CVE-2022-40246 Arbitrary write vulnerability in SbPei module leads to arbitrary code execution during PEI phase.

A potential attacker can write one byte by arbitrary address at the time of the PEI phase only during S3 resume boot mode and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines V...

6.9AI score0.0049EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2022/09/09 6:15 p.m.•8 views

DEBIAN-CVE-2021-40647

In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it...

5.5CVSS5.8AI score0.00333EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/09/09 6:15 p.m.•16 views

CVE-2021-40647

In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it...

5.5CVSS6.2AI score0.00333EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu
•added 2022/09/09 6:15 p.m.•14 views

UBUNTU-CVE-2021-40647

In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it...

5.5CVSS5.9AI score0.00333EPSS
SaveExploits1References3
Prion
Prion
•added 2022/09/09 6:15 p.m.•17 views

Heap overflow

In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it...

1.9CVSS5.5AI score0.00333EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
•added 2022/09/09 6:15 p.m.•42 views

CVE-2021-40647

In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it...

5.5CVSS6.2AI score0.00333EPSS
SaveExploits1References2
Mend
Mend
•added 2022/09/09 5:57 p.m.•6 views

CVE-2021-40647

In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it...

6.8CVSS0.00333EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/09/09 5:57 p.m.•46 views

CVE-2021-40647

In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it...

5.7AI score0.00333EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2022/09/09 5:57 p.m.•75 views

CVE-2021-40647

In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it...

5.5CVSS5.4AI score0.00333EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/09 12:00 a.m.•6 views

CVE-2021-40647: Out-of-bounds Write

In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it...

5.5CVSS6.2AI score0.00333EPSS
SaveExploits1References2
Prion
Prion
•added 2022/08/31 4:15 p.m.•47 views

Input validation

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file name, this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation...

6.5CVSS8.4AI score0.05549EPSS
SaveExploits0References9Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/09 12:00 a.m.•9 views

CVE-2021-40040: Undefined Security Weakness

Vulnerability of writing data to an arbitrary address in the HWKEYMASTER module. Successful exploitation of this vulnerability may affect confidentiality...

7.5CVSS7.3AI score0.00553EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/08/06 12:00 a.m.•21 views

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in Google Chrome Media, which can be exploited by an attacker to perform arbitrary read/write operations via specially crafted HTML pages...

8.8CVSS5.8AI score0.0068EPSS
SaveExploits1References5
Rows per page
Query Builder