Lucene search
+L

2615 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/02/09 12:0 a.m.31 views

X.Org Server XIQueryPointer Improper Validation of Array Index Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ProcXIQueryPointer...

7.8CVSS7.5AI score0.02106EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/02/09 12:0 a.m.27 views

X.Org Server DeviceFocusEvent Improper Validation of Array Index Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

7.8CVSS7.5AI score0.02106EPSS
SaveExploits0References1
Veracode
Veracode
added 2024/02/08 3:55 a.m.19 views

Improper Validation Of Array Index

vyper is vulnerable to Improper Validation Of Array Index. The vulnerability is due to the typechecker allowing usage of an int as an index for an array validation, allowing an attacker to manipulate the typechcker in such a way that the index will be forced to be negative which results in Denial...

9.8CVSS6.7AI score0.01539EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2024/02/07 5:27 p.m.16 views

GHSA-52XQ-J7V9-V4V2 Vyper negative array index bounds checks

Summary Arrays can be keyed by a signed integer, while they are defined for unsigned integers only. The typechecker doesn't throw when spotting the usage of an int as an index for an array. Typically, negative integers are filtered out at runtime by the bounds checker, but small enough i.e. large...

9.8CVSS9.4AI score0.01539EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2024/02/07 5:27 p.m.41 views

Vyper negative array index bounds checks

Summary Arrays can be keyed by a signed integer, while they are defined for unsigned integers only. The typechecker doesn't throw when spotting the usage of an int as an index for an array. Typically, negative integers are filtered out at runtime by the bounds checker, but small enough i.e. large...

9.8CVSS9.4AI score0.01539EPSS
SaveExploits1References6Affected Software1
CVE
CVE
added 2024/02/07 5:10 p.m.62 views

CVE-2024-24563

CVE-2024-24563 affects Vyper, where arrays can be indexed by signed integers even though defined for unsigned indices. The typechecker permits signed integers as array indexes, and with very large arrays, bounds checks can pass for negative values, leading to potential unpredictable behavior, acc...

9.8CVSS9.1AI score0.01539EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2024/02/06 5:47 a.m.27 views

CVE-2023-43535 Improper Validation of Array Index in Display

Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger...

8.4CVSS8.8AI score0.00111EPSS
SaveExploits0References1
Veracode
Veracode
added 2024/02/03 3:1 a.m.19 views

Improper Validation Of Array Index

curl is vulnerable to Improper Validation of Array Index. The vulnerability is due to improper handling of array indices within the toolcbwrt component. This potentially leads to a Denial of Service DoS attack...

7AI score
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2024/01/30 12:0 a.m.28 views

CVE-2023-52071

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.8AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:0 a.m.28 views

EulerOS Virtualization 3.0.2.6 : kernel (EulerOS-SA-2023-1066)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation ...

7.8CVSS6.8AI score0.06846EPSS
SaveExploits5References11
Tenable Nessus
Tenable Nessus
added 2024/01/11 12:0 a.m.29 views

SUSE SLED12: atk-devel / atk-doc / atk-lang / dragonbox-devel / fixmath-devel / etc (SUSE-SU-2024:0075-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0075-1 advisory. libreoffice: - Version update from 7.3.6.2 to 7.5.4.1 jscPED-3561, jscPED-3550, jscPED-1785: For the highlight...

7.8CVSS6.8AI score0.02244EPSS
SaveExploits2References11
NVD
NVD
added 2024/01/08 3:15 p.m.16 views

CVE-2023-35995

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability...

7.8CVSS7.9AI score0.00414EPSS
SaveExploits1References3
NVD
NVD
added 2024/01/08 3:15 p.m.19 views

CVE-2023-35997

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability...

7.8CVSS7.9AI score0.00414EPSS
SaveExploits1References3
NVD
NVD
added 2024/01/08 3:15 p.m.19 views

CVE-2023-35994

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability...

7.8CVSS7.9AI score0.00418EPSS
SaveExploits1References3
NVD
NVD
added 2024/01/08 3:15 p.m.15 views

CVE-2023-35996

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability...

7.8CVSS7.9AI score0.00414EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/08 3:15 p.m.10 views

CVE-2023-35994

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability...

7.8CVSS7.9AI score
SaveExploits0References3
OSV
OSV
added 2024/01/08 3:15 p.m.2 views

DEBIAN-CVE-2023-35994

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability...

7.8CVSS7.9AI score0.00418EPSS
SaveExploits1References1
OSV
OSV
added 2024/01/08 3:15 p.m.1 views

DEBIAN-CVE-2023-34087

An improper array index validation vulnerability exists in the EVCD var len parsing functionality of GTKWave 3.3.115. A specially crafted .evcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

7.8CVSS7.8AI score0.00397EPSS
SaveExploits1References1
Prion
Prion
added 2024/01/08 3:15 p.m.25 views

Input validation

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability...

4.4CVSS7.7AI score0.00414EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2024/01/08 3:15 p.m.16 views

CVE-2023-35994

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability...

7.8CVSS7.2AI score0.00418EPSS
SaveExploits1References2
Rows per page
Query Builder