Lucene search
+L

621 matches found

Prion
Prion
added 2019/06/25 12:15 a.m.30 views

Design/Logic Flaw

In Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi/FoFiType1C.cc when the index number is larger than the charset array bounds. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It allows an attacker to use a crafted...

6.8CVSS8AI score0.0123EPSS
SaveExploits1References4Affected Software2
FreeBSD
FreeBSD
added 2019/06/22 12:0 a.m.26 views

bro -- Null pointer dereference and Signed integer overflow

Jon Siwek of Corelight reports: This is a security patch release to address potential Denial of Service vulnerabilities: Null pointer dereference in the RPC analysis code. RPC analyzers e.g. MOUNT or NFS are not enabled in the default configuration. Signed integer overflow in BinPAC-generated...

1.8AI score
SaveExploits0References1
Cvelist
Cvelist
added 2019/03/05 9:0 p.m.26 views

CVE-2019-6522

Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to retrieve sensitive data or cause device reboot...

9.2AI score0.0254EPSS
SaveExploits0References2
CVE
CVE
added 2019/03/05 9:0 p.m.62 views

CVE-2019-6522

CVE-2019-6522 affects Moxa IKS and EDS industrial switches. The vulnerability stems from a failure to properly check array bounds, enabling an out-of-bounds read of device memory on arbitrary addresses. This can allow an attacker to retrieve sensitive data or cause the device to reboot. Public de...

9.1CVSS9.1AI score0.0254EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2019/03/05 8:29 p.m.8 views

CVE-2019-6522

Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to retrieve sensitive data or cause device reboot...

9.1CVSS7.4AI score0.0254EPSS
SaveExploits0References2
NVD
NVD
added 2019/03/05 8:29 p.m.18 views

CVE-2019-6522

Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to retrieve sensitive data or cause device reboot...

9.1CVSS9.3AI score0.0254EPSS
SaveExploits0References2
OSV
OSV
added 2019/02/12 10:29 p.m.8 views

CVE-2018-19020

When CX-Supervisor Versions 3.42 and prior processes project files and tampers with the value of an offset, an attacker can force the application to read a value outside of an array...

5CVSS5.8AI score0.00828EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2018/08/30 12:0 a.m.14 views

FreeBSD : bro -- array bounds and potential DOS issues (d0be41fe-2a20-4633-b057-4e8b25c41780)

Corelight reports : Bro 2.5.5 primarily addresses security issues : - Fix array bounds checking in BinPAC: for arrays that are fields within a record, the bounds check was based on a pointer to the start of the record rather than the start of the array field, potentially resulting in a buffer...

5.9AI score
SaveExploits0References2
FreeBSD
FreeBSD
added 2018/08/28 12:0 a.m.290 views

bro -- array bounds and potential DOS issues

Corelight reports: Bro 2.5.5 primarily addresses security issues: Fix array bounds checking in BinPAC: for arrays that are fields within a record, the bounds check was based on a pointer to the start of the record rather than the start of the array field, potentially resulting in a buffer...

1.1AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2018/05/30 9:7 a.m.31 views

CVE-2018-6142

Array bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

6.5CVSS4.4AI score0.00833EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/04/25 12:0 a.m.8 views

Google Android Array Index Out-of-Bounds Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm MDM9615 and other central processing unit CPU products from Qualcomm. A security vulnerability exists in the Qualcomm closed-source component in versions of Android...

7.5CVSS6.5AI score0.00703EPSS
SaveExploits0References1
OSV
OSV
added 2018/04/23 9:43 p.m.11 views

OPENSUSE-SU-2018:1056-1 Security update for hdf5

This update for hdf5 fixes the following issues: - fix security issues arbitary code execution: CVE-2016-4330: H5TARRAY Code Execution boo1011201 CVE-2016-4331: H5ZNBIT Code Execution boo1011204 CVE-2016-4332: Shareable Message Type Code Execution boo1011205 CVE-2016-4333: Array index bounds issu...

8.6CVSS8.9AI score0.00812EPSS
SaveExploits8References9
Positive Technologies
Positive Technologies
added 2018/04/19 12:0 a.m.8 views

PT-2018-2606 · Moxa · Moxa Eds +1

Name of the Vulnerable Software and Affected Versions: Moxa IKS and EDS affected versions not specified Description: The issue is related to a failure in properly checking array bounds, which may allow an attacker to read device memory at arbitrary addresses. This could potentially lead to the...

9.1CVSS9.3AI score0.0254EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2018/03/30 9:29 p.m.4 views

CVE-2017-17771

In msmisppreparev4l2buf in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-02-12, an array out of bounds can occur...

7.8CVSS7.7AI score0.00158EPSS
SaveExploits0References4
Prion
Prion
added 2017/08/18 6:29 p.m.18 views

Design/Logic Flaw

In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists where an array out of bounds access can occur during a CA call...

10CVSS7.1AI score0.00836EPSS
SaveExploits0References2
Prion
Prion
added 2017/02/21 10:59 p.m.19 views

Out-of-bounds

An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause the server to fetch a function table outside the bounds of an array resulting in remote code execution. An attacker can...

7.5CVSS7.8AI score0.07249EPSS
SaveExploits2References2Affected Software1
OSV
OSV
added 2016/11/18 8:59 p.m.9 views

UBUNTU-CVE-2016-4333

The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's terminator. Due to this, an aggressor can cause the loop's index to point outside the bounds of the...

8.6CVSS7.2AI score0.00613EPSS
SaveExploits2References3
UbuntuCve
UbuntuCve
added 2016/11/18 8:59 p.m.35 views

CVE-2016-4333

The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's terminator. Due to this, an aggressor can cause the loop's index to point outside the bounds of the...

8.6CVSS7.2AI score0.00613EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2016/11/18 8:0 p.m.37 views

CVE-2016-4333

The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's terminator. Due to this, an aggressor can cause the loop's index to point outside the bounds of the...

8.4AI score0.00613EPSS
SaveExploits2References4
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.15 views

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

The Google Chrome browser contains a vulnerability related to incorrect numerical transformations when processing typed arrays. Exploiting this vulnerability allows malicious actors to cause service interruptions access to the array beyond its boundaries or otherwise affect the system by using...

7.5CVSS7.7AI score0.01324EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder