Lucene search
K

486 matches found

RedHat Linux
RedHat Linux
added 2023/07/19 5:23 p.m.4 views

OpenJDK: array indexing integer overflow issue (8304468)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6,...

3.7CVSS7.2AI score0.00141EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/07/19 5:21 p.m.3 views

OpenJDK: array indexing integer overflow issue (8304468)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6,...

3.7CVSS7.2AI score0.00141EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/07/19 5:21 p.m.3 views

OpenJDK: modulo operator array indexing issue (8304460)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u371-perf, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 21.3.6, 22.3.2; Oracle GraalVM for...

3.7CVSS7.4AI score0.0013EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/07/19 5:21 p.m.32 views

Moderate: Red Hat Security Advisory: java-17-openjdk security update

An update for java-17-openjdk is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this...

7.5CVSS6.4AI score0.00143EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2023/07/19 5:19 p.m.3 views

OpenJDK: modulo operator array indexing issue (8304460)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u371-perf, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 21.3.6, 22.3.2; Oracle GraalVM for...

3.7CVSS7.4AI score0.0013EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/07/19 5:19 p.m.384 views

Moderate: Red Hat Security Advisory: java-17-openjdk security update

An update for java-17-openjdk is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.5CVSS6.4AI score0.00143EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2023/05/31 12:0 a.m.1 views

The vulnerability of the Spreadsheet module of the LibreOffice office software package allows a hacker to execute arbitrary code.

The vulnerability of the Spreadsheet module in the LibreOffice office software package is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

4.8CVSS6.9AI score0.43551EPSS
Exploits2References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/05/10 12:0 a.m.1 views

The vulnerability of the udmabuf_vm_fault() function in the drivers/dma-buf/udmabuf.c module of Linux kernel allows a attacker to escalate their privileges and execute arbitrary code.

The vulnerability of the udmabufvmfault function in the drivers/dma-buf/udmabuf.c module of Linux operating systems is related to unvalidated array indexing due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute...

8.2CVSS7.1AI score0.01847EPSS
Exploits1References15Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/03/16 12:0 a.m.1 views

The vulnerability of the microprogrammed software of the multi-environmental electrical voltage measuring instrument PowerLogic HDPM6000, related to unverified array indexing, allows a intruder to execute arbitrary code.

The vulnerability of the microprogrammed software of the PowerLogic HDPM6000 electrical voltage measuring instrument is related to unverified array indexing. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a specially crafted Ethernet request...

10CVSS8.2AI score0.01283EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/02/28 8:30 p.m.12 views

GHSA-MRRW-GRHQ-86GF Ascii (crate) allows out-of-bounds array indexing in safe code

Affected version of this crate had implementation of From for &mut u8 and &mut str. This can result in out-of-bounds array indexing in safe code. The flaw was corrected in commit 8a6c779 by removing those impls...

7.1AI score
Exploits0References4
RustSec
RustSec
added 2023/02/25 12:0 p.m.17 views

Ascii allows out-of-bounds array indexing in safe code

Affected version of this crate had implementation of From for &mut u8 and &mut str. This can result in out-of-bounds array indexing in safe code. The flaw was corrected in commit 8a6c779 by removing those impls...

4.5AI score
Exploits0Affected Software1
OSV
OSV
added 2023/02/25 12:0 p.m.9 views

RUSTSEC-2023-0015 Ascii allows out-of-bounds array indexing in safe code

Affected version of this crate had implementation of From for &mut u8 and &mut str. This can result in out-of-bounds array indexing in safe code. The flaw was corrected in commit 8a6c779 by removing those impls...

7.1AI score
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:32 a.m.2 views

SUSE CVE-2018-4113

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves a JavaScriptCore...

5.3CVSS5.9AI score0.01156EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:32 a.m.2 views

SUSE CVE-2018-4210

In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in javascript core. This issue was addressed with improved checks...

8.8CVSS6.2AI score0.0066EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2023/02/06 12:0 a.m.4 views

PT-2023-7935 · Unisoc · Unisoc Chipsets

Name of the Vulnerable Software and Affected Versions: Unisoc chipsets engineermode services affected versions not specified Description: The issue is related to a missing permission check in engineermode services, which could lead to local denial of service. Additionally, there is an array...

5.5CVSS5.2AI score0.00013EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/01/20 12:0 a.m.2 views

Vulnerability of the PM_io parser function: <PMDEC>::read_hedge() -> set_vertex(). This component is located in the Nef_2/PM_io parser.h file, which belongs to the CGAL algorithm library. It allows an attacker to access confidential data, compromise its integrity, and also cause service failures.

The vulnerability of the PMioparser function in the Nef2/PMio parser component’s Nef2/PMio parser.h library, which belongs to the Computational Geometry Algorithms library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential...

10CVSS7.7AI score0.00678EPSS
Exploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/18 12:0 a.m.1 views

Vulnerability of SNC_io_parser<EW>::read_facet(): Allows attackers to access confidential data, compromise its integrity, and cause service failures. This vulnerability exists in the SNC_io_parser.h library from the Computational Geometry Algorithms library, which is part of the Nef_S2/SNC_io_parser project.

Vulnerability of SNCio parser ::readfacet:fh-boundaryentryobjects in the component SLoopof from the NefS2/SNCio parser.h library, a computational geometry algorithm library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential...

10CVSS7.6AI score0.00529EPSS
Exploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/18 12:0 a.m.1 views

Vulnerability of the SNC_io parser function <EW>: read_facet(), incident_volume(). Component: Nef_S2/SNC_io parser.h library, algorithm library for computational geometry CGAL. This allows an intruder to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCio parser function ::readfacet and fh-incidentvolume in the NefS2/SNCio parser component’s NefS2/SNCio parser.h file is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...

10CVSS7.7AI score0.00567EPSS
Exploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/10/28 12:0 a.m.3 views

The vulnerability of the SQLite database management system’s API library allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the SQLite database management system’s API library is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code during the processing of a long sequence of formatted string data, processed b...

10CVSS7.6AI score0.54278EPSS
Exploits2References14Affected Software12
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.3 views

Altair HyperView Player 输入验证错误漏洞

Altair HyperView Player is a standalone 3D viewer from Altair Japan. It is used to share CAE models and simulation results. An input validation error vulnerability exists in Altair HyperView Player that originates from improper validation of an array indexing vulnerability that results in memory...

7.8CVSS7.3AI score0.00159EPSS
Exploits0References4
Rows per page
Query Builder