Lucene search
+L

14982 matches found

Cvelist
Cvelist
•added 2022/12/30 12:00 a.m.•47 views

CVE-2022-42254

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where an out-of-bounds array access may lead to denial of service, data tampering, or information disclosure...

5.3CVSS7.6AI score0.00259EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/30 12:00 a.m.•5 views

CVE-2022-34673: Integer Overflow or Wraparound

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where an out-of-bounds array access may lead to denial of service, information disclosure, or data tampering...

7.3CVSS5.8AI score0.0025EPSS
SaveExploits0References3
CVE
CVE
•added 2022/12/30 12:00 a.m.•120 views

CVE-2022-42254

NVIDIA GPU Display Driver for Linux contains a kernel module (nvidia.ko) vulnerability: an out-of-bounds array access that may lead to denial of service, data tampering, or information disclosure (CVE-2022-42254). The provided documents identify the affected component and impact, but do not speci...

7.8CVSS7.3AI score0.00259EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
•added 2022/12/30 12:00 a.m.•31 views

Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2022-2920)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.9AI score0.23575EPSS
SaveExploits2References2
Debian CVE
Debian CVE
•added 2022/12/30 12:00 a.m.•77 views

CVE-2022-34673

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where an out-of-bounds array access may lead to denial of service, information disclosure, or data tampering...

7.3CVSS7AI score0.0025EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2022/12/28 12:00 a.m.•51 views

X.Org Server ProcXIPassiveUngrabDevice Improper Validation of Array Index Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

7.8CVSS8.5AI score0.02717EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/12/22 8:15 p.m.•13 views

CVE-2022-38475

An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox 104...

6.5CVSS7.3AI score0.00451EPSS
SaveExploits0References2
NVD
NVD
•added 2022/12/22 8:15 p.m.•25 views

CVE-2022-38475

An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox 104...

6.5CVSS0.00451EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/12/22 8:15 p.m.•18 views

CVE-2022-31745

If array shift operations are not used, the Garbage Collector may have become confused about valid objects. This vulnerability affects Firefox 101...

4.3CVSS7.4AI score0.00369EPSS
SaveExploits0References2
NVD
NVD
•added 2022/12/22 8:15 p.m.•30 views

CVE-2022-1802

If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context. This vulnerability affects Firefox ESR 91.9.1, Firefox 100.0.2, Firefox for Android 100.3.0,...

8.8CVSS0.28493EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2022/12/22 8:15 p.m.•11 views

DEBIAN-CVE-2022-1802

If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context. This vulnerability affects Firefox ESR 91.9.1, Firefox 100.0.2, Firefox for Android 100.3.0,...

8.8CVSS8.5AI score0.28493EPSS
SaveExploits0References1
Prion
Prion
•added 2022/12/22 8:15 p.m.•33 views

Design/Logic Flaw

An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox 104...

4.3CVSS6.5AI score0.00451EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/12/22 8:15 p.m.•30 views

Code injection

If array shift operations are not used, the Garbage Collector may have become confused about valid objects. This vulnerability affects Firefox 101...

4.3CVSS4.6AI score0.00369EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/12/22 8:15 p.m.•46 views

Code injection

If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context. This vulnerability affects Firefox ESR 91.9.1, Firefox 100.0.2, Firefox for Android 100.3.0,...

6.8CVSS7.8AI score0.28493EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/12/22 12:00 a.m.•25 views

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the lkdtmARRAYBOUNDS function in the drivers/misc/lkdtm/bugs.c module of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause system failures or gain increased privileges...

5.5CVSS6.6AI score0.00263EPSS
SaveExploits0References7Affected Software3
Debian CVE
Debian CVE
•added 2022/12/22 12:00 a.m.•74 views

CVE-2022-31745

If array shift operations are not used, the Garbage Collector may have become confused about valid objects. This vulnerability affects Firefox 101...

4.3CVSS7.2AI score0.00369EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/12/22 12:00 a.m.•117 views

CVE-2022-38475

An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox 104...

6.5CVSS8.1AI score0.00451EPSS
SaveExploits0
CVE
CVE
•added 2022/12/22 12:00 a.m.•674 views

CVE-2022-1802

This vulnerability is caused by prototype pollution within the Top-Level Await implementation in JavaScript. An attacker who manages to corrupt the methods of an Array object could achieve the execution of attacker-controlled JavaScript code in a privileged context . Affected products include Fir...

8.8CVSS8AI score0.28493EPSS
SaveIn wildExploits0References2Affected Software3
CVE
CVE
•added 2022/12/22 12:00 a.m.•202 views

CVE-2022-38475

CVE-2022-38475 affects Firefox up to version 104. An attacker could write to the first element of a zero-length JavaScript array; the value is not written to an invalid memory address, but the issue is listed with memory safety implications (I: High). Exploitation context is not described in thes...

6.5CVSS6.5AI score0.00451EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
•added 2022/12/22 12:00 a.m.•99 views

CVE-2022-31745

If array shift operations are not used, the Garbage Collector may have become confused about valid objects. This vulnerability affects Firefox 101...

4.3CVSS6.1AI score0.00369EPSS
SaveExploits0
Rows per page
Query Builder