Lucene search
+L

1595 matches found

CNNVD
CNNVD
added 2023/10/06 12:0 a.m.9 views

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that stems from a lack of permission checking in visitUris of Notification.java, which could be exploited by an attacker to bypass user profile boundaries and cause...

6.7CVSS6.5AI score0.00129EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/10/06 12:0 a.m.6 views

PT-2023-18030 · Google +6 · Android +1

Name of the Vulnerable Software and Affected Versions: Notification.java affected versions not specified Description: The issue is related to a missing permission check in the visitUris method of Notification.java, which could allow a bypass of user profile boundaries. This might lead to local...

6.7CVSS6.4AI score0.00129EPSS
SaveExploits0References12
Prion
Prion
added 2023/10/05 2:15 p.m.23 views

Design/Logic Flaw

A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow an attacker to violate the boundaries, as permissions will not be applied...

5CVSS7.3AI score0.00401EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
added 2023/10/05 1:28 p.m.11 views

CVE-2022-3248 Openshift api admission checks does not enforce "custom-host" permissions

A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow an attacker to violate the boundaries, as permissions will not be applied...

4.4CVSS6.6AI score0.00401EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/04 12:0 a.m.7 views

The vulnerability of the u32_match_it function in the Netfilter subsystem of the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the u32matchit function in the Netfilter subsystem of the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.2CVSS6.7AI score0.00397EPSS
SaveExploits0References19Affected Software6
OSV
OSV
added 2023/10/01 12:0 a.m.36 views

ASB-A-276729064

In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS6.7AI score0.00129EPSS
SaveExploits0References4
CNVD
CNVD
added 2023/09/27 12:0 a.m.42 views

Adobe After Effects Out-of-Bounds Read Vulnerability (CNVD-2023-76938)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe, which is mainly used for 2D and 3D compositing, animation and visual effects production. Adobe After Effects suffers from an out-of-bounds read vulnerability that stems...

7.8CVSS7AI score0.00341EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.9 views

The vulnerability of the Docker Desktop platform for developing and delivering container applications relates to breaches of confidentiality boundaries, allowing attackers to increase their privileges.

The vulnerability of the Docker Desktop platform for developing and delivering container applications is related to the breach of trust boundaries. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00242EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/25 12:0 a.m.9 views

The vulnerability of the WinRAR file archiver, related to reading beyond the buffer limit in memory, allows attackers to disclose protected information or cause system failures.

The vulnerability of the WinRAR file compressor is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information or cause system failures...

7.1CVSS5.9AI score0.23043EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/22 12:0 a.m.16 views

The vulnerability of Omron CX-Programmer software for programming logic controllers lies in the ability to write data beyond the buffer memory limits. This allows attackers to access confidential information or execute arbitrary code.

The vulnerability of Omron CX-Programmer software for programming logic controllers is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential information or execute arbitrary code...

7.8CVSS7.7AI score0.00223EPSS
SaveExploits0References3Affected Software1
Redos
Redos
added 2023/09/20 12:0 a.m.45 views

ROS-20230919-02

Vulnerability of FilePickerShownCallback function in Mozilla Firefox, Firefox ESR and Thunderbird e-mail client Thunderbird is related to memory usage after it is freed. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality, integrity, and availability of...

8.8CVSS7.5AI score0.00791EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/09/19 12:0 a.m.6 views

The vulnerability of the `parse_module` function in the GNU Binutils development environment, which involves reading beyond the buffer boundaries in memory, allows an attacker to trigger a service failure or cause other adverse effects.

The vulnerability of the parsemodule function in the GNU Binutils development environment is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure or exert other adverse effects...

7.8CVSS6AI score0.00434EPSS
SaveExploits1References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/09/19 12:0 a.m.6 views

The vulnerability of the `avr_elf32_load_records_from_section()` function in the GNU Binutils development environment, related to writing beyond the buffer boundaries in memory, allows a malicious actor to trigger a system failure.

The vulnerability of the avrelf32loadrecordsfromsection function in the GNU Binutils development environment is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

7.1CVSS6.4AI score0.00974EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/19 12:0 a.m.8 views

The vulnerability of the process_symbol_table function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the processsymboltable function in the GNU Binutils development environment is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS7.1AI score0.00884EPSS
SaveExploits1References4Affected Software2
Redos
Redos
added 2023/09/18 12:0 a.m.23 views

ROS-20230914-08

GPAC multimedia platform vulnerability is related to integer sign overflow in the filters/muxisom.c:5716:20. Exploitation of the vulnerability could allow an attacker to cause the application to crash. The GPAC multimedia platform vulnerability is related to null pointer dereferencing in function...

5.9CVSS7.3AI score0.00306EPSS
SaveExploits5
BDU FSTEC
BDU FSTEC
added 2023/09/15 12:0 a.m.11 views

The vulnerability of the Vim text editor, related to writing beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.1AI score0.00595EPSS
SaveExploits1References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/09/14 12:0 a.m.8 views

The vulnerability of the Adobe Media Encoder application, related to the execution of operations beyond buffer boundaries in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe Media Encoder application relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created malicious file...

5.5CVSS6.8AI score0.00319EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:0 a.m.9 views

The vulnerability of the tiffcrop utility (tools/tiffcp.c:948) in the libtiff library, which allows a hacker to cause a service failure

The vulnerability of the tiffcrop utility tools/tiffcp.c:948 in the libtiff library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00425EPSS
SaveExploits1References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:0 a.m.5 views

The vulnerability of the tiffcrop utility (tools/tiffcrop.c:3609) in the libtiff library, which allows a hacker to cause a service failure.

The vulnerability of the tiffcrop utility tools/tiffcrop.c:3609 in the libtiff library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00425EPSS
SaveExploits1References18Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:0 a.m.5 views

The vulnerability of the tiffcrop utility in the libtiff library, which allows a hacker to cause a service failure.

The vulnerability of the tiffcrop utility in the libtiff library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.9AI score0.00307EPSS
SaveExploits0References11Affected Software5
Rows per page
Query Builder