Lucene search
+L

1744 matches found

BDU FSTEC
BDU FSTEC
added 2022/06/29 12:00 a.m.16 views

The vulnerability of the JTAG interface implementation in microprogramming software for Intel processors allows a intruder to gain unauthorized access to protected information.

The vulnerability of the JTAG interface implementation in Intel microprogramming systems is related to deficiencies in the system’s controlled boundaries. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

4.9CVSS5.7AI score0.00202EPSS
SaveExploits0References6Affected Software1
Snyk
Snyk
added 2022/06/23 9:24 a.m.6 views

Malicious Package

Overview @uc-maps/boundaries-core.react is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

9.8CVSS7AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:00 a.m.14 views

The vulnerability of the Adobe InCopy text creation and editing software lies in the writing beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.02088EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/22 12:00 a.m.9 views

The vulnerability of the Adobe Flash Player relates to the execution of operations beyond the buffer boundaries, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Flash Player is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.2AI score0.9203EPSS
SaveExploits11References3Affected Software1
CNNVD
CNNVD
added 2022/06/14 12:00 a.m.8 views

Adobe Illustrator 缓冲区错误漏洞

Adobe Illustrator is a suite of vector-based image creation software from the American company Audobee Adobe. Adobe Illustrator suffers from a buffer error vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries,...

7.8CVSS7.6AI score0.00402EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/06/14 12:00 a.m.12 views

Adobe Illustrator 缓冲区错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. Adobe Illustrator suffers from an out-of-bounds write vulnerability that originates when a networked system or product performs an operation in memory without properly validating the data...

7.8CVSS6.2AI score0.00402EPSS
SaveExploits0References4
ThreatPost
ThreatPost
added 2022/06/08 1:36 p.m.41 views

Taming the Digital Asset Tsunami

Internet Protocol IP addresses and the devices, web services and cloud assets behind them are the lifeblood of modern businesses. But too often companies amass thousands of digital assets, creating an unmanageable mess for IT and security teams. Left unchecked, a single forgotten, abandoned or...

6.5AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2022/06/06 3:11 p.m.19 views

netty: control chars in header names may lead to HTTP request smuggling

A flaw was found in Netty, specifically in the netty-codec-http package. This flaw allows unauthorized control characters at the beginning and end of a request, does not follow the specification, and can cause HTTP request smuggling...

6.5CVSS6.8AI score0.02682EPSS
SaveExploits0References5
Redos
Redos
added 2022/06/01 12:00 a.m.46 views

ROS-20220131-01

Vulnerability in the ptp4l service of the LinuxPTP precision time protocol PTP implementation software is caused by an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker, acting remotely, cause the application to crash as a result of creatin...

8.8CVSS8.2AI score0.02955EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:00 a.m.12 views

The vulnerability of the dnsproxy package from the ConnectMan controller allows a hacker to access confidential information or cause service failures.

The vulnerability of the dnsproxy package of the Connman connection manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

9.4CVSS7.5AI score0.02372EPSS
SaveExploits1References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/05/20 12:00 a.m.11 views

The vulnerability of the cmdline_erase_chars() function in the Vim text editor allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the cmdlineerasechars function in the Vim text editor is related to the issue of writing operations beyond the buffer’s boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure using a specially created...

6.1CVSS7.3AI score0.02544EPSS
SaveExploits1References18Affected Software8
Github Security Blog
Github Security Blog
added 2022/05/17 4:04 a.m.48 views

Improper Limitation of a Pathname to a Restricted Directory in Apache Solr

Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. dot dot or full pathname in the tr parameter to solr/select/, when the response writer wt parameter is set to XSLT. NOTE: this can be leveraged using a separa...

4.3CVSS4.5AI score0.56255EPSS
SaveExploits1References10Affected Software1
Redos
Redos
added 2022/05/16 12:00 a.m.34 views

ROS-20220516-03

A vulnerability in the zipxlzmaaloneinit function of the libarchive archiving library is related to reading beyond the buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely, disclose protected information or cause a denial of service...

6.5CVSS6.7AI score0.01877EPSS
SaveExploits1
CNVD
CNVD
added 2022/05/12 12:00 a.m.140 views

Adobe InCopy out-of-bounds write vulnerability (CNVD-2022-76627)

Adobe InCopy is a text editing software for authoring from Adobe U.S. An out-of-bounds write vulnerability exists in Adobe InCopy, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory and can be exploited by an attacke...

7.8CVSS4AI score0.00402EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/12 12:00 a.m.91 views

Adobe InDesign Code Execution Vulnerability

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A code execution vulnerability exists in Adobe InDesign. The vulnerability arises from a networked system or product that does not properly validate data boundaries when performing operations in...

7.8CVSS7.8AI score0.00402EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/12 12:00 a.m.52 views

Adobe InCopy out-of-bounds write vulnerability (CNVD-2022-45913)

A security vulnerability exists in Adobe InCopy, a text editing software for authoring from Adobe. The vulnerability stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, and can be exploited by attackers to cause arbitrary...

7.8CVSS6AI score0.00402EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/12 12:00 a.m.83 views

Adobe InDesign Code Execution Vulnerability (CNVD-2022-76625)

A security vulnerability exists in Adobe InDesign, a set of typesetting and editing applications from Adobe. The vulnerability stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, and can be exploited by an attacker to...

7.8CVSS3.6AI score0.00402EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/27 12:00 a.m.24 views

IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2022-34986)

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. IBM QRadar SIEM ha...

4.3CVSS6.3AI score0.00704EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/04/21 12:00 a.m.22 views

The vulnerability of the OpenSSL library, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the OpenSSL library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.1CVSS7.3AI score0.41683EPSS
SaveExploits1References6Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/21 12:00 a.m.22 views

The vulnerability of the `locale_accept_from_http` function (ext/intl/locale/locale_methods.c) in the PHP language interpreter allows a attacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the localeacceptfromhttp function located in the ext/intl/locale/localemethods.c file of the PHP language interpreter involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service failures or...

10CVSS7.7AI score0.05956EPSS
SaveExploits1References13Affected Software3
Rows per page
Query Builder