Lucene search
+L

11813 matches found

CNNVD
CNNVD
added 2024/11/04 12:00 a.m.14 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a variety of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a lack of boundary checking, where out-of-bounds writes may occur. An attacker can escalate privileges by exploiting the vulnerability...

6.7CVSS7AI score0.00081EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/04 12:00 a.m.10 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a variety of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a lack of boundary checking, where out-of-bounds writes may occur. An attacker can escalate privileges by exploiting the vulnerability...

6.7CVSS7AI score0.00081EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/04 12:00 a.m.10 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a variety of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a lack of boundary checking, where out-of-bounds writes may occur. An attacker can escalate privileges by exploiting the vulnerability...

6.7CVSS6.8AI score0.00084EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/02 12:00 a.m.12 views

The vulnerability of the cs_dsp_dbg() function (located in the drivers/firmware/cirrus/cs_dsp.c file of the Linux kernel) allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the csdspdbg function located in the drivers/firmware/cirrus/csdsp.c file of the Linux kernel is related to the occurrence of operations outside the buffer boundaries in memory when processing the wmfw header. Exploitation of this vulnerability could allow an attacker to...

7.8CVSS6.9AI score0.00281EPSS
SaveExploits0References21Affected Software11
CNNVD
CNNVD
added 2024/11/01 12:00 a.m.7 views

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. apple macOS is a proprietary operating system developed for Mac computers. A security vulnerability exists in multiple Apple products that originates from an improper boundary check, where...

6.5CVSS6.1AI score0.00346EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2024/11/01 12:00 a.m.8 views

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. apple macOS is a proprietary operating system developed for Mac computers. A security vulnerability exists in multiple Apple products that originates from an improper boundary check, where...

6.5CVSS6.1AI score0.00346EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/11/01 12:00 a.m.6 views

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. apple macOS is a proprietary operating system developed for Mac computers. A security vulnerability exists in multiple Apple products that originates from an improper boundary check, where...

6.5CVSS6.1AI score0.00346EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2024/11/01 12:00 a.m.19 views

The vulnerability of the X509_V_FLAG_CRL_CHECK component in the OpenSSL cryptographic library allows a attacker to trigger a service failure.

The vulnerability of the X509VFLAGCRLCHECK component in the OpenSSL cryptographic library is related to reading data beyond the memory boundaries. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

6.8CVSS7AI score0.01398EPSS
SaveExploits0References7Affected Software4
CNVD
CNVD
added 2024/10/31 12:00 a.m.14 views

Google Pixel syscall.c file buffer overflow vulnerability

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a buffer overflow vulnerability that stems from incorrect boundary checking in validaddress in syscall.c, which can be exploited by an attacker to cause an out-of-bounds read...

7.8CVSS7.1AI score0.00075EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/10/31 12:00 a.m.13 views

Google Pixel Out-of-Bounds Read Vulnerability

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from an out-of-bounds read vulnerability that stems from a lack of boundary checking, which can be exploited by an attacker to read local information out of bounds...

5.5CVSS6.2AI score0.00072EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/10/31 12:00 a.m.21 views

Google Pixel trusty_shared_memory_manager.cc file buffer overflow vulnerability

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a buffer overflow vulnerability that stems from incorrect boundary checking in TrustySharedMemoryManager::GetSharedMemory at ondevice/trusty/trustysharedmemorymanager.cc, which could be exploited by an...

5.5CVSS7.1AI score0.00072EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.15 views

The vulnerability of the WibuKey64.sys driver of the WIBU-SYSTEMS WibuKey software lies in improper checking of boundaries, which can lead to service failure.

The vulnerability of the WIBU-SYSTEMS WibuKey security software driver, named WibuKey64.sys, is related to incorrect reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS5.7AI score0.00199EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/10/29 6:40 p.m.13 views

CLSA-2024-1730227233 Fix CVE(s): CVE-2024-8925

SECURITY UPDATE: prevent erroneous parsing - debian/patches/CVE-2024-8925.patch: limit boundary size to prevent erroneous parsing in multipart/form-data POST data - CVE-2024-8925...

5.3CVSS6.8AI score0.00935EPSS
SaveExploits1References1
OSV
OSV
added 2024/10/29 6:38 p.m.14 views

CLSA-2024-1730227099 Fix CVE(s): CVE-2024-8925

SECURITY UPDATE: prevent erroneous parsing - debian/patches/CVE-2024-8925.patch: limit multipart/form-data boundaries size to prevent erroneous parsing - CVE-2024-8925...

5.3CVSS6.7AI score0.00935EPSS
SaveExploits1References1
Snyk
Snyk
added 2024/10/29 1:15 p.m.3 views

Denial of Service (DoS)

Overview ChuanhuChatGPT is a 为ChatGPT API提供了一个轻快好用的Web图形界面 Affected versions of this package are vulnerable to Denial of Service DoS during the file upload process, when appending a large number of characters to the end of a multipart boundary. This uncontrolled resource consumption can lead to...

8.7CVSS7AI score0.0063EPSS
SaveExploits1References3
PyPA
PyPA
added 2024/10/29 1:15 p.m.14 views

PYSEC-2024-119

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service DOS attack. When uploading a file, if an attacker appends a large number of characters to the end of a multipart boundary, the system will continuously process each character, rendering ChuanhuChatGPT...

7.5CVSS6.8AI score0.0063EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:00 a.m.20 views

The vulnerability of the nct6775 component in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the nct6775 component in the Linux operating system is related to read misses beyond the buffer boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00248EPSS
SaveExploits0References13Affected Software3
OSV
OSV
added 2024/10/28 6:51 p.m.28 views

CLSA-2024-1730141462 php: Fix of CVE-2024-8925

CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data boundaries larger than the read buffer...

5.3CVSS6.8AI score0.00935EPSS
SaveExploits1References1
OSV
OSV
added 2024/10/28 5:32 p.m.12 views

CLSA-2024-1730134476 php: Fix of 2 CVEs

CVE-2024-8927: Fix bypass of cgi.forceredirect configuration - CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data boundaries larger than the read buffer...

7.5CVSS6.8AI score0.01054EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2024/10/25 12:00 a.m.9 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a buffer overflow vulnerability that stems from a lack of checking of boundaries in pmucalraehandleseqint in flexpmucalrae.c, which can be exploited by an attacker to cause an out-of-bounds read...

5.5CVSS7.1AI score0.00077EPSS
SaveExploits0References2
Rows per page
Query Builder