Lucene search
+L

13031 matches found

CNNVD
CNNVD
•added 2021/12/01 12:00 a.m.•20 views

D-Link DIR-809 缓冲区错误漏洞

A buffer overflow vulnerability exists in the D-Link DIR-809, a dual-band router from D-Link, China, which stems from the failure of the sub8003183C function in the product/fromLogin link to effectively determine data boundaries. An attacker could cause a buffer overflow resulting in a denial of...

10CVSS6.5AI score0.04067EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2021/12/01 12:00 a.m.•95 views

Ubuntu: Security Advisory (USN-5161-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.7AI score0.00533EPSS
SaveExploits1References2
Ubuntu
Ubuntu
•added 2021/11/30 9:34 p.m.•87 views

USN-5161-1: Linux kernel vulnerabilities

Ilja Van Sprundel discovered that the SCTP implementation in the Linux kernel did not properly perform size validations on incoming packets in some situations. An attacker could possibly use this to expose sensitive information kernel memory. CVE-2021-3655 It was discovered that the AMD...

7.8CVSS6.8AI score0.00533EPSS
SaveExploits1
Rapid7 Blog
Rapid7 Blog
•added 2021/11/30 5:38 p.m.•523 views

Active Exploitation of Apache HTTP Server CVE-2021-40438

CVE | Vendor Advisory | AttackerKB | IVM Content | Patching Urgency | Last Update ---|---|---|---|---|--- CVE-2021-40438 | Apache Advisory | AttackerKB | 09/16/2021 multiple | ASAP | December 1, 2021 14:00 ET On September 16, 2021, Apache released version 2.4.49 of HTTP Server, which included a f...

6.8CVSS7.4AI score0.99999EPSS
SaveExploits5
CNNVD
CNNVD
•added 2021/11/30 12:00 a.m.•25 views

Bentley ContextCapture 缓冲区错误漏洞

Bentley ContextCapture is a 3D reality modeling software. A buffer error vulnerability exists in Bentley ContextCapture that stems from a boundary condition when parsing an OBJ file. A remote attacker could create a specially crafted file, trick the victim into opening it, trigger an out-of-bound...

5.5CVSS5.3AI score0.01699EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/11/25 12:00 a.m.•17 views

MediaTek 芯片 输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. The MediaTek chips are vulnerable to an input validation error vulnerability that originates from a boundary error when handling untrusted input in the AudioManager API. A local administrator can use...

7.8CVSS8.2AI score0.00671EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/11/19 12:00 a.m.•19 views

Moddable SDK 缓冲区错误漏洞

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable U.S. A security vulnerability exists in the Moddable SDK, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulti...

7.8CVSS6.1AI score0.00763EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/11/19 12:00 a.m.•13 views

Moddable SDK 缓冲区错误漏洞

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable U.S. A security vulnerability exists in the Moddable SDK, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulti...

7.8CVSS6.1AI score0.00755EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/11/19 12:00 a.m.•9 views

Vim 缓冲区错误漏洞

Vim is a UNIX-based editor, and a buffer overflow vulnerability exists in Vim, which stems from the product's failure to properly determine memory boundaries and can be exploited by attackers to cause a buffer overflow...

9.3CVSS8.5AI score0.01786EPSS
SaveExploits1References20
CNNVD
CNNVD
•added 2021/11/19 12:00 a.m.•19 views

Moddable SDK 缓冲区错误漏洞

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable U.S. A security vulnerability exists in the Moddable SDK, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulti...

7.1CVSS6.1AI score0.00734EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2021/11/19 12:00 a.m.•22 views

The vulnerability of the vDaemon software from Cisco IOS XE SD-WAN allows a attacker to trigger buffer overflows.

The vulnerability of the vDaemon software in Cisco IOS XE SD-WAN lies in insufficient boundary checking during traffic processing. Exploiting this vulnerability can allow a remote attacker to trigger buffer overflows...

10CVSS8.2AI score0.02629EPSS
SaveExploits0References3
Ivan 'd0znpp' Novikov
Ivan 'd0znpp' Novikov
•added 2021/11/18 12:02 p.m.•35 views

What is a firewall ❓ Everything you need to know about

In the tech world, a firewall is a wellbeing network framework that screens and controls moving ever closer affiliation traffic dependent upon destined security rules. A firewall ordinarily draws up a line between a confided in affiliation and an untrusted affiliation, like the Internet.‍ What is...

7.3AI score
SaveExploits0
CNNVD
CNNVD
•added 2021/11/18 12:00 a.m.•17 views

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of MediaTek chips from China's MediaTek Mediatek. A security vulnerability exists in a number of MediaTek chips that stems from an incorrect boundary check in apusys, which may result in an out-of-bounds read. This could lead to the disclosure of local information tha...

4.4CVSS5.3AI score0.00119EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/11/18 12:00 a.m.•17 views

MediaTek Apusys 缓冲区错误漏洞

MediaTek Apusys is a chipset from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Apusys that stems from a read out-of-bounds condition that may occur in apusys due to incorrect boundary checking. This could result in the disclosure of local information that...

4.4CVSS5.3AI score0.00119EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/11/18 12:00 a.m.•20 views

多款 MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called Mediatek. A security vulnerability exists in several MediaTek chips that stems from a lack of boundary checking in apusys, which may result in memory corruption. This could result in a local elevation of privilege that...

7.2CVSS6.8AI score0.00124EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/11/18 12:00 a.m.•22 views

The vulnerability of JScript and VBScript script handlers in Internet Explorer, related to the execution of operations beyond the buffer boundaries, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of JScript and VBScript script handlers in Internet Explorer is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted web page...

7.6CVSS8.3AI score0.94062EPSS
SaveExploits10References9Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/11/16 12:00 a.m.•18 views

The vulnerability of the software for creating metadata, processing, and exchanging Adobe XMP-Toolkit-SDK standard sets, related to reading beyond the buffer in memory, allows a perpetrator to cause service failures.

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a speciall...

4.3CVSS6.6AI score0.01955EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/11/15 12:00 a.m.•20 views

The vulnerability in operating systems macOS Big Sur, iOS, iPadOS, watchOS, and tvOS arises from a logical error during operations beyond the buffer limit, allowing an attacker to execute arbitrary code.

The vulnerability of operating systems macOS Big Sur, iOS, iPadOS, watchOS, and tvOS is related to a logical error that occurs when performing operations outside of the buffer. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS8.1AI score0.02754EPSS
SaveExploits0References6Affected Software5
CNNVD
CNNVD
•added 2021/11/12 12:00 a.m.•16 views

AMD System Management Unit 缓冲区错误漏洞

The AMD System Management Unit SMU is a system management unit of AMD Corporation. The AMD System Management Unit suffers from a buffer error vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in ...

5.5CVSS6.3AI score0.00219EPSS
SaveExploits0References6
Veracode
Veracode
•added 2021/11/11 8:18 a.m.•32 views

Remote Code Execution (RCE)

gerbv is vulnerable to remote code execution. The vulnerability exists due to a boundary error when processing untrusted input in the drill format T-code tool number functionality...

9.8CVSS3.5AI score0.02989EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder