Lucene search
+L

4258 matches found

CNNVD
CNNVD
•added 2023/10/11 12:00 a.m.•21 views

Google Pixel Buffer Error Vulnerability

Google Pixel is a smartphone from Google Inc USA. Google Pixel suffers from a security vulnerability that stems from a lack of bounds checking in the TBD component and a possible stack buffer overflow. This could lead to remote code execution without additional execution privileges...

9.8CVSS8.2AI score0.00522EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/10/11 12:00 a.m.•17 views

Google Pixel Buffer Error Vulnerability

Google Pixel is a smartphone from Google Inc. in the United States. Google Pixel suffers from a security vulnerability that stems from a lack of bounds checking in the ProtocolMiscLceIndAdapter::GetConfLevel method of protocolmiscadapter.cpp, which may result in out-of-bounds reads. This could le...

9.8CVSS6.3AI score0.00434EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2023/10/10 12:00 a.m.•16 views

Huawei EulerOS: Security Advisory for libX11 (EulerOS-SA-2023-2938)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.01656EPSS
SaveExploits0References2
CNVD
CNVD
•added 2023/10/09 12:00 a.m.•22 views

D-Link DIR-823G GuardInt Parameter Buffer Overflow Vulnerability

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-823G GuardInt parameter due to incorrect bounds checking in the SetWLanRadioSettings function, which can be exploited by an attacker to cause a denial of service attack...

7.5CVSS7.1AI score0.01034EPSS
SaveExploits1References1
CNVD
CNVD
•added 2023/10/09 12:00 a.m.•27 views

D-Link DIR-823G Encryption Parameter Buffer Overflow Vulnerability

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-823G Encryption parameter due to incorrect bounds checking in the SetWLanRadioSecurity function, which can be exploited by an attacker to cause a denial of service...

7.5CVSS7.1AI score0.08866EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/10/02 12:00 a.m.•12 views

MediaTek Chip Input Validation Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. An input validation error vulnerability exists in the MediaTek chips, which stems from a lack of bounds checking in the rpmb module, which may result in memory corruption...

6.7CVSS6.8AI score0.0009EPSS
SaveExploits0References2
Veracode
Veracode
•added 2023/09/28 10:13 a.m.•25 views

Incorrect Bounds Checking

Vyper is vulnerable to Incorrect Bounds Checking. The vulnerability is due to the lack of input validation when abidecode is nested in an expression. This allows for the construction of uses of abidecode that can bypass bounds checking, ultimately resulting in incorrect results...

7.5CVSS6.9AI score0.00671EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2023/09/27 3:19 p.m.•50 views

CVE-2023-42460

Vyper is a Pythonic Smart Contract Language for the EVM. The abidecode function does not validate input when it is nested in an expression. Uses of abidecode can be constructed which allow for bounds checking to be bypassed resulting in incorrect results. This issue has not yet been fixed, but a...

7.5CVSS6AI score0.00671EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/27 3:19 p.m.•25 views

CVE-2023-41232

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.7, iOS 17 and iPadOS 17, macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. An app may be able to disclose kernel memory...

5.5CVSS4.7AI score0.00314EPSS
SaveExploits0References11
Prion
Prion
•added 2023/09/27 3:19 p.m.•34 views

Out-of-bounds

Vyper is a Pythonic Smart Contract Language for the EVM. The abidecode function does not validate input when it is nested in an expression. Uses of abidecode can be constructed which allow for bounds checking to be bypassed resulting in incorrect results. This issue has not yet been fixed, but a...

5CVSS7.5AI score0.00671EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2023/09/27 3:19 p.m.•38 views

Cross site scripting

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.7, iOS 17 and iPadOS 17, macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. An app may be able to disclose kernel memory...

1.9CVSS4.9AI score0.00314EPSS
SaveExploits0References5Affected Software3
Cvelist
Cvelist
•added 2023/09/26 8:14 p.m.•54 views

CVE-2023-41232

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.7, iOS 17 and iPadOS 17, macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. An app may be able to disclose kernel memory...

5.3AI score0.00314EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2023/09/26 8:14 p.m.•23 views

CVE-2023-41232

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.7, iOS 17 and iPadOS 17, macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. An app may be able to disclose kernel memory...

5.4AI score0.00314EPSS
SaveExploits0References7
CVE
CVE
•added 2023/09/26 8:14 p.m.•129 views

CVE-2023-41232

CVE-2023-41232 affects Apple platforms (macOS and iOS/iPadOS). It is an out-of-bounds read vulnerability fixed by improved bounds checking. Affected: macOS Monterey 12.7; macOS Ventura 13.6; iOS/iPadOS 16.7 and 17. An app may disclose kernel memory via a local vulnerability. Remediation: apply up...

5.5CVSS4.8AI score0.00314EPSS
SaveExploits0References11Affected Software3
Vulnrichment
Vulnrichment
•added 2023/09/26 6:47 p.m.•22 views

CVE-2023-42460 _abi_decode input not validated in complex expressions in Vyper

Vyper is a Pythonic Smart Contract Language for the EVM. The abidecode function does not validate input when it is nested in an expression. Uses of abidecode can be constructed which allow for bounds checking to be bypassed resulting in incorrect results. This issue has not yet been fixed, but a...

5.3CVSS6.8AI score0.00671EPSS
SaveExploits1References2
CVE
CVE
•added 2023/09/26 6:47 p.m.•87 views

CVE-2023-42460

CVE-2023-42460 affects Vyper (EVM Python-like language). The _abi_decode() function does not validate input when nested in an expression, enabling construction that bypasses bounds checking and may yield incorrect results. No exploitation details are provided in the documents, and the vulnerabili...

7.5CVSS6.2AI score0.00671EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2023/09/26 6:47 p.m.•54 views

CVE-2023-42460 _abi_decode input not validated in complex expressions in Vyper

Vyper is a Pythonic Smart Contract Language for the EVM. The abidecode function does not validate input when it is nested in an expression. Uses of abidecode can be constructed which allow for bounds checking to be bypassed resulting in incorrect results. This issue has not yet been fixed, but a...

5.3CVSS7.7AI score0.00671EPSS
SaveExploits1References2
Mend
Mend
•added 2023/09/26 6:47 p.m.•6 views

CVE-2023-42460

Vyper is a Pythonic Smart Contract Language for the EVM. The "abidecode" function does not validate input when it is nested in an expression. Uses of "abidecode" can be constructed which allow for bounds checking to be bypassed resulting in incorrect results. This issue has not yet been fixed, bu...

7.5CVSS0.00671EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2023/09/26 6:47 p.m.•38 views

CVE-2023-42460 _abi_decode input not validated in complex expressions in Vyper

Vyper is a Pythonic Smart Contract Language for the EVM. The abidecode function does not validate input when it is nested in an expression. Uses of abidecode can be constructed which allow for bounds checking to be bypassed resulting in incorrect results. This issue has not yet been fixed, but a...

5.3CVSS7.3AI score0.00671EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/26 12:00 a.m.•6 views

CVE-2023-42460: Incorrect Calculation

Vyper is a Pythonic Smart Contract Language for the EVM. The abidecode function does not validate input when it is nested in an expression. Uses of abidecode can be constructed which allow for bounds checking to be bypassed resulting in incorrect results. This issue has not yet been fixed, but a...

7.5CVSS7.1AI score0.00671EPSS
SaveExploits1References2
Rows per page
Query Builder