Lucene search
+L

3850 matches found

OSV
OSV
added 2022/05/24 5:37 p.m.30 views

GHSA-27MH-3343-6HG5 dhowden tag panic due to out-of-bounds read

Due to improper bounds checking, a number of methods in dhowden tag before 0.0.0-20201120070457-d52dcb253c63 can trigger a panic due to attempted out-of-bounds reads. If the package is used to parse user supplied input, this may be used as a vector for a denial of service attack...

6.5CVSS6.2AI score0.0112EPSS
SaveExploits4References8
Github Security Blog
Github Security Blog
added 2022/05/24 5:37 p.m.31 views

dhowden tag panic due to out-of-bounds read

Due to improper bounds checking, a number of methods in dhowden tag before 0.0.0-20201120070457-d52dcb253c63 can trigger a panic via readAPICFrame due to attempted out-of-bounds reads. If the package is used to parse user supplied input, this may be used as a vector for a denial of service attack...

6.5CVSS6.1AI score0.01111EPSS
SaveExploits1References8Affected Software1
OSV
OSV
added 2022/05/24 5:37 p.m.21 views

GHSA-9WM7-RC47-G56M dhowden tag panic due to out-of-bounds read

Due to improper bounds checking, a number of methods in dhowden tag before 0.0.0-20201120070457-d52dcb253c63 can trigger a panic via readAPICFrame due to attempted out-of-bounds reads. If the package is used to parse user supplied input, this may be used as a vector for a denial of service attack...

6.5CVSS6.2AI score0.0112EPSS
SaveExploits4References8
Apple
Apple
added 2022/05/16 12:0 a.m.157 views

About the security content of watchOS 8.6

About the security content of watchOS 8.6 This document describes the security content of watchOS 8.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.8CVSS9.7AI score0.12642EPSS
SaveExploits3References1Affected Software1
OSV
OSV
added 2022/05/12 12:3 a.m.13 views

USN-5413-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Jeremy Cline discovered a use-after-free in the nouveau graphics driver of the Linux kernel during device removal. A privileged or physically proximate attacker could use this to cause a denial of service system crash. CVE-2020-27820 It was discovered that a race condition existed in the network...

8.8CVSS6.8AI score0.02151EPSS
SaveExploits1References7
OSV
OSV
added 2022/05/11 5:15 p.m.3 views

CVE-2021-26364

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service...

5.5CVSS6.3AI score0.00208EPSS
SaveExploits0References1
NVD
NVD
added 2022/05/11 5:15 p.m.23 views

CVE-2021-26364

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service...

5.5CVSS0.00208EPSS
SaveExploits0References1
Prion
Prion
added 2022/05/11 5:15 p.m.16 views

Out-of-bounds

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service...

4.9CVSS5.2AI score0.00208EPSS
SaveExploits0References1Affected Software44
CVE
CVE
added 2022/05/11 4:25 p.m.104 views

CVE-2021-26364

CVE-2021-26364 affects a system with insufficient bounds checking in an SMU mailbox register, potentially allowing reading beyond the SRAM address range and triggering an exception handling path that could cause a denial of service. The description in the CVE notes this could occur locally and co...

5.5CVSS5.7AI score0.00208EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/05/11 4:25 p.m.28 views

CVE-2021-26364

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service...

6.2AI score0.00208EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/05/10 8:0 p.m.4 views

CVE-2021-26364

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service...

5.5CVSS6.1AI score0.00208EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2022/05/10 1:24 p.m.5 views

ntfs-3g: Out-of-bounds access in ntfs_decompress()

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.8CVSS6.8AI score0.00418EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/05/10 1:24 p.m.18 views

ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing NTFS inodes, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.8CVSS6.8AI score0.00473EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/05/10 1:24 p.m.6 views

ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially crafted NTFS attributes

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing NTFS attributes, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.8CVSS6.8AI score0.00414EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/05/10 1:24 p.m.11 views

ntfs-3g: Heap buffer overflow in ntfs_attr_setup_flag() triggered by a specially crafted NTFS attribute from MFT

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing NTFS attributes from the MFT , proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.8CVSS6.8AI score0.00477EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/05/10 1:24 p.m.12 views

ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS inode pathname, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.8CVSS6.8AI score0.00488EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/05/10 1:24 p.m.9 views

ntfs-3g: Heap buffer overflow in ntfs_get_attribute_value() caused by an unsanitized attribute

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.8CVSS6.8AI score0.00456EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/05/09 12:0 a.m.32 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : ovmf Multiple Vulnerabilities (NS-SA-2022-0009)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has ovmf packages installed that are affected by multiple vulnerabilities: - Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service vi...

9.8CVSS7.2AI score0.03418EPSS
SaveExploits4References13
UbuntuCve
UbuntuCve
added 2022/05/07 12:0 a.m.39 views

CVE-2022-20792

A vulnerability in the regex module used by the signature database load module of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an authenticated, local attacker to crash ClamAV at database load time, and possibly gain code execution...

7.8CVSS7.2AI score0.00535EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/04/21 12:0 a.m.8 views

Slackware: Security Advisory (SSA:2019-135-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Rows per page
Query Builder