Lucene search
+L

9340 matches found

BDU FSTEC
BDU FSTEC
•added 2023/03/07 12:00 a.m.•22 views

The vulnerability of the Adobe Bridge file manager relates to the issue of writing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00302EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/03/07 12:00 a.m.•16 views

The vulnerability of the Adobe Bridge file manager relates to the issue of writing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to the issue of writing operations beyond the buffer boundaries in memory when processing embedded fonts. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file or a speciall...

7.8CVSS7.8AI score0.00302EPSS
SaveExploits0References7Affected Software1
CNVD
CNVD
•added 2023/03/01 12:00 a.m.•59 views

Adobe Bridge out-of-bounds read vulnerability (CNVD-2023-13726)

Adobe Bridge is a file viewer from Adobe. Adobe Bridge has an out-of-bounds read vulnerability that can be exploited by attackers to cause sensitive memory leaks...

5.5CVSS4.3AI score0.00325EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2023/02/24 9:49 p.m.•69 views

Security Bulletin: IBM Security Verify Bridge (windows and docker versions) affected by a denial of service issue in Go (CVE-2022-32149)

Summary IBM Security Verify Bridge windows and docker versions fixed the vulnerability by upgrading the Go component to the proper version containing all fixes. Vulnerability Details CVEID:CVE-2022-32149 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by improper input...

7.5CVSS7.2AI score0.01841EPSS
SaveExploits0Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2023/02/24 12:00 a.m.•31 views

Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS5.7AI score0.00325EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/02/24 12:00 a.m.•27 views

Adobe Bridge Font Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS7.7AI score0.00326EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/02/24 12:00 a.m.•27 views

Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processin...

3.3CVSS5.7AI score0.00325EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/02/24 12:00 a.m.•32 views

Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS7.7AI score0.00302EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/02/24 12:00 a.m.•50 views

Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS7.7AI score0.00302EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2023/02/22 2:54 a.m.•9 views

SUSE CVE-2023-26253

In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read...

7.5CVSS7.2AI score0.00914EPSS
SaveExploits1References3
F5 Networks
F5 Networks
•added 2023/02/21 7:41 p.m.•73 views

K35358312: TCP vulnerability CVE-2015-8099

Security Advisory Description Under limited conditions, an invalid TCP segment can lead to a Denial of Service for the High-Speed Bridge HSB on the following platforms: 3900, 6900, 8900, 8950, 11000, 11050, PB100 or PB200. This issue is only exposed on virtual servers while Software SYN cookies a...

5.9CVSS6.1AI score0.01998EPSS
SaveExploits0Affected Software21
F5 Networks
F5 Networks
•added 2023/02/21 6:46 p.m.•46 views

K26455071: BIG-IP HSB vulnerability CVE-2019-6604

Security Advisory Description Under certain conditions, hardware systems with a High-Speed Bridge HSB using non-default Layer 2 forwarding configurations may experience a lockup of the HSB. CVE-2019-6604 This vulnerability occurs when all of the following conditions are met: A VLAN group is...

6.8CVSS6.5AI score0.01017EPSS
SaveExploits0Affected Software13
F5 Networks
F5 Networks
•added 2023/02/21 6:35 p.m.•76 views

K79215841: OpenSSL vulnerability CVE-2016-0702

Security Advisory Description The MODEXPCTIMECOPYFROMPREBUF function in crypto/bn/bnexp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running ...

5.1CVSS7AI score0.0191EPSS
SaveExploits1Affected Software23
OSV
OSV
•added 2023/02/21 2:15 a.m.•22 views

AZL-38152 CVE-2023-26253 affecting package glusterfs for versions less than 11.1-3

In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read...

7.5CVSS7.5AI score0.00914EPSS
SaveExploits1References1
OSV
OSV
•added 2023/02/21 2:15 a.m.•5 views

DEBIAN-CVE-2023-26253

In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read...

7.5CVSS7.6AI score0.00914EPSS
SaveExploits1References1
Prion
Prion
•added 2023/02/21 2:15 a.m.•28 views

Stack overflow

In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read...

5CVSS7.5AI score0.00914EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2023/02/21 12:00 a.m.•10 views

Gluster GlusterFS 缓冲区错误漏洞

GlusterFS is the file system for Gluster by Gluster, Inc. A security vulnerability exists in Gluster GlusterFS version 11.0, which has a source of a stack buffer overflow in glusterfs/xlators/mount/fuse/src/fuse-bridge.c. The vulnerability is caused by the presence of a stack buffer overflow...

7.5CVSS7.6AI score0.00914EPSS
SaveExploits1References5
Veracode
Veracode
•added 2023/02/20 8:26 p.m.•29 views

SQL Injection

webbuilders-group/silverstripe-kapost-bridge is vulnerable to SQL Injection. The vulnerability exists due to the improper sanitization in the database and table name designer feature allowing an attacker to submit arbitrary SQL query’s, resulting in Information Disclosure...

9.8CVSS9.3AI score0.00667EPSS
SaveExploits0References5Affected Software1
The Hacker News
The Hacker News
•added 2023/02/20 11:23 a.m.•10 views

Norway Seizes $5.84 Million in Cryptocurrency Stolen by Lazarus Hackers

Norwegian police agency Økokrim has announced the seizure of 60 million NOK about $5.84 million worth of cryptocurrency stolen by the Lazarus Group in March 2022 following the Axie Infinity Ronin Bridge hack. "This case shows that we also have a great capacity to follow the money on the blockchai...

6.5AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2023/02/20 11:23 a.m.•58 views

Norway Seizes $5.84 Million in Cryptocurrency Stolen by Lazarus Hackers

Norwegian police agency Økokrim has announced the seizure of 60 million NOK about $5.84 million worth of cryptocurrency stolen by the Lazarus Group in March 2022 following the Axie Infinity Ronin Bridge hack. "This case shows that we also have a great capacity to follow the money on the blockchai...

0.4AI score
SaveExploits0
Rows per page
Query Builder