Lucene search
K

426 matches found

Cvelist
Cvelist
added 2022/02/08 8:25 p.m.23 views

CVE-2022-0519 Buffer Access with Incorrect Length Value in radareorg/radare2

Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2...

6.3CVSS8.5AI score0.00939EPSS
Exploits1References4
OSV
OSV
added 2022/02/08 8:25 p.m.13 views

CVE-2022-0519 Buffer Access with Incorrect Length Value in radareorg/radare2

Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2...

6.3CVSS7.9AI score0.00939EPSS
Exploits1References6
AlpineLinux
AlpineLinux
added 2022/02/08 8:25 p.m.35 views

CVE-2022-0519

Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2...

7.1CVSS6.7AI score0.00939EPSS
Exploits1
Debian CVE
Debian CVE
added 2022/02/08 8:25 p.m.19 views

CVE-2022-0519

Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2...

7.1CVSS6.7AI score0.00939EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.38 views

Siemens Nucleus RTOS-based APOGEE and TALON Products Buffer Access with Incorrect Length Value (CVE-2021-31885)

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

7.5CVSS8AI score0.01197EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2022/01/28 12:0 a.m.42 views

EulerOS 2.0 SP9 : qemu (EulerOS-SA-2022-1034)

According to the versions of the qemu package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command header 'ad-curcmd'...

8.5CVSS7.2AI score0.02904EPSS
Exploits3References27
Tenable Nessus
Tenable Nessus
added 2022/01/28 12:0 a.m.25 views

EulerOS 2.0 SP9 : qemu (EulerOS-SA-2022-1014)

According to the versions of the qemu package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command header 'ad-curcmd'...

8.5CVSS7.2AI score0.02904EPSS
Exploits3References27
ICS
ICS
added 2022/01/11 12:0 a.m.65 views

Siemens Energy PLUSCONTROL

1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Energy Equipment: PLUSCONTROL Vulnerabilities: Type Confusion, Improper Validation of Specified Quantity in Input, Buffer Access with Incorrect Length Value, Integer Underflow, Improper Handling...

9.1CVSS8.4AI score0.02424EPSS
Exploits0References11
ICS
ICS
added 2021/11/09 12:0 a.m.71 views

Siemens Nucleus RTOS TCP/IP Stack

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Nucleus Net, Nucleus ReadyStart, Capital VSTAR Vulnerabilities: Type Confusion, Improper Validation of Specified Quantity in Input, Out-of-bounds Read, Improper Restriction of...

9.8CVSS9.5AI score0.03031EPSS
Exploits0References11
PyPA
PyPA
added 2021/11/05 10:15 p.m.5 views

PYSEC-2021-815

TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a result, attackers can trigger denial of service via dereferencing nullptrs or via CHECK-failures as well as abuse undefined behavior binding...

8.8CVSS7.1AI score0.00168EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2021/11/05 10:15 p.m.3 views

PYSEC-2021-815

TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a result, attackers can trigger denial of service via dereferencing nullptrs or via CHECK-failures as well as abuse undefined behavior binding...

8.8CVSS7.1AI score0.00168EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/10/27 12:0 a.m.4 views

Adobe Prelude 缓冲区错误漏洞

Adobe Prelude is a video recording and capture tool designed for intuitive and efficient media organization and metadata entry to quickly tag and transcode video footage and quickly create rough cuts.Adobe Prelude 10.1 and earlier versions are vulnerable to an out-of-bounds memory buffer access...

7.8CVSS6.4AI score0.0169EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/10/27 12:0 a.m.4 views

Adobe Media Encoder 缓冲区错误漏洞

Adobe Media Encoder, a video and audio encoding application, is vulnerable to an out-of-bounds memory buffer access vulnerability in Adobe Media Encoder 15.4.1 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

9.3CVSS6.4AI score0.01932EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/10/27 12:0 a.m.6 views

Adobe Media Encoder 缓冲区错误漏洞

Adobe Media Encoder, a video and audio encoding application, is vulnerable to an out-of-bounds memory buffer access vulnerability in Adobe Media Encoder 15.4.1 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

9.3CVSS6.4AI score0.01932EPSS
Exploits0References4
OSV
OSV
added 2021/10/19 3:15 p.m.1 views

DEBIAN-CVE-2021-3746

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerabili...

6.5CVSS6.8AI score0.00894EPSS
Exploits0References1
NVD
NVD
added 2021/10/05 9:15 p.m.17 views

CVE-2021-3581

Buffer Access with Incorrect Length Value in zephyr. Zephyr versions = =2.5.0 contain Buffer Access with Incorrect Length Value CWE-805. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q65-5gqf-fmw5...

8.8CVSS0.00337EPSS
Exploits0References1
CVE
CVE
added 2021/10/05 8:50 p.m.49 views

CVE-2021-3581

CVE-2021-3581 affects Zephyr RTOS, specifically versions 2.5.0 and later, due to a Buffer Access with Incorrect Length Value (CWE-805) . The available connected sources indicate the issue exists in Zephyr and cite a GHSA advisory; CVSS vectors from NVD point to a high impact (ISC/availability/con...

8.8CVSS7.9AI score0.00337EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/05 8:50 p.m.20 views

CVE-2021-3581 Buffer Access with Incorrect Length Value in zephyr

Buffer Access with Incorrect Length Value in zephyr. Zephyr versions = =2.5.0 contain Buffer Access with Incorrect Length Value CWE-805. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q65-5gqf-fmw5...

7CVSS8.9AI score0.00337EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/10/05 12:0 a.m.3 views

Zephyr 安全漏洞

Zephyr is an open source, small, scalable, real-time operating system. a security vulnerability exists in Zephyr, which stems from the use of incorrect values for buffer access. No details of the vulnerability are currently available...

8.8CVSS8.1AI score0.00337EPSS
Exploits0References2
OSV
OSV
added 2021/10/04 6:15 p.m.3 views

UBUNTU-CVE-2021-32672

Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support 3.2 or newer...

5.3CVSS6.7AI score0.01702EPSS
Exploits0References5
Rows per page
Query Builder