Lucene search
+L

110 matches found

BDU FSTEC
BDU FSTEC
•added 2020/05/13 12:00 a.m.•14 views

The vulnerability of theEncodeImage function in the GraphicsMagick graphics editor allows for reading beyond the allowed buffer data limits. This enables attackers to access confidential data and cause service interruptions.

The vulnerability of theEncodeImage function in the GraphicsMagick graphics editor involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and accessibility...

9.1CVSS7.9AI score0.02783EPSS
SaveExploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
•added 2020/04/22 12:00 a.m.•13 views

The vulnerability of the `exif_read_data` function in the PHP programming language involves an operation that goes beyond the permissible buffer size limits. This allows attackers to gain unauthorized access to information or cause service failures.

The vulnerability of the exifreaddata function in the PHP programming language is related to the execution of operations that exceed the permissible buffer limits. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information or cause service failures...

9.3CVSS6.3AI score0.0442EPSS
SaveExploits1References14Affected Software7
BDU FSTEC
BDU FSTEC
•added 2020/04/22 12:00 a.m.•13 views

The vulnerability of the Skia component in Google Chrome browsers, related to reading beyond the allowed buffer data limits, allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Skia component in Google Chrome browser relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause a service failure through a specially crafted web page...

8.8CVSS7.9AI score0.01388EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
•added 2020/04/22 12:00 a.m.•13 views

The vulnerability of SQLite’s data processing mechanism in Google Chrome browsers allows attackers to gain unauthorized access to confidential data.

The vulnerability of SQLite data processing mechanism in Google Chrome browsers is related to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data through a created HTML page...

7.1CVSS7.2AI score0.01711EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
•added 2020/04/10 12:00 a.m.•17 views

The vulnerability of the ANGLE component in the Google Chrome web browser allows a perpetrator to compromise data integrity, cause service failures, or gain unauthorized access to confidential information.

The vulnerability of the ANGLE browser component in Google Chrome relates to the execution of operations within the data buffer’s allowable limits. Exploiting this vulnerability could allow an attacker to compromise data integrity, cause service failures, or gain unauthorized access to confidenti...

9.3CVSS7.2AI score0.01431EPSS
SaveExploits0References9Affected Software5
OSV
OSV
•added 2020/01/07 9:19 p.m.•20 views

MGASA-2020-0026 Updated opensc packages fix security vulnerability

Updated opensc packages fix security vulnerabilities: sccontextcreate in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv CVE-2019-6502. OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c...

7.5CVSS6.5AI score0.02198EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2019/12/12 5:38 p.m.•37 views

CVE-2019-19481

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...

4.6CVSS6.7AI score0.00246EPSS
SaveExploits0References3
OSV
OSV
•added 2019/12/01 11:15 p.m.•30 views

CVE-2019-19481

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...

4.6CVSS6.9AI score
SaveExploits0References4
OSV
OSV
•added 2019/12/01 11:15 p.m.•14 views

UBUNTU-CVE-2019-19481

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...

4.6CVSS6.7AI score0.00246EPSS
SaveExploits0References4
Prion
Prion
•added 2019/12/01 11:15 p.m.•31 views

Code injection

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...

2.1CVSS5.1AI score0.00246EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
•added 2019/12/01 11:15 p.m.•44 views

CVE-2019-19481

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...

4.6CVSS6.7AI score0.00246EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2019/12/01 10:37 p.m.•33 views

CVE-2019-19481

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...

5.5AI score0.00246EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2019/12/01 10:37 p.m.•47 views

CVE-2019-19481

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...

4.6CVSS6.7AI score0.00246EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/12/01 10:37 p.m.•42 views

CVE-2019-19481

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...

4.6CVSS6.7AI score0.00246EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•31 views

The vulnerability of the HyperLogLog algorithm in a resident database management system for NoSQL Redis lies in the fact that the output of the operation may exceed the buffer limits in memory. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis stems from a flaw in the HyperLogLog data structure when the SETRANGE command is executed. This command allows the addition of up to 12 bytes of information beyond the stack limit. Exploiting...

9CVSS5.5AI score0.23703EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2019/06/06 12:00 a.m.•29 views

The vulnerability of the strncpy function in Atftpd arises from the possibility of the operation exceeding the buffer’s memory limit. This allows attackers to compromise data integrity and confidentiality, or cause service failures.

The vulnerability of the strncpy function in the Atftpd package is related to the sending of a 3-byte error message by the package. Exploiting this vulnerability allows an attacker to compromise data integrity and confidentiality, or cause service failures...

9.8CVSS7.7AI score0.04288EPSS
SaveExploits1References7Affected Software2
Debian CVE
Debian CVE
•added 2019/03/20 8:00 p.m.•70 views

CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

5.5CVSS6AI score0.0051EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2019/02/21 12:00 a.m.•10 views

The vulnerability of the QEMU hardware emulation software allows for data to be written beyond the specified buffer limit, enabling a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation software allows for data to be written beyond the specified buffer limits. Exploiting this vulnerability can enable a hacker to trigger a service failure...

5.5CVSS6.8AI score0.0061EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2018/12/27 12:00 a.m.•27 views

The vulnerability of the load_image function in the GIMP graphic editor, related to reading beyond the buffer limit of memory, allows attackers to cause system failures, undermine data integrity, and compromise confidentiality.

The vulnerability of the loadimage function in the GIMP graphic editor’s plug-ins/common/file-gbr.c file is related to the issue of data being written beyond the buffer boundaries when processing UTF-8 formatted data. Exploiting this vulnerability can allow an attacker to cause service failures,...

7.8CVSS7AI score0.01463EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2016/04/06 7:35 a.m.•15 views

USN-2948-1 linux-lts-utopic vulnerabilities

Ralf Spenneberg discovered that the USB driver for Clie devices in the Linux kernel did not properly validate the endpoints reported by the device. An attacker with physical access could cause a denial of service system crash. CVE-2015-7566 Ralf Spenneberg discovered that the usbvision driver in...

10CVSS7.2AI score0.14546EPSS
SaveExploits11References9
Rows per page
Query Builder