Lucene search
+L

6270 matches found

BDU FSTEC
BDU FSTEC
added 2023/07/24 12:0 a.m.10 views

The vulnerability of the session_user() function in the fs/ksmbd/smb2pdu.c file of the KSMBD file system in the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the sessionuser function in the fs/ksmbd/smb2pdu.c file of the KSMBD file system in the Linux operating system is related to reading data beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to gain access to protected information or cause servic...

9.4CVSS6.8AI score0.03157EPSS
SaveExploits0References25Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.12 views

The vulnerability of the IOSurfaceAccelerator component in iOS, iPadOS, watchOS, and tvOS operating systems allows attackers to gain access to protected information.

The vulnerability of the IOSurfaceAccelerator component in iOS, iPadOS, watchOS, and tvOS operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to access protected information...

5.5CVSS6.1AI score0.0026EPSS
SaveExploits0References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.9 views

The vulnerability of the d_expression_1 function in the libiberty/cp-demangle.c component of the GNU Binutils development environment allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the dexpression1 function in the libiberty/cp-demangle.c component of the GNU Binutils development environment is related to reading data beyond the allowable buffer limits after multiple recursive calls. Exploiting this vulnerability allows an attacker to gain access to...

10CVSS7.1AI score0.01802EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.8 views

The vulnerability of the QDnsLookup component of the cross-platform framework for Qt software development allows a hacker to induce a service failure.

The vulnerability of the QDnsLookup component of the cross-platform framework for Qt software development relates to reading data from beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending a specially crafted response from...

5.3CVSS6.1AI score0.00805EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.10 views

The vulnerability of the ezxml_decode function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmldecode function in the ezXML XML syntax analysis library involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created XML file...

7.8CVSS6.7AI score0.01085EPSS
SaveExploits1References11Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.9 views

The vulnerability of the ezxml_decode function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmldecode function in the ezXML XML syntax analysis library involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created XML file...

7.8CVSS6.7AI score0.01085EPSS
SaveExploits1References10Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.8 views

The vulnerability of the ezxml_decode function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmldecode function in the ezXML XML syntax analysis library involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created XML file...

7.8CVSS6.7AI score0.00969EPSS
SaveExploits1References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.9 views

The vulnerability of the ezxml_parse_str function in the ezXML XML document syntax analysis library allows a attacker to cause a service failure.

The vulnerability of the ezxmlparsestr function in the ezXML XML syntax analysis library involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to cause service failures by using a specially created XML file...

7.8CVSS6.7AI score0.01095EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.9 views

The vulnerability of the fromNatStaticSetting() function in the microprogramming software for Tenda F1202, FH1202, AC10, AC1206, ACV7, AC5, and AC9 routers allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromNatStaticSetting function in the microprogramming software for Tenda F1202, FH1202, AC10, AC1206, ACV7, AC5, and AC9 lies in the fact that the operation outputs outside the buffer in memory when processing the page parameter. Exploiting this vulnerability allows a...

10CVSS8.4AI score0.00928EPSS
SaveExploits1References3Affected Software6
OSV
OSV
added 2023/07/18 2:15 p.m.10 views

AZL-43516 CVE-2020-23909 affecting package advancecomp 2.5-1

Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...

7.1CVSS7.2AI score0.003EPSS
SaveExploits1References1
OSV
OSV
added 2023/07/18 2:15 p.m.10 views

AZL-44874 CVE-2020-23909 affecting package advancecomp 2.6-1

Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...

7.1CVSS7.2AI score0.003EPSS
SaveExploits1References1
OSV
OSV
added 2023/07/18 2:15 p.m.38 views

UBUNTU-CVE-2020-23909

Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...

7.1CVSS6AI score0.003EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2023/07/11 12:0 a.m.10 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to reading beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to reading beyond the buffer in memory. Exploiting this...

3.3CVSS7.1AI score0.00261EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/07/06 12:0 a.m.12 views

The vulnerabilities of the libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, and Jt3dReadPsr—programming environments for rendering 3D models by Luxion KeyShot—allow attackers to execute arbitrary code.

The vulnerability of the Luxion KeyShot 3D-modeling software libraries—CatiaV53dRead, CatiaV63dRead, Step3dRead, Ug3dReadPsr, and Jt3dReadPsr—is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code...

7.8CVSS7.7AI score0.02029EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/06/28 12:0 a.m.13 views

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system allows a perpetrator to execute arbitrary code.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of the current process while analyzi...

7.8CVSS7.4AI score0.00217EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/06/28 12:0 a.m.10 views

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information when analyzing a specially...

3.3CVSS6.1AI score0.00193EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/06/26 12:0 a.m.11 views

The vulnerability of .NET components in the communication protocol library for connecting components of ASU TP Triangle MicroWorks DNP3 Source Code Library, a control platform for managing public distribution and transmission networks of Schneider Electric Saitel DR RTU, allows a intruder to cause a service failure.

The vulnerability of .NET components in the communication protocol library used for connecting components of ASU systems like Triangle MicroWorks DNP3 Source Code Library in Schneider Electric Saitel DR RTU control platforms lies in the fact that the operation results are stored outside of the...

6.5CVSS8AI score0.01349EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/06/26 12:0 a.m.9 views

The vulnerability of the _bfd_elf_parse_gnu_properties function in the elf-properties.c library of the GNU Binutils development toolset allows a attacker to cause a service failure.

The vulnerability of the bfdelfparsegnuproperties function in the elf-properties.c library of the GNU Binutils development toolset is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

7.8CVSS6.7AI score0.01792EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/06/25 12:0 a.m.14 views

The vulnerability of the Freeimage graphic library, related to reading data beyond the buffer in memory, allows attackers to cause a service failure.

The vulnerability of the Freeimage graphic library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created JXR file...

5.5CVSS6.1AI score0.0028EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/06/23 12:0 a.m.8 views

The vulnerability of the Microsoft Visual Studio software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Microsoft Visual Studio software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.8AI score0.00824EPSS
SaveExploits0References4Affected Software3
Rows per page
Query Builder