Lucene search
+L

6239 matches found

BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.8 views

The vulnerability of the print_prefix function in tcpdump software for network traffic analysis, related to reading data beyond the buffer’s allowed limits, allows a hacker to gain access to confidential data.

The vulnerability of the printprefix function in software for analyzing network traffic using tcpdump relates to reading data from within allowable buffer limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

6.5CVSS6.3AI score0.02364EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.7 views

The vulnerability of the rasteropGeneralLow component in the Leptonica image processing library, which involves reading data beyond the permissible buffer limits, allows attackers to cause service failures.

The vulnerability of the rasteropGeneralLow component in the Leptonica image processing library involves reading data beyond the permissible buffer size. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.4AI score0.02574EPSS
SaveExploits1References13Affected Software6
CNNVD
CNNVD
added 2021/11/01 12:0 a.m.10 views

多款Qualcomm产品缓冲区错误漏洞

Qualcomm QCA6574AU and others are products of Qualcomm Incorporated Qualcomm.QCA6574AU is a central processing unit CPU product.APQ8017 is a central processing unit CPU product.SDX55 is a modem.Qualcomm QCA6574AU is a central processing unit CPU product.APQ8017 is a central processing unit CPU...

9.1CVSS8.5AI score0.00591EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/10/29 12:0 a.m.6 views

The vulnerability of the Exiv2 metadata management library, related to the execution of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Exiv2 metadata management library is related to the execution of operations outside the buffer in memory due to errors in metadata writing. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

8.8CVSS6.9AI score0.02152EPSS
SaveExploits1References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/10/29 12:0 a.m.9 views

The vulnerability of the tcpdump software for analyzing network traffic lies in the reading of data beyond the buffer’s acceptable limits, which allows a hacker to cause a service failure.

The vulnerability of the tcpdump software for analyzing network traffic is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.5CVSS6.5AI score0.03167EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.8 views

The vulnerability of the Nef polygon function in the CGAL computational geometry algorithm library, which involves reading data beyond the permissible buffer limits, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Nef polygon function in the CGAL computational geometry algorithm library is related to reading data beyond the permissible buffer size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause servi...

10CVSS7.9AI score0.02878EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.10 views

The vulnerability of the server-based Redmine project and task management web application lies in its ability to read data beyond the allowed buffer size limits, allowing an attacker to compromise the integrity of the data.

The vulnerability of the server-based Redmine project and task management web application is related to incorrect data processing during the formatting of tasks. Exploiting this vulnerability allows an attacker to compromise the integrity of the data...

5.3CVSS5.9AI score0.00809EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.7 views

The vulnerability of the hw/scsi/scsi-generic.c component of the QEMU hardware emulation software, related to reading data beyond the buffer’s acceptable limits, allows a malicious actor to cause a service failure.

The vulnerability of the hw/scsi/scsi-generic.c component of the QEMU hardware emulation software is related to reading data from within acceptable buffer limits. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS6.8AI score0.00556EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.6 views

The vulnerability in the block/iscsi.c component of the QEMU hardware emulation software involves reading data beyond the allowed buffer limits, allowing an attacker to access confidential data.

The vulnerability in the block/iscsi.c component of the QEMU hardware emulation software involves reading data from beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data...

3.8CVSS6.7AI score0.00467EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.8 views

The vulnerability of the driver of the QEMU hardware emulation controller arises from reading data beyond the permissible buffer limits. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the driver of the QEMU hardware emulation controller lies in reading data from within allowable buffer limits. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

5CVSS6.8AI score0.00578EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.11 views

The vulnerability of the Nef polygon function in the CGAL computational geometry algorithm library, which involves reading data beyond the permissible buffer limits, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Nef polygon function in the CGAL computational geometry algorithm library is related to reading data beyond the permissible buffer size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause servi...

9.8CVSS7.9AI score0.03292EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.7 views

The vulnerability of the sd_wp_addr component of the emulation software for hardware devices on other platforms, related to reading data beyond the buffer’s acceptable limits, allows a malicious actor to cause a service failure.

The vulnerability of the sdwpaddr component of the hardware emulation software for other platforms supported by QEMU lies in its ability to read data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.9AI score0.00428EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.10 views

The vulnerability of the Jp2Image::readMetadata() function in the jp2image.cpp component of the Exiv2 media metadata management library is related to the occurrence of operations outside the buffer in memory. This vulnerability allows an attacker to access confidential data and also trigger a service failure.

The vulnerability of the Jp2Image::readMetadata function in the jp2image.cpp component of the Exiv2 media metadata management library is related to an improper check on the rawData.size property. Exploiting this vulnerability could allow a remote attacker to access confidential data, as well as...

6.5CVSS6.5AI score0.02295EPSS
SaveExploits0References12Affected Software6
ATTACKERKB
ATTACKERKB
added 2021/10/20 7:15 a.m.5 views

CVE-2021-30306

Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

8.4CVSS7AI score0.00146EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/10/20 7:15 a.m.6 views

CVE-2021-30304

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity...

9.1CVSS7.1AI score0.00591EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/10/20 12:0 a.m.7 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to reading beyond the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to reading data beyond the buffer in memory. Exploiting...

3.3CVSS6.8AI score0.04144EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/15 11:3 a.m.7 views

OESA-2021-1394 redis security update

Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fixes: Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed...

5.3CVSS6.8AI score0.01831EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/15 11:3 a.m.7 views

OESA-2021-1388 aspell security update

GNU Aspell is a spell checker intended to replace Ispell. It can be used as a library and spell checker. Its main feature is that it provides much better suggestions than other inspectors, including Ispell and Microsoft Word. It also has many other technical enhancements to Ispell, such as the us...

9.1CVSS7.2AI score0.01739EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.15 views

The vulnerability of the Adobe Genuine Service application checking service, related to errors in processing symbolic links, allows a perpetrator to re-record arbitrary files and increase their privileges.

The vulnerability of the Adobe Genuine Service application checking service is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to rewrite arbitrary files and increase their privileges...

7.8CVSS7.6AI score0.01637EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/10/06 6:15 p.m.9 views

CVE-2021-25492

Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read...

7.1CVSS7.3AI score0.00227EPSS
SaveExploits0References1
Rows per page
Query Builder