Lucene search
+L

6236 matches found

BDU FSTEC
BDU FSTEC
added 2021/05/05 12:0 a.m.16 views

The vulnerability of the CNCSoft ScreenEditor, related to reading beyond the buffer boundaries, allows attackers to gain unauthorized access to protected information.

The vulnerability of the CNCSoft ScreenEditor relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

6.8CVSS7.6AI score0.01752EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/05 12:0 a.m.11 views

The vulnerability in the kernel/bpf/verifier.c component of the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability in the kernel/bpf/verifier.c component of the Linux operating system is related to reading beyond the buffer limit. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.8AI score0.01071EPSS
SaveExploits0References42Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/05/05 12:0 a.m.15 views

The vulnerability of the CNCSoft-B software, related to reading beyond the buffer boundaries, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CNCSoft-B numerical control software system relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

6.8CVSS7.4AI score0.02025EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2021/05/03 12:0 a.m.8 views

Qualcomm 组件缓冲区错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. An intrinsic part that provides the functionality of Qualcomm devices. A security vulnerability exists in the Qualcomm Component that stems from a buffer over-read when decompressing RTCP packets, where we may read additional byt...

9.4CVSS8.5AI score0.00913EPSS
SaveExploits0References5
OSV
OSV
added 2021/04/29 5:15 p.m.5 views

CVE-2021-31431

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

6CVSS5.9AI score0.00448EPSS
SaveExploits0References2
OSV
OSV
added 2021/04/29 5:15 p.m.5 views

CVE-2021-31430

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

6CVSS5.9AI score0.00448EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/04/29 5:15 p.m.7 views

CVE-2021-31430

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

6CVSS6AI score0.00448EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/04/29 5:15 p.m.5 views

CVE-2021-31432

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

6CVSS6AI score0.00448EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/04/29 5:15 p.m.5 views

CVE-2021-31431

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

6CVSS6AI score0.00448EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/04/21 6:15 p.m.1 views

DEBIAN-CVE-2020-23922

An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read...

7.1CVSS6.8AI score0.02218EPSS
SaveExploits1References1
OSV
OSV
added 2021/04/21 6:15 p.m.1 views

DEBIAN-CVE-2020-23915

An issue was discovered in cpp-peglib through v0.1.12. peg::resolveescapesequence in peglib.h has a heap-based buffer over-read...

5.5CVSS5.9AI score0.00893EPSS
SaveExploits1References1
OSV
OSV
added 2021/04/21 6:15 p.m.33 views

UBUNTU-CVE-2020-23915

An issue was discovered in cpp-peglib through v0.1.12. peg::resolveescapesequence in peglib.h has a heap-based buffer over-read...

5.5CVSS6AI score0.00893EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.9 views

The vulnerability of the implementation of the IPv6 TCP/IP stack in the Trace protocol allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IPv6 TCP/IP implementation in the Trace stack is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.3CVSS6.1AI score0.03336EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.8 views

The vulnerability of the njs interpreter on the nginx server, which allows attackers to cause service failures.

The vulnerability of the njs interpreter on the nginx server is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.5CVSS7AI score0.01305EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.8 views

The vulnerability of the syntax analysis function for domain name records in the Simotics Connect 400 software and hardware suite allows a perpetrator to cause service interruptions.

The vulnerability of the syntax analysis function for DNS domain names in the Simotics Connect 400 software/hardware suite is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.5CVSS6.8AI score0.03572EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.8 views

The vulnerability of Samba software, related to reading data beyond the specified buffer, allows a hacker to cause an unexpected termination of the application.

The vulnerability of Samba software relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause an unexpected termination of the application...

7.8CVSS6.9AI score0.03833EPSS
SaveExploits0References10Affected Software6
Positive Technologies
Positive Technologies
added 2021/04/21 12:0 a.m.5 views

PT-2023-4471 · Sqlite3 +1 · Sqlite3 +1

Name of the Vulnerable Software and Affected Versions: SQLite3 version 3.35.4 Description: The issue in the appendvfs.c component of the SQLite database management system is related to reading beyond the valid boundaries of a data buffer. This can be exploited by a remote attacker to cause a deni...

9.4CVSS7.4AI score0.0216EPSS
SaveExploits1References26
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.9 views

The vulnerability of the IPv6OverIPv4 component in the Trace TCP/IP stack allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the IPv6OverIPv4 component in the TCP/IP stack is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.5CVSS7.4AI score0.09279EPSS
SaveExploits1References7Affected Software4
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2015:0669-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.9AI score0.03501EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2018:4128-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS5.8AI score0.02531EPSS
SaveExploits1References4
Rows per page
Query Builder