Lucene search
+L

6223 matches found

BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.6 views

The vulnerability of the mod_cache_socache module in the Apache HTTP Server, related to reading data beyond the buffer’s acceptable limit, allows attackers to cause service failures.

The vulnerability of the modcachesocache module in the Apache HTTP Server relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

5.3CVSS7.5AI score0.70279EPSS
SaveExploits0References16Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.9 views

The vulnerability of the PDFium PDF-content processor in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers arises from reading beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS8.4AI score0.01469EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.10 views

The vulnerability in the implementation of the WebRTC technology in Google Chrome browser allows a hacker to induce a service failure.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

7.8CVSS7.3AI score0.02954EPSS
SaveExploits2References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.8 views

The vulnerability of the PDFium PDF-content processor in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers arises from reading beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS8.4AI score0.01517EPSS
SaveExploits0References8Affected Software2
RedHat Linux
RedHat Linux
added 2019/11/26 2:28 p.m.62 views

tcpdump: Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap

In tcpdump 4.9.2, a stack-based buffer over-read exists in the printprefix function of print-hncp.c via crafted packet data because of missing initialization...

5.5CVSS7.7AI score0.02364EPSS
SaveExploits1References4
OSV
OSV
added 2019/11/25 5:15 p.m.3 views

DEBIAN-CVE-2019-19246

Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in strlowercasematch in regexec.c...

7.5CVSS6.8AI score0.03049EPSS
SaveExploits0References1
OSV
OSV
added 2019/11/25 5:15 p.m.4 views

UBUNTU-CVE-2019-19246

Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in strlowercasematch in regexec.c...

7.5CVSS6.9AI score0.03049EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.10 views

The vulnerability of the LoaderTiff::getData() function in the Exiv2 library for managing media metadata allows a hacker to execute arbitrary code.

The vulnerability of the LoaderTiff::getData function preview.cpp in the Exiv2 media metadata management library is exploited by reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS7.3AI score0.02891EPSS
SaveExploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.9 views

The vulnerability of the mp4ff_read_stsc function (common/mp4ff/mp4atom.c) in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to trigger a service denial.

The vulnerability of the mp4ffreadstsc function in the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created mp4 fi...

5.5CVSS6.9AI score0.00891EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.8 views

The vulnerability of the mp4ff_read_stsd function (common/mp4ff/mp4atom.c) in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to trigger a service denial.

The vulnerability of the mp4ffreadstsd function common/mp4ff/mp4atom.c in the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is caused by reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created...

5.5CVSS6.8AI score0.00891EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.8 views

The vulnerability of the mp4ff_read_stts function (common/mp4ff/mp4atom.c) in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to trigger a service failure.

The vulnerability of the mp4ffreadstts function common/mp4ff/mp4atom.c in the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is caused by reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created...

5.5CVSS6.8AI score0.00891EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:0 a.m.10 views

The vulnerability of the ReadSUNImage function (coders/sun.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to trigger a service failure.

The vulnerability of the ReadSUNImage function coders/sun.c in the cross-platform library for working with graphics, GraphicsMagick, arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a system failure...

7.8CVSS6.5AI score0.02296EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/18 12:0 a.m.7 views

The vulnerability of the ReadSUNImage function (coders/sun.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to execute arbitrary code.

The vulnerability of the ReadSUNImage function coders/sun.c in the cross-platform library for working with graphics, GraphicsMagick, is related to reading beyond the buffer boundaries in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.02305EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/11/18 12:0 a.m.6 views

The vulnerability of the WriteOnePNGImage function (coders/png.c) in the cross-platform graphics library GraphicsMagick, which allows a hacker to trigger a service failure.

The vulnerability of the WriteOnePNGImage function coders/png.c in the cross-platform graphics library GraphicsMagick is related to reading beyond the buffer boundaries in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure by using a specially...

7.8CVSS7.2AI score0.01807EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/11/18 12:0 a.m.9 views

The vulnerability of the ReadMNGImage function (coders/png.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to execute arbitrary code.

The vulnerability of the ReadMNGImage function coder/png.c in the cross-platform library for working with graphics, GraphicsMagick, is related to reading beyond the buffer boundaries in dynamic memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS7.4AI score0.01875EPSS
SaveExploits0References8Affected Software3
ATTACKERKB
ATTACKERKB
added 2019/11/17 6:15 p.m.4 views

CVE-2019-19035

jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and processSOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file...

5.5CVSS5.7AI score0.01042EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2019/11/11 12:0 a.m.4 views

PT-2019-15699 · Tnef +2 · Tnef +2

Name of the Vulnerable Software and Affected Versions: tnef versions prior to 1.4.18 Description: The issue allows an attacker to potentially write to the victim's .ssh/authorized keys file via a crafted winmail.dat application/ms-tnef attachment in an email message. This is due to a heap-based...

5.5CVSS7.7AI score0.01203EPSS
SaveExploits1References30
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:0 a.m.10 views

The vulnerability of the VideoLAN VLC media player, which arises from reading data beyond the buffer in memory, allows a hacker to cause a system failure.

The vulnerability of the VideoLAN VLC media player arises from reading data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause the code to fail by using a specially created .wmv file...

7.8CVSS5.8AI score0.11522EPSS
SaveExploits3References8Affected Software1
RedHat Linux
RedHat Linux
added 2019/11/06 5:13 p.m.7 views

expat: heap-based buffer over-read via crafted XML input

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XMLGetCurrentLineNumber or XMLGetCurrentColumnNumber then resulted in a heap-based buffer over-read...

7.5CVSS6.9AI score0.06643EPSS
SaveExploits1References4
OSV
OSV
added 2019/11/06 4:15 p.m.7 views

UBUNTU-CVE-2019-18798

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...

6.5CVSS7.5AI score0.01053EPSS
SaveExploits1References2
Rows per page
Query Builder