Lucene search
K

4206 matches found

BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.4 views

The vulnerability of the ntfs inode_lookup_by_name function in the NTFS file system driver for the FUSE NTFS-3G module relates to writing beyond the buffer boundaries in memory. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfs inodelookupbyname function in the NTFS file system driver for the FUSE NTFS-3G module is related to the lack of length checking for attributes. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service...

7.8CVSS6.6AI score0.00392EPSS
Exploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.2 views

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures through a specially created Unicod...

7.8CVSS6.8AI score0.00432EPSS
Exploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.1 views

The vulnerability of the ap_escape_quotes() function in the Apache HTTP Server, related to writing beyond buffer boundaries in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the apescapequotes function in the Apache HTTP Server is related to the lack of input validation in this function. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.1AI score0.36339EPSS
Exploits0References14Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.4 views

The vulnerability of the hd_strlcpy() function in software for converting web pages using htmldoc, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the hdstrlcpy function in software for converting web pages to htmldoc format is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.4AI score0.01135EPSS
Exploits1References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.2 views

The vulnerability of the `ntfs inode_real_open` function in the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer boundary, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfs inoderealopen function in the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.8AI score0.00432EPSS
Exploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.1 views

The vulnerability of the `ntfs inode_sync_standard_information` function in the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer’s memory limit, allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfs inodesyncstandardinformation function in the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, a...

7.8CVSS6.8AI score0.00392EPSS
Exploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.6 views

The vulnerability of the convolution_y_8bit function in the multimedia library Ffmpeg, related to writing beyond buffer boundaries, allows a hacker to trigger a service failure.

The vulnerability of the convolutiony8bit function in the multimedia library Ffmpeg is related to writing outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.5CVSS6.5AI score0.01486EPSS
Exploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.3 views

The vulnerability of the `ntfsattr_pread_i` function in the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer boundary, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfsattrpreadi function in the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.8AI score0.00385EPSS
Exploits0References11Affected Software5
OSV
OSV
added 2022/01/13 10:15 p.m.3 views

CVE-2021-34940

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score
Exploits0References2
OSV
OSV
added 2022/01/13 10:15 p.m.4 views

CVE-2021-34928

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score0.01937EPSS
Exploits0References2
OSV
OSV
added 2022/01/13 10:15 p.m.1 views

CVE-2021-34918

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.2AI score
Exploits0References2
OSV
OSV
added 2022/01/13 10:15 p.m.0 views

CVE-2021-34921

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score
Exploits0References2
OSV
OSV
added 2022/01/13 10:15 p.m.1 views

CVE-2021-34926

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score
Exploits0References2
OSV
OSV
added 2022/01/13 10:15 p.m.1 views

CVE-2021-34929

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score
Exploits0References2
OSV
OSV
added 2022/01/13 10:15 p.m.1 views

CVE-2021-34903

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score0.02113EPSS
Exploits0References2
OSV
OSV
added 2022/01/13 10:15 p.m.1 views

CVE-2021-34875

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.2AI score0.01987EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/01/13 12:0 a.m.230 views

Oracle Linux 7 : openssl (ELSA-2022-9017)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9017 advisory. - fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings Tenable has extracted the preceding description block directly from the Oracle Linu...

7.4CVSS6.9AI score0.50445EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/01/12 12:0 a.m.34 views

Juniper Junos OS Vulnerability (JSA11293)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11293 advisory. - ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data and a field holding the buffer length...

7.4CVSS7AI score0.50445EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.3 views

The vulnerability of Adobe Premiere Rush software arises from an operation that goes beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe Premiere Rush arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

9.3CVSS7.9AI score0.02273EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.3 views

The vulnerability of the implementation of the sampled_data_finish() function in the software for processing, transforming, and generating Ghostscript documents allows a perpetrator to trigger a service failure.

The vulnerability of the implementation of the sampleddatafinish function in the software for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failur...

5.5CVSS6.7AI score0.01401EPSS
Exploits1References13Affected Software5
Rows per page
Query Builder