Lucene search
K

4206 matches found

BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.2 views

The vulnerability of the Multimedia Console, related to the execution of operations outside the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Multimedia Console is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted request...

8.1CVSS8.6AI score0.0128EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.3 views

The vulnerability of Adobe Audition for Windows and macOS, related to the operation of operations beyond buffer boundaries in memory, allows a hacker to trigger a system failure.

The vulnerability of Adobe Audition’s audio editing software for Windows and macOS is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS7AI score0.01209EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.4 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code on the target system...

7.8CVSS8.1AI score0.01955EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:0 a.m.1 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user, using a specially craft...

9.3CVSS7.8AI score0.02151EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/11/17 12:0 a.m.3 views

The vulnerability of the professional video editing software Adobe Premiere Pro, related to recording data beyond the buffer limit in memory, allows a hacker to execute arbitrary code.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the recording of data beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.01559EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/17 12:0 a.m.2 views

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves writing data beyond the buffer boundaries into memory, allowing an attacker to execute arbitrary code.

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude involves writing data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.0169EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/17 12:0 a.m.2 views

The vulnerability of the software for working with animations in Adobe Character Animator lies in the recording of data beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Character Animator software for animation processing is related to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7AI score0.0155EPSS
Exploits0References4Affected Software2
OpenVAS
OpenVAS
added 2021/11/12 12:0 a.m.13 views

Huawei EulerOS: Security Advisory for openssl098e (EulerOS-SA-2021-2667)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS8AI score0.50445EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/11/12 12:0 a.m.8 views

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2021-2666)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS8AI score0.50445EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:0 a.m.26 views

EulerOS 2.0 SP5 : openssl098e (EulerOS-SA-2021-2667)

According to the versions of the openssl098e package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data and a fie...

7.4CVSS7AI score0.50445EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:0 a.m.34 views

EulerOS 2.0 SP5 : openssl111d (EulerOS-SA-2021-2668)

According to the versions of the openssl111d packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In order to decrypt SM2 encrypted data an application is expected to call the API function EVPPKEYdecrypt. Typically an application will ca...

9.8CVSS7.3AI score0.87816EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:0 a.m.51 views

EulerOS 2.0 SP9 : openssl (EulerOS-SA-2021-2717)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In order to decrypt SM2 encrypted data an application is expected to call the API function EVPPKEYdecrypt. Typically an application will call...

9.8CVSS7.3AI score0.87816EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:0 a.m.33 views

EulerOS 2.0 SP5 : openssl (EulerOS-SA-2021-2666)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data and a field...

7.4CVSS7AI score0.50445EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2021/11/10 5:20 p.m.6 views

openssl: Read buffer overruns processing ASN.1 strings

It was found that openssl assumed ASN.1 strings to be NUL terminated. A malicious actor may be able to force an application into calling openssl function with a specially crafted, non-NUL terminated string to deliberately hit this bug, which may result in a crash of the application, causing a...

7.4CVSS6.7AI score0.50445EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:0 a.m.2 views

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco Small Business 220 router software allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Small Business 220 router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary...

8.8CVSS8.4AI score0.00504EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:0 a.m.1 views

The vulnerability of the Fatek Automation Communication Server arises from operations that go beyond the buffer boundaries in memory, allowing attackers to cause service failures or execute arbitrary code.

The vulnerability of the Fatek Automation Communication Server lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code by sending specially crafted requests...

10CVSS8.6AI score0.01758EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2021/11/08 6:15 a.m.3 views

AZL-79102 CVE-2021-41771 affecting package golang 1.25.7-1

ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation...

7.5CVSS6.7AI score0.04372EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/11/05 12:0 a.m.32 views

Amazon Linux 2 : openssl (ALAS-2021-1721)

The version of openssl installed on the remote host is prior to 1.0.2k-19. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1721 advisory. It was found that openssl assumed ASN.1 strings to be NUL terminated. A malicious actor may be able to force an application into...

7.4CVSS6.6AI score0.50445EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.2 views

The vulnerability of the TabStrip control element in Google Chrome web browsers involves an operation that goes beyond the acceptable buffer data limit. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the TabStrip control element in Google Chrome browsers relates to the execution of operations that exceed the allowed buffer data limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

8.8CVSS8AI score0.00839EPSS
Exploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.3 views

The vulnerability of the QEMU hardware emulation API, related to writing beyond the buffer boundaries, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation API is related to an initialization error in the memory region cache. Exploiting this vulnerability can allow an attacker to cause a system failure...

4CVSS6.9AI score0.0036EPSS
Exploits0References8Affected Software5
Rows per page
Query Builder