Lucene search
K

4206 matches found

BDU FSTEC
BDU FSTEC
added 2020/02/24 12:0 a.m.3 views

The vulnerability of the ultra.c component of the cross-platform library LibVNCServer, related to the occurrence of operations outside the buffer in memory, allows a perpetrator to trigger a service failure and gain unauthorized access to confidential data.

The vulnerability of the ultra.c component of the cross-platform library LibVNCServer is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures and gain unauthorized access to confidential data...

9.8CVSS8.1AI score0.03717EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:0 a.m.3 views

Vulnerability of the zgfx_decompress_segment() function in the RDP client FreeRDP, allowing a hacker to execute arbitrary code

The vulnerability of the zgfxdecompresssegment function in the RDP client FreeRDP arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.8AI score0.07293EPSS
Exploits1References6Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:0 a.m.19 views

Vulnerability of the zgfx_decompress() function in the RDP client FreeRDP, allowing a hacker to execute arbitrary code

The vulnerability of the zgfxdecompress function in the RDP client of FreeRDP arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.07293EPSS
Exploits1References6Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/02/11 12:0 a.m.1 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to writing beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to writing beyond the buffer in memory. Exploiting this vulnerability can allow an...

9.8CVSS8.4AI score0.03706EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/02/11 12:0 a.m.2 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to an operation that allows data to be written beyond the buffer in memory, enabling attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are due to an operation that goes beyond the buffer in memory. Exploiting these vulnerabilities...

7.8CVSS7.4AI score0.02893EPSS
Exploits0References3
OSV
OSV
added 2020/02/10 8:15 a.m.0 views

UBUNTU-CVE-2020-7059

When using fgetss function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash...

9.1CVSS6.7AI score0.07402EPSS
Exploits1References3
NVD
NVD
added 2020/02/07 5:15 a.m.21 views

CVE-2019-14041

During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updating message buffer with physical address information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobil...

7.8CVSS7.9AI score0.00427EPSS
Exploits0References1
CVE
CVE
added 2020/02/07 5:0 a.m.110 views

CVE-2019-14041

CVE-2019-14041 affects Qualcomm Snapdragon platforms (listed APQ, SDM, SM etc.) in kernel components. The issue is a buffer overrun caused by a lack of buffer size verification when updating the message buffer with physical address information during listener modified response processing. The vul...

7.8CVSS7.6AI score0.00427EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/02/07 5:0 a.m.27 views

CVE-2019-14041

During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updating message buffer with physical address information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobil...

7.9AI score0.00427EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2020/02/03 12:0 a.m.27 views

Fedora 30 : e2fsprogs (2020-01ed02451f)

Fix a potential out of bounds write when checking a maliciously corrupted file system. This is probably not exploitable on 64-bit platforms, but may be exploitable on 32-bit binaries depending on how the compiler lays out the stack variables. Addresses CVE-2019-5188 A maliciously corrupted file...

7.5CVSS7AI score0.01105EPSS
Exploits2References3
BDU FSTEC
BDU FSTEC
added 2020/02/03 12:0 a.m.2 views

The vulnerability of the Python interpreter lies in the occurrence of operations outside the buffer boundaries in memory, as well as the use of memory after it has been freed. This allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the Python programming language interpreter lies in the execution of operations beyond the buffer boundaries in memory, as well as the use of memory after it has been freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitra...

8.1CVSS7.4AI score0.01209EPSS
Exploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/01/29 12:0 a.m.2 views

The vulnerability of Linux operating system kernel HID drivers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Linux operating system’s HID drivers relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information through a malicious USB device...

6.8CVSS6.9AI score0.00504EPSS
Exploits0References20Affected Software4
Tenable Nessus
Tenable Nessus
added 2020/01/27 12:0 a.m.33 views

FreeBSD : samba -- multiple vulnerabilities (5f0dd349-40a2-11ea-8d8c-005056a311d1)

The Samba Team reports : CVE-2019-14902 The implementation of ACL inheritance in the Samba AD DC was not complete, and so absent a 'full-sync' replication, ACLs could get out of sync between domain controllers. CVE-2019-14907 When processing untrusted string input Samba can read past the end of t...

6.5CVSS6.6AI score0.03151EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.29 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-1240)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS10AI score0.10823EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.30 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2018-1237)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.5AI score0.06224EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-1047)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.8AI score0.10823EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.30 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-1237)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS10AI score0.10823EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.30 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2017-1313)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.5AI score0.06224EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.31 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-1549)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.15063EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.17 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-1021)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.8AI score0.10823EPSS
Exploits0References2
Rows per page
Query Builder