Lucene search
+L

4849 matches found

BDU FSTEC
BDU FSTEC
•added 2020/06/19 12:00 a.m.•18 views

The vulnerability of the Microsoft JET Database Engine database driver on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS8AI score0.14672EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2020/06/19 12:00 a.m.•25 views

The vulnerability of the ChakraCore JavaScript script handler, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS7.3AI score0.08642EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/06/19 12:00 a.m.•18 views

The vulnerability of the syntax analyzer and the YANG data modeling tool, Libyang, arises from writing beyond buffer boundaries in memory. This allows attackers to trigger service failures or execute arbitrary code.

The vulnerability of the syntax analyzer and the YANG data modeling language toolset lies in the writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

8.1CVSS8AI score0.03644EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2020/06/19 12:00 a.m.•18 views

The vulnerability of the OpenOffice office suite relates to the issue of operations occurring outside the buffer boundaries in memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to the issue of operations occurring outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

9.9CVSS6.7AI score0.56864EPSS
SaveExploits10References6Affected Software6
OSV
OSV
•added 2020/06/18 3:15 p.m.•14 views

UBUNTU-CVE-2017-9103

An issue was discovered in adns before 1.5.2. papmailbox822 does not properly check st from adnsfindlabelnext. Without this, an uninitialised stack value can be used as the first label length. Depending on the circumstances, an attacker might be able to trick adns into crashing the calling progra...

9.8CVSS7.3AI score0.02296EPSS
SaveExploits0References3
CVE
CVE
•added 2020/06/18 2:53 p.m.•201 views

CVE-2017-9103

CVE-2017-9103 affects adns before 1.5.2. The issue: pap_mailbox822 does not properly check st from adns__findlabel_next, allowing an uninitialized stack value to be used as the first label length. This can cause a crash, memory leakage, excessive memory allocation, or buffer overruns, depending o...

9.8CVSS9AI score0.02296EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2020/06/18 2:15 p.m.•9 views

DEBIAN-CVE-2017-9106

An issue was discovered in adns before 1.5.2. adnsrrinfo mishandles a bogus datap. The general pattern for formatting integers is to sprintf into a fixed-size buffer. This is correct if the input is in the right range; if it isn't, the buffer may be overrun depending on the sizes of the types on...

7.5CVSS8.6AI score0.01825EPSS
SaveExploits0References1
NVD
NVD
•added 2020/06/18 2:15 p.m.•19 views

CVE-2017-9106

An issue was discovered in adns before 1.5.2. adnsrrinfo mishandles a bogus datap. The general pattern for formatting integers is to sprintf into a fixed-size buffer. This is correct if the input is in the right range; if it isn't, the buffer may be overrun depending on the sizes of the types on...

7.5CVSS0.01825EPSS
SaveExploits0References5
NVD
NVD
•added 2020/06/18 2:15 p.m.•14 views

CVE-2017-9107

An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with , and adnsqfquoteokquery was specified, qdparselabel would read additional bytes from the buffer and try to treat them as the escape sequence. It would depart...

7.5CVSS0.01848EPSS
SaveExploits0References5
OSV
OSV
•added 2020/06/18 2:15 p.m.•11 views

DEBIAN-CVE-2017-9107

An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with , and adnsqfquoteokquery was specified, qdparselabel would read additional bytes from the buffer and try to treat them as the escape sequence. It would depart...

7.5CVSS8.7AI score0.01848EPSS
SaveExploits0References1
OSV
OSV
•added 2020/06/18 2:15 p.m.•16 views

CVE-2017-9106

An issue was discovered in adns before 1.5.2. adnsrrinfo mishandles a bogus datap. The general pattern for formatting integers is to sprintf into a fixed-size buffer. This is correct if the input is in the right range; if it isn't, the buffer may be overrun depending on the sizes of the types on...

7.5CVSS9.5AI score
SaveExploits0References5
OSV
OSV
•added 2020/06/18 2:15 p.m.•18 views

CVE-2017-9107

An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with , and adnsqfquoteokquery was specified, qdparselabel would read additional bytes from the buffer and try to treat them as the escape sequence. It would depart...

7.5CVSS9.4AI score
SaveExploits0References5
Prion
Prion
•added 2020/06/18 2:15 p.m.•27 views

Design/Logic Flaw

An issue was discovered in adns before 1.5.2. adnsrrinfo mishandles a bogus datap. The general pattern for formatting integers is to sprintf into a fixed-size buffer. This is correct if the input is in the right range; if it isn't, the buffer may be overrun depending on the sizes of the types on...

5CVSS7.5AI score0.01825EPSS
SaveExploits0References5Affected Software2
Prion
Prion
•added 2020/06/18 2:15 p.m.•20 views

Design/Logic Flaw

An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with , and adnsqfquoteokquery was specified, qdparselabel would read additional bytes from the buffer and try to treat them as the escape sequence. It would depart...

5CVSS7.6AI score0.01848EPSS
SaveExploits0References5Affected Software2
UbuntuCve
UbuntuCve
•added 2020/06/18 2:15 p.m.•30 views

CVE-2017-9107

An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with , and adnsqfquoteokquery was specified, qdparselabel would read additional bytes from the buffer and try to treat them as the escape sequence. It would depart...

7.5CVSS7.2AI score0.01848EPSS
SaveExploits0References2
OSV
OSV
•added 2020/06/18 2:15 p.m.•9 views

UBUNTU-CVE-2017-9107

An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with , and adnsqfquoteokquery was specified, qdparselabel would read additional bytes from the buffer and try to treat them as the escape sequence. It would depart...

7.5CVSS7.6AI score0.01848EPSS
SaveExploits0References3
Mend
Mend
•added 2020/06/18 1:08 p.m.•1 views

CVE-2017-9106

An issue was discovered in adns before 1.5.2. adnsrrinfo mishandles a bogus datap. The general pattern for formatting integers is to sprintf into a fixed-size buffer. This is correct if the input is in the right range; if it isn't, the buffer may be overrun depending on the sizes of the types on...

8.7CVSS0.01825EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2020/06/18 1:08 p.m.•56 views

CVE-2017-9106

An issue was discovered in adns before 1.5.2. adnsrrinfo mishandles a bogus datap. The general pattern for formatting integers is to sprintf into a fixed-size buffer. This is correct if the input is in the right range; if it isn't, the buffer may be overrun depending on the sizes of the types on...

7.5CVSS8.6AI score0.01825EPSS
SaveExploits0
Mend
Mend
•added 2020/06/18 1:06 p.m.•1 views

CVE-2017-9107

An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with , and adnsqfquoteokquery was specified, qdparselabel would read additional bytes from the buffer and try to treat them as the escape sequence. It would depart...

8.7CVSS0.01848EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2020/06/18 1:06 p.m.•49 views

CVE-2017-9107

An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with , and adnsqfquoteokquery was specified, qdparselabel would read additional bytes from the buffer and try to treat them as the escape sequence. It would depart...

7.5CVSS8.7AI score0.01848EPSS
SaveExploits0
Rows per page
Query Builder