Lucene search
+L

4850 matches found

BDU FSTEC
BDU FSTEC
•added 2019/11/18 12:00 a.m.•14 views

The vulnerability of the GetStyleTokens function (coders/svg.c:311:12) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to trigger a service failure.

The vulnerability of the GetStyleTokens function coders/svg.c:311:12 in the cross-platform library for working with graphics, GraphicsMagick, arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service...

7.8CVSS7.2AI score0.02274EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
•added 2019/11/11 12:00 a.m.•13 views

The vulnerability of TP-Link TL-WR840N router’s microprogramming software arises from an operation that goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device.

The vulnerability of TP-Link TL-WR840N router’s microprogramming software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause a service failure through fragmented packets...

7.8CVSS7.5AI score0.01858EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2019/11/06 4:43 p.m.•15 views

chromium-browser: Buffer overrun in Blink

Out of bounds memory access in the gamepad API in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.4AI score0.01183EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2019/11/06 9:40 a.m.•17 views

php: underflow in env_path_info in fpm_main.c

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution...

9.8CVSS7.7AI score0.9978EPSS
SaveExploits59References6
BDU FSTEC
BDU FSTEC
•added 2019/11/06 12:00 a.m.•12 views

The vulnerability of the SSH_MSG_CHANNEL_REQUEST command in the libssh2 library allows a hacker to execute arbitrary code.

The vulnerability of the SSHMSGCHANNELREQUEST command in the libssh2 library is related to writing data beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by connecting to an SSH server...

9.3CVSS7.8AI score0.06131EPSS
SaveExploits0References18Affected Software4
OPENSUSE Linux
OPENSUSE Linux
•added 2019/11/06 12:00 a.m.•153 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2447-1 Rating: important References: 1143492 1144625 1145242 1146219 1149143 1150425 1151229 1153660 1154806 1155643 Cross-References: CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-1366...

9.6CVSS6.9AI score0.49421EPSS
SaveExploits5References10
BDU FSTEC
BDU FSTEC
•added 2019/11/04 12:00 a.m.•18 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability in PDF viewer programs such as Adobe Reader and Document Cloud, as well as in PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability can allow a malicious acto...

4.3CVSS6.2AI score0.02893EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2019/11/04 12:00 a.m.•14 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability in PDF viewer programs such as Adobe Reader and Document Cloud, as well as in PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, arises due to an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious individua...

5.5CVSS6.2AI score0.01995EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/11/04 12:00 a.m.•11 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability in PDF viewer programs such as Adobe Reader and Document Cloud, as well as in PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability can allow a malicious acto...

4.3CVSS6.2AI score0.01995EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2019/11/04 12:00 a.m.•56 views

openSUSE Security Update : chromium / re2 (openSUSE-2019-2420)

This update for chromium, re2 fixes the following issues : Chromium was updated to 78.0.3904.70 boo1154806 : - CVE-2019-13699: Use-after-free in media - CVE-2019-13700: Buffer overrun in Blink - CVE-2019-13701: URL spoof in navigation - CVE-2019-13702: Privilege elevation in Installer -...

8.8CVSS6.6AI score0.06643EPSS
SaveExploits1References22
OPENSUSE Linux
OPENSUSE Linux
•added 2019/11/03 12:00 a.m.•158 views

Security update for chromium, re2 (important)

openSUSE Security Update: Security update for chromium, re2 Announcement ID: openSUSE-SU-2019:2425-1 Rating: important References: 1154806 Cross-References: CVE-2019-13699 CVE-2019-13700 CVE-2019-13701 CVE-2019-13702 CVE-2019-13703 CVE-2019-13704 CVE-2019-13705 CVE-2019-13706 CVE-2019-13707...

8.8CVSS6.7AI score0.06643EPSS
SaveExploits1References1
OPENSUSE Linux
OPENSUSE Linux
•added 2019/11/03 12:00 a.m.•184 views

Security update for chromium, re2 (important)

openSUSE Security Update: Security update for chromium, re2 Announcement ID: openSUSE-SU-2019:2424-1 Rating: important References: 1154806 Cross-References: CVE-2019-13699 CVE-2019-13700 CVE-2019-13701 CVE-2019-13702 CVE-2019-13703 CVE-2019-13704 CVE-2019-13705 CVE-2019-13706 CVE-2019-13707...

8.8CVSS6.7AI score0.06643EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2019/11/02 12:00 a.m.•34 views

openSUSE: Security Advisory for chromium, re2 (openSUSE-SU-2019:2420-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS6.7AI score0.06643EPSS
SaveExploits1References2
Kaspersky
Kaspersky
•added 2019/10/30 12:00 a.m.•88 views

KLA11714 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, cause denial of service. Below is a complete list of vulnerabilities: 1. Cross-origin data leak vulnerability can be exploited to arbitrary code executio...

8.8CVSS7.5AI score0.06643EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2019/10/29 12:00 a.m.•27 views

The vulnerability of the libssh2 library, related to writing beyond the buffer boundaries in memory, allows a attacker to cause a service failure, execute arbitrary code, or disclose sensitive information.

The vulnerability of the libssh2 library lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures, execute arbitrary code, or disclose sensitive information...

8.8CVSS6AI score0.03437EPSS
SaveExploits0References10Affected Software13
BDU FSTEC
BDU FSTEC
•added 2019/10/29 12:00 a.m.•21 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability in PDF viewer programs such as Adobe Reader and Document Cloud, as well as in PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability can allow a malicious acto...

7.8CVSS6.2AI score0.02893EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2019/10/24 12:00 a.m.•17 views

The vulnerability in the web interface for managing microprogrammed software in Cisco SPA100 Series IP phones allows a perpetrator to execute arbitrary code with elevated privileges.

The vulnerability in the web interface for managing Microprogramming-based IP phones of the Cisco SPA100 Series is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated privileges using a...

8CVSS6.4AI score0.00578EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/10/24 12:00 a.m.•11 views

The vulnerability in the web interface for managing microprogrammed software in Cisco SPA100 Series IP phones allows a perpetrator to execute arbitrary code with elevated privileges.

The vulnerability in the web interface for managing Microprogramming software in Cisco SPA100 Series IP phones is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated privileges using a...

8CVSS6.4AI score0.00578EPSS
SaveExploits0References2Affected Software2
OpenVAS
OpenVAS
•added 2019/10/24 12:00 a.m.•56 views

Google Chrome Security Updates (stable-channel-update-for-desktop_22-2019-10) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS6.7AI score0.06643EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2019/10/24 12:00 a.m.•42 views

Google Chrome Security Updates (stable-channel-update-for-desktop_22-2019-10) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS6.7AI score0.06643EPSS
SaveExploits1References1
Rows per page
Query Builder