Lucene search
K

5807 matches found

BDU FSTEC
BDU FSTEC
added 2023/11/11 12:0 a.m.3 views

The vulnerability of the OpenImageIO image processing library, related to reading data beyond the permissible buffer limits, allows a hacker to cause a service failure.

The vulnerability of the OpenImageIO image processing library lies in the reading of data beyond the permissible buffer size. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using a specially created PSD file...

7.8CVSS7AI score0.00765EPSS
Exploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:0 a.m.2 views

The vulnerability of the Gstreamer multimedia framework, related to reading data beyond the buffer’s acceptable limits, allows a hacker to cause a service failure.

The vulnerability of the Gstreamer multimedia framework is related to reading data from buffer areas beyond their acceptable limits. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7AI score0.05372EPSS
Exploits0References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:0 a.m.2 views

The vulnerability of the OpenImageIO image processing library, related to reading data beyond the permissible buffer limits, allows an attacker to access confidential data.

The vulnerability of the OpenImageIO image processing library lies in the reading of data beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created TIFF file...

7.8CVSS7.7AI score0.01458EPSS
Exploits1References8Affected Software4
OSV
OSV
added 2023/11/10 11:6 a.m.3 views

OESA-2023-1791 qt5-qtbase security update

Qt is a software toolkit for developing applications. Security Fixes: An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.CVE-2023-33285...

5.3CVSS7.2AI score0.00805EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/11/09 12:0 a.m.2 views

The vulnerability of Parasolid’s 3D geometric modeling tool lies in its ability to read data beyond the designated structure when analyzing specially created PAR files. This allows a malicious actor to execute arbitrary code within the context of the current process.

The vulnerability of Parasolid’s 3D geometric modeling tool lies in the ability to read data beyond the designated structure when analyzing specially created PAR files. Exploiting this vulnerability can allow an attacker to execute arbitrary code within the context of the current process...

7.8CVSS7.6AI score0.00214EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2023/11/08 12:0 a.m.2 views

Lenovo Desktop Buffer Error Vulnerability

Lenovo Desktops are desktop computers from the Chinese company Lenovo. A security vulnerability exists in Lenovo Desktop that originates from a buffer over-read in the LEMALLDriversConnectedEventHook module...

4.4CVSS7AI score0.00213EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/11/08 12:0 a.m.2 views

Lenovo Desktops Security Breach

Lenovo Desktops are desktop computers from the Chinese company Lenovo. A security vulnerability exists in Lenovo Desktop that originates from a buffer over-read in the LemSecureBootForceKey module...

4.4CVSS7AI score0.00213EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2023/11/07 8:52 a.m.3 views

qt: buffer over-read via a crafted reply from a DNS server

A vulnerability was discovered in Qt. This security flaw occurs in the QDnsLookup function, which has a buffer over-read via a crafted reply from a DNS server...

5.3CVSS7.5AI score0.00805EPSS
Exploits0References4
OSV
OSV
added 2023/11/02 6:23 p.m.3 views

CLSA-2023-1698949430 Fix CVE(s): CVE-2023-31122

SECURITY UPDATE: modmacro buffer over-read - debian/patches/CVE-2023-31122.patch: use our own strncmp function in modmacro - CVE-2023-31122...

7.5CVSS7AI score0.02978EPSS
Exploits0References1
OSV
OSV
added 2023/11/02 6:22 p.m.5 views

CLSA-2023-1698949348 Fix CVE(s): CVE-2023-31122

SECURITY UPDATE: modmacro buffer over-read - debian/patches/CVE-2023-31122.patch: use our own strncmp function in modmacro - CVE-2023-31122...

7.5CVSS7AI score0.02978EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/11/02 12:0 a.m.4 views

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to reading data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially created PAR files...

7.8CVSS7.8AI score0.00217EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.2 views

The vulnerability in Adobe Dimension’s 3D design software relates to reading beyond the buffer in memory, allowing an attacker to bypass the ASLR protection mechanism.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...

7.8CVSS5.7AI score0.00325EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.3 views

The vulnerability of Adobe Dimension’s 3D design software lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.1AI score0.00325EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.1 views

The vulnerability of the Substance 3D Stager software lies in its ability to read beyond the buffer limit, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00345EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.4 views

The vulnerability of the `updateInfoJsonToBin` function in TP-Link’s router software, allowing a hacker to execute arbitrary code.

The vulnerability of the updateInfoJsonToBin function in TP-Link router software like TL-WDR7660 lies in the reading of data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.5CVSS8.3AI score0.01123EPSS
Exploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.4 views

The vulnerability in Adobe Dimension’s 3D design software relates to reading beyond the buffer in memory, allowing an attacker to bypass the ASLR protection mechanism.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...

7.8CVSS5.7AI score0.00325EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.2 views

The vulnerability in Adobe Dimension’s 3D design software, related to reading beyond the buffer limit, allows attackers to bypass the ASLR protection mechanism.

The vulnerability of Adobe Dimension’s 3D design software relates to reading beyond the buffer limit. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...

7.8CVSS5.7AI score0.00325EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.3 views

The vulnerability in Adobe Dimension’s 3D design software relates to reading beyond the buffer in memory, allowing an attacker to bypass the ASLR protection mechanism.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...

7.8CVSS5.7AI score0.00325EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.3 views

The vulnerability of the deviceInfoJsonToBinc function in TP-Link’s router software allows a hacker to execute arbitrary code.

The vulnerability of the deviceInfoJsonToBinc function in TP-Link’s router software, the TL-WDR7660, relates to reading data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.5CVSS8.3AI score0.00902EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.3 views

The vulnerability in Adobe Dimension’s 3D design software relates to reading beyond the buffer in memory, allowing an attacker to bypass the ASLR protection mechanism.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...

7.8CVSS5.7AI score0.00325EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder