Lucene search
K

5807 matches found

BDU FSTEC
BDU FSTEC
added 2023/09/16 12:0 a.m.1 views

The vulnerability of the hostapd.cpp component in the Android operating system, related to reading beyond the buffer in memory, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the hostapd.cpp component in the Android operating system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.6CVSS5.7AI score0.00093EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:0 a.m.1 views

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which involves reading beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the libwebp library for encoding and decoding WebP images involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.99739EPSS
Exploits9References25Affected Software18
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:0 a.m.2 views

The vulnerability of the web interface of microprogramming software for Cisco RV110W, RV130, RV130W, and RV215W allows a hacker to execute arbitrary code.

The vulnerability of the web interface of microprogramming software for Cisco RV110W, RV130, RV130W, and RV215W lies in the reading of data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.00773EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/09/12 12:0 a.m.3 views

PT-2023-28266 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this issue, where the...

3.3CVSS7.6AI score0.00409EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/09/12 12:0 a.m.2 views

PT-2023-28263 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this, where the target...

7.1CVSS7.7AI score0.00437EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.2 views

The vulnerability of the Exiv2::Jp2Image::printStructure function in the metadata management library for media files allows a attacker to perform a denial-of-service attack.

The vulnerability of the Exiv2::Jp2Image::printStructure function in the Exiv2 data management library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a denial-of-service attack...

5.5CVSS6.7AI score0.00984EPSS
Exploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.2 views

The vulnerability of the image.cpp component in the Exiv2 media metadata management library allows a attacker to cause a service failure.

The vulnerability of the image.cpp component in the Exiv2 metadata management library involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

9.4CVSS7.7AI score0.019EPSS
Exploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.2 views

The vulnerability of the Exiv2::Jp2Image::encodeJp2Header function in the Exiv2 metadata management library allows a perpetrator to cause service interruptions.

The vulnerability of the Exiv2::Jp2Image::encodeJp2Header function in the Exiv2 metadata management library involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00984EPSS
Exploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.3 views

The vulnerability of the Exiv2 metadata management library, related to reading beyond the buffer in memory, allows a attacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS6.7AI score0.01571EPSS
Exploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:0 a.m.6 views

The vulnerability of the tiffcrop utility (tools/tiffcp.c:948) in the libtiff library, which allows a hacker to cause a service failure

The vulnerability of the tiffcrop utility tools/tiffcp.c:948 in the libtiff library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00425EPSS
Exploits1References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:0 a.m.3 views

The vulnerability of the `writeSingleSection` function in the libtiff library allows a hacker to trigger a service failure.

The vulnerability of the writeSingleSection function in the LibTIFF library involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

10CVSS6.9AI score0.00949EPSS
Exploits1References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:0 a.m.4 views

The vulnerability of the JT Utilities and JT Open Toolkit (JTTK) application development tools, as well as the 3D geometric modeling tool Parasolid, stems from the ability to read data beyond the buffer limit in memory. This vulnerability allows attackers to execute arbitrary code.

The vulnerabilities of the JT Utilities and JT Open Toolkit JTTK application development tools, as well as the 3D geometric modeling tool Parasolid, are related to the ability to read data beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow attackers to execute...

7.8CVSS7.8AI score0.00202EPSS
Exploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:0 a.m.2 views

The vulnerability of the extractimagesection function in the libtiff library allows a hacker to disclose protected information or cause service failures.

The vulnerability of the extractimagesection function in the libtiff library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information or cause service failures...

6.1CVSS6.7AI score0.00388EPSS
Exploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:0 a.m.4 views

The vulnerability of Parasolid’s 3D geometric modeling tool and Teamcenter Visualization’s product lifecycle management system allows attackers to trigger service interruptions or perform remote code execution within the context of the current process.

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization lifecycle management system lies in the ability to read data beyond the buffer limit when analyzing specially created XT files. Exploiting this vulnerability can allow attackers to trigger service failure...

7.8CVSS8.1AI score0.00195EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:0 a.m.3 views

The vulnerability of the tiffcrop utility (tools/tiffcrop.c:3488) in the libtiff library, which allows a hacker to cause a service failure.

The vulnerability of the tiffcrop utility tools/tiffcrop.c:3488 in the libtiff library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.9AI score0.00421EPSS
Exploits1References15Affected Software6
OSV
OSV
added 2023/09/08 10:26 p.m.3 views

USN-6338-2 linux-gcp, linux-gcp-6.2, linux-ibm, linux-oracle, linux-starfive vulnerabilities

Zi Fan Tan discovered that the binder IPC implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-21255 It was discovered that a race condition existed in th...

9.8CVSS7AI score0.0406EPSS
Exploits0References12
Positive Technologies
Positive Technologies
added 2023/09/08 12:0 a.m.4 views

PT-2023-28246 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

5.5CVSS7AI score0.00391EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/08 12:0 a.m.2 views

The vulnerability of the file_copystr function in func.sjw allows a attacker to cause a service failure.

The vulnerability of the filecopystr function in func.sjw, a utility for determining the type of given files, involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created file...

5.5CVSS6.8AI score0.00656EPSS
Exploits1References7Affected Software4
CNNVD
CNNVD
added 2023/09/05 12:0 a.m.4 views

Qualcomm Chipsets Buffer Error Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets suffer from a security vulnerability that stems from an over-read of a buffer in the modem that results in memory corruption...

7.8CVSS7AI score0.00109EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/09/05 12:0 a.m.1 views

The vulnerability of the glGetProgramiv function in Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the glGetProgramv function in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

7.5CVSS7.7AI score0.00756EPSS
Exploits0References9Affected Software8
Rows per page
Query Builder