Lucene search
K

5807 matches found

BDU FSTEC
BDU FSTEC
added 2023/07/31 12:0 a.m.3 views

The vulnerability of Adobe InDesign’s computer design automation tool, related to reading data outside the buffer in memory, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.1AI score0.00351EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/28 12:0 a.m.2 views

The vulnerability of Adobe InDesign’s computer design automation tool, related to reading data outside the buffer in memory, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.1AI score0.00351EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/26 12:0 a.m.2 views

PT-2023-26309 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. It requires user interaction, such as visiting a malicious page ...

3.3CVSS5.7AI score0.004EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/07/26 12:0 a.m.2 views

PT-2023-26307 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicio...

3.3CVSS5.8AI score0.004EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2023/07/25 12:0 a.m.16 views

Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service (CVE-2018-0310)

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to obtain sensitive information from memory or cause a denial of service DoS condition on the affected product. The vulnerability exists because t...

10CVSS8.5AI score0.04153EPSS
Exploits0References3
OSV
OSV
added 2023/07/24 4:15 p.m.3 views

AZL-27797 CVE-2023-2860 affecting package kernel for versions less than 5.15.126.1-1

An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This fla...

4.4CVSS6.5AI score0.00353EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/07/24 12:0 a.m.3 views

The vulnerability of the `ksmbd_conn_handler_loop()` function in the `fs/smb/server/connection.c` file of the KSMBD file system of the Linux operating system allows a attacker to access protected information or cause service failures.

The vulnerability of the ksmbdconnhandlerloop function in the fs/smb/server/connection.c file of the KSMBD file system of the Linux operating system is related to reading data beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to access protected information or cause...

9.4CVSS6.7AI score0.01059EPSS
Exploits0References20Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/07/24 12:0 a.m.2 views

The vulnerability of the session_user() function in the fs/ksmbd/smb2pdu.c file of the KSMBD file system in the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the sessionuser function in the fs/ksmbd/smb2pdu.c file of the KSMBD file system in the Linux operating system is related to reading data beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to gain access to protected information or cause servic...

9.4CVSS6.8AI score0.02975EPSS
Exploits0References25Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/07/24 12:0 a.m.2 views

The vulnerability of the deassemble_neg_contexts() function in the fs/smb/server/smb2pdu.c file of the KSMBD file system of the Linux operating system allows a attacker to access protected information or cause service failures.

The vulnerability of the deassemblenegcontexts function in the fs/smb/server/smb2pdu.c file of the KSMBD file system of the Linux operating system is related to reading data beyond the allocated buffer. Exploiting this vulnerability could allow an attacker, acting remotely, to gain access to...

9.8CVSS6.7AI score0.01129EPSS
Exploits0References20Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/07/24 12:0 a.m.4 views

The vulnerability of the `ksmbd_conn_handler_loop()` function in the `fs/ksmbd/connection.c` file of the KSMBD file system of the Linux operating system allows a attacker to access protected information or cause service failures.

The vulnerability of the ksmbdconnhandlerloop function in the fs/ksmbd/connection.c file of the KSMBD file system of the Linux operating system is related to access to data beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to gain access to protected information o...

10CVSS6.8AI score0.01077EPSS
Exploits0References25Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/07/24 12:0 a.m.5 views

The vulnerability of the smb2_find_context_vals() function in the fs/ksmbd/oplock.c file of the KSMBD file system in the Linux operating system allows a attacker to gain access to protected information or cause service failures.

The vulnerability of the KSMBD file system in Linux operating systems relates to reading data beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to gain access to protected information or cause service failures...

9.1CVSS6.8AI score0.02435EPSS
Exploits0References25Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.2 views

The vulnerability of the ezxml_parse_str function in the ezXML XML document syntax analysis library allows a attacker to cause a service failure.

The vulnerability of the ezxmlparsestr function in the ezXML XML syntax analysis library involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to cause service failures by using a specially created XML file...

7.8CVSS6.7AI score0.01095EPSS
Exploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.3 views

The vulnerability of the IOSurfaceAccelerator component in iOS, iPadOS, watchOS, and tvOS operating systems allows attackers to gain access to protected information.

The vulnerability of the IOSurfaceAccelerator component in iOS, iPadOS, watchOS, and tvOS operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to access protected information...

5.5CVSS6.1AI score0.0026EPSS
Exploits0References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.3 views

The vulnerability of the ezxml_decode function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmldecode function in the ezXML XML syntax analysis library involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created XML file...

7.8CVSS6.7AI score0.00917EPSS
Exploits1References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.2 views

The vulnerability of the fromNatStaticSetting() function in the microprogramming software for Tenda F1202, FH1202, AC10, AC1206, ACV7, AC5, and AC9 routers allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromNatStaticSetting function in the microprogramming software for Tenda F1202, FH1202, AC10, AC1206, ACV7, AC5, and AC9 lies in the fact that the operation outputs outside the buffer in memory when processing the page parameter. Exploiting this vulnerability allows a...

10CVSS8.4AI score0.00776EPSS
Exploits1References3Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.2 views

The vulnerability of the d_expression_1 function in the libiberty/cp-demangle.c component of the GNU Binutils development environment allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the dexpression1 function in the libiberty/cp-demangle.c component of the GNU Binutils development environment is related to reading data beyond the allowable buffer limits after multiple recursive calls. Exploiting this vulnerability allows an attacker to gain access to...

10CVSS7.1AI score0.01802EPSS
Exploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.1 views

The vulnerability of the QDnsLookup component of the cross-platform framework for Qt software development allows a hacker to induce a service failure.

The vulnerability of the QDnsLookup component of the cross-platform framework for Qt software development relates to reading data from beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending a specially crafted response from...

5.3CVSS6.1AI score0.00805EPSS
Exploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.1 views

The vulnerability of the ezxml_decode function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmldecode function in the ezXML XML syntax analysis library involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created XML file...

7.8CVSS6.7AI score0.01169EPSS
Exploits1References11Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.2 views

The vulnerability of the ezxml_decode function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmldecode function in the ezXML XML syntax analysis library involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created XML file...

7.8CVSS6.7AI score0.01169EPSS
Exploits1References10Affected Software7
OSV
OSV
added 2023/07/18 2:15 p.m.3 views

AZL-43516 CVE-2020-23909 affecting package advancecomp 2.5-1

Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...

7.1CVSS7.2AI score0.00276EPSS
Exploits1References1
Rows per page
Query Builder