Lucene search
+L

6355 matches found

Positive Technologies
Positive Technologies
added 2024/01/22 12:00 a.m.10 views

PT-2024-3791 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a function in the Linux kernel's implementation of the Reliable Datagram Sockets RDS protocol. It involves reading memory beyond the allocated buffer, potential...

9.4CVSS6.4AI score
SaveExploits0References21
OSV
OSV
added 2024/01/19 11:06 a.m.12 views

OESA-2024-1086 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A flaw was found in the Bluetooth subsystem of the Linux kernel. A race condition between the btsockrecvmsg and btsockioctl functions could lead to a use-after-free on a socket buffer "skb". This flaw allows a local user to cause...

7.8CVSS6.8AI score0.01657EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:00 a.m.14 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01126EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:00 a.m.22 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01126EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:00 a.m.10 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01126EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:00 a.m.10 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01126EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2024/01/18 12:00 a.m.9 views

Contiki-NG Security Vulnerability

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A security vulnerability exists in Contiki-NG tinyDTLS version 2018-08-30 and prior versions, which stems from a buffer over-read in the dtlssha256update function...

9.1CVSS7.1AI score0.00836EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/01/18 12:00 a.m.10 views

Contiki-NG Security Vulnerability

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A security vulnerability exists in Contiki-NG tinyDTLS version 2018-08-30 and prior versions, which stems from a mishandling of oversized packets in dtlsccmdecryptmessage can lead to...

9.8CVSS6.7AI score0.00658EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:00 a.m.15 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01023EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:00 a.m.9 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01126EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:00 a.m.10 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01126EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:00 a.m.15 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01126EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/17 12:00 a.m.12 views

The vulnerability of D-Link DCS-8300LHV2 Wi-Fi camera software allows a intruder to execute arbitrary code.

The vulnerability of D-Link DCS-8300LHV2 Wi-Fi cameras’ microprogramming software lies in the reading of data outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the syntactic analysis of XML elements...

8CVSS8.1AI score0.01155EPSS
SaveExploits0References5Affected Software1
Gentoo Linux
Gentoo Linux
added 2024/01/16 12:00 a.m.31 views

libuv: Buffer Overread

Background libuv is a multi-platform support library with a focus on asynchronous I/O. Description libuv fails to ensure that a pointer lies within the bounds of a defined buffer in the uvidnatoascii function before reading and manipulating the memory at that address. Impact The overread can resu...

5.3CVSS6.9AI score0.23132EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:00 a.m.38 views

GLSA-202401-23 : libuv: Buffer Overread

The remote host is affected by the vulnerability described in GLSA-202401-23 libuv: Buffer Overread - Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uvidnatoascii is used to convert strings to ASCII. The pointer p is read and increased without checking whether...

5.3CVSS7.1AI score0.23132EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2024/01/15 12:00 a.m.20 views

The vulnerability of the loginAuth function (/cgi-bin/cstecgi.cgi) in the Totolink N350RT router software allows a hacker to execute arbitrary code.

The vulnerability of the loginAuth function /cgi-bin/cstecgi.cgi in the Totolink N350RT router software lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.3CVSS7.7AI score0.01274EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/15 12:00 a.m.9 views

The vulnerability of the main function (/cgi-bin/cstecgi.cgi?action=login&flag=1) of the Totolink N350RT router’s software allows a hacker to execute arbitrary code.

The vulnerability of the main function /cgi-bin/cstecgi.cgi?action=login&flag=1 of the Totolink N350RT router’s software is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

9CVSS7.4AI score0.00903EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/12 12:00 a.m.7 views

The vulnerability of the Kofax PowerPDF software, which is used for creating, converting, editing, and publishing PDF files, relates to the reading of data beyond the specified buffer. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the Kofax PowerPDF software for creating, converting, editing, and publishing PDF files lies in its ability to read data beyond the specified buffer. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created U3D file...

7.8CVSS7.6AI score0.00534EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/01/12 12:00 a.m.12 views

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer boundaries, allowing attackers to exploit this to disclose protected information.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS6AI score0.00288EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/12 12:00 a.m.10 views

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer boundaries, allowing attackers to exploit this to disclose protected information.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS6.1AI score0.00288EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder