Lucene search
+L

6987 matches found

BDU FSTEC
BDU FSTEC
•added 2024/02/14 12:00 a.m.•17 views

Adobe After Effects Buffer Overflow Info Disclosure

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using a specially created AEP file...

5.5CVSS6.2AI score0.00377EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/13 12:00 a.m.•16 views

Adobe Substance 3D Designer Buffer Overflow Information Disclosure

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS6.4AI score0.00341EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/13 12:00 a.m.•20 views

Adaptive Substance 3D Designer Buffer Overflow Information Disclosure

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS6.4AI score0.00319EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/13 12:00 a.m.•22 views

AMI MegaRAC SP-X Software Compromise

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

9.6CVSS8.7AI score0.00308EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/13 12:00 a.m.•19 views

Adobe Substance 3D Designer Buffer Overflow Information Disclosure

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS6.4AI score0.0032EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
•added 2024/02/12 8:38 a.m.•12 views

squid: Buffer over-read in the HTTP Message processing feature

A buffer over-read flaw was found in Squid's HTTP Message processing feature. This issue may allow attackers to perform remote denial of service...

8.6CVSS7AI score0.88144EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2024/02/12 12:00 a.m.•45 views

RHEL 8 : squid:4 (RHSA-2024:0772)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0772 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid: DoS against...

9.8CVSS7.1AI score0.88144EPSS
SaveExploits1References15
BDU FSTEC
BDU FSTEC
•added 2024/02/12 12:00 a.m.•17 views

Totolink N350RT Router Code Execution

The vulnerability of the loginAuth function /cgi-bin/cstecgi.cgi in the Totolink N350RT router software lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.6AI score0.01303EPSS
SaveExploits1References4Affected Software1
SUSE CVE
SUSE CVE
•added 2024/02/09 3:00 a.m.•13 views

SUSE CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.5AI score0.33323EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/02/07 12:00 a.m.•10 views

PT-2024-1550

Name of the Vulnerable Software and Affected Versions ClamAV affected versions not specified Description A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is...

7.8CVSS6.8AI score0.84841EPSS
SaveExploits0References109
BDU FSTEC
BDU FSTEC
•added 2024/02/06 12:00 a.m.•29 views

Apple Neural Engine macOS Code Execution

The vulnerability of Apple Neural Engine in the macOS operating system relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code with root privileges...

7.8CVSS8.7AI score0.00224EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/05 12:00 a.m.•32 views

Tenda W9 httpd Code Execution

The vulnerability of the setWrlBasicInfo function in the httpd component of the wireless access point Tenda W9 microprogramming system involves reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS9.1AI score0.01303EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2024/02/05 12:00 a.m.•35 views

Tenda A15 Web Interface Code Execution

The vulnerability of the web interface for managing wireless access points of the Tenda A15 micro-programming system is related to reading data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using the deviceList argument...

8.3CVSS8.4AI score0.01679EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/05 12:00 a.m.•34 views

Tenda W9 FormQosManage_user Code Execution

The vulnerability of the formQosManageuser function in the httpd microprogramming system for the wireless access point Tenda W9 involves reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS9.1AI score0.01303EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2024/02/05 12:00 a.m.•34 views

Tenda W9 formAddSysLogRule Code Execution

The vulnerability of the formAddSysLogRule function in the wireless access point software Tenda W9 involves reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS9.1AI score0.01303EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2024/02/05 12:00 a.m.•31 views

Tenda W9 FormWifiMacFilterGet Code Execution

The vulnerability of the formWifiMacFilterGet function in the httpd component of the wireless access point Tenda W9 microprogramming system is related to reading data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS9.1AI score0.01303EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2024/02/05 12:00 a.m.•35 views

Tenda W9 Form Offline Set Code Execution

The vulnerability of the formOfflineSet function in the httpd component of the wireless access point Tenda W9 microprogramming system involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS8.4AI score0.00793EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2024/02/05 12:00 a.m.•25 views

Tenda A15 Web Interface Code Execution

The vulnerability in the web interface of the wireless access point Tenda A15 involves reading data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the wpapskcrypto24g argument...

8.3CVSS8.3AI score0.01761EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/05 12:00 a.m.•34 views

Tenda A15 Web Interface Code Execution

The vulnerability of the web interface for managing microprogramming software in the Tenda A15 wireless access point is related to reading data outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.3CVSS8.5AI score0.01679EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/05 12:00 a.m.•32 views

Tenda W9 FormQosManage_auto Code Execution

The vulnerability of the formQosManageauto function in the wireless access point software Tenda W9 relates to reading data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS9.1AI score0.01399EPSS
SaveExploits0References4
Rows per page
Query Builder