Lucene search
+L

6372 matches found

ATTACKERKB
ATTACKERKB
added 2022/09/12 5:15 p.m.7 views

CVE-2022-3178

Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV...

7.8CVSS7.2AI score0.00417EPSS
SaveExploits1References3
OSV
OSV
added 2022/09/12 5:15 p.m.7 views

UBUNTU-CVE-2022-3178

Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV...

7.8CVSS7.1AI score0.00417EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/09/12 12:00 a.m.8 views

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in versions prior to GPAC 2.1.0-DEV, which can be exploited by an attacker to cause a buffer over-read...

7.8CVSS7.6AI score0.00417EPSS
SaveExploits1References3
OSV
OSV
added 2022/09/09 9:15 p.m.11 views

AZL-10925 CVE-2022-40320 affecting package libconfuse for versions less than 3.3-2

cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read...

8.8CVSS7.5AI score0.01142EPSS
SaveExploits1References1
OSV
OSV
added 2022/09/09 9:15 p.m.3 views

DEBIAN-CVE-2022-40320

cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read...

8.8CVSS8.2AI score0.01142EPSS
SaveExploits1References1
OSV
OSV
added 2022/09/09 9:15 p.m.11 views

AZL-34910 CVE-2022-40320 affecting package libconfuse for versions less than 3.3-2

cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read...

8.8CVSS7.5AI score0.01142EPSS
SaveExploits1References1
Huntr
Huntr
added 2022/09/07 6:53 a.m.26 views

Buffer Over Read in gf_utf8_wcslen

Description Buffer Over Read in function gfutf8wcslen at gpac/src/utils/utf.c:442 . gpac version git log commit fc4749f9ce8d6ddf50d1f1104366cdacede14d33 grafted, HEAD - master, origin/master, origin/HEAD Author: Aurelien David Date: Mon Aug 1 06:44:34 2022 -0700 fix quickjs build on osx 10.12 222...

4.4CVSS7.6AI score0.00417EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2022/08/29 12:00 a.m.20 views

The vulnerability of the PDF-XChange PDF document viewing and editing program lies in the fact that operations outside the buffer are allowed in memory when processing Collab objects, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the fact that operations may go beyond the buffer in memory when processing Collab objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malware fil...

10CVSS7.9AI score0.00777EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2022/08/29 12:00 a.m.6 views

LibTIFF 缓冲区错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for processing TIFF files. libTIFF suffers from a security vulnerability that stems from the lack of proper validation of user-supplied data by extractImageSection...

5.5CVSS6.5AI score0.00566EPSS
SaveExploits1References12
OSV
OSV
added 2022/08/27 6:15 a.m.10 views

ALPINE-CVE-2019-15167

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint for VRRP version 3, a different vulnerability than CVE-2018-14463...

9.1CVSS7.7AI score0.01022EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/08/27 5:47 a.m.4 views

CVE-2019-15167

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint for VRRP version 3, a different vulnerability than CVE-2018-14463...

7.3AI score0.01022EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/26 11:05 a.m.12 views

OESA-2022-1866 redis6 security update

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

4.3CVSS6.9AI score0.01831EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/26 11:05 a.m.3 views

OESA-2022-1865 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

7.8CVSS6.7AI score0.00528EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/25 8:15 p.m.6 views

UBUNTU-CVE-2020-27796

A heap-based buffer over-read was discovered in the invertptdynamic function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

7.8CVSS7.3AI score0.00335EPSS
SaveExploits2References4
OSV
OSV
added 2022/08/25 8:15 p.m.9 views

UBUNTU-CVE-2020-27800

A heap-based buffer over-read was discovered in the getle32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...

7.8CVSS7.3AI score0.00326EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2022/08/25 12:00 a.m.17 views

The vulnerability of the Cisco Discovery protocol’s implementation in NX-OS and FXOS operating systems allows a perpetrator to execute arbitrary code with root privileges or cause a service failure.

The vulnerability of the Cisco Discovery protocol’s implementation in NX-OS and FXOS operating systems relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code with root privileges or cause service failures...

9.6CVSS6.2AI score0.00396EPSS
SaveExploits0References1Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/08/24 12:00 a.m.13 views

The vulnerability of the HCI interface, which operates on the Modbus TCP protocol, and the programmable logic controllers Hitachi Energy RTU500, allows a intruder to trigger a service failure or cause the device to restart.

The vulnerability of the HCI interface, which operates on the Modbus TCP protocol, and the Hitachi Energy RTU500 programmable logic controllers is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause service failures or trigg...

7.8CVSS7.4AI score0.00636EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/19 12:00 a.m.11 views

The vulnerability of the microprogramming software of the POWER METER SICAM Q100 lies in the reading of data beyond the buffer in memory, allowing an intruder to execute arbitrary code.

The vulnerability of the microprogramming software of the POWER METER SICAM Q100 relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.7AI score0.02587EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/18 12:00 a.m.12 views

The vulnerability of the bpf_prog_test_run_skb function (test_run.c) in the Android operating system’s kernel allows a hacker to disclose sensitive information that should be protected.

The vulnerability of the bpfprogtestrunskb function testrun.c in the Android operating system stems from reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...

4.6CVSS6.6AI score0.00153EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/18 12:00 a.m.13 views

PT-2022-23952 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

5.5CVSS7AI score0.00736EPSS
SaveExploits0References3
Rows per page
Query Builder