Lucene search
K

5828 matches found

BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.4 views

The vulnerability of the downsample_row_box_filterf function in the poppler/CairoRescaleBox.cc library for displaying PDF files allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the downsamplerowboxfilterf function in the poppler/CairoRescaleBox.cc library, which is used for displaying PDF files, involves reading data beyond the allowable buffer size. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its...

9.8CVSS6.9AI score0.03518EPSS
Exploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.7 views

The vulnerability of the PRIMARY_DRAWING_ORDER_FIELD_BYTES function in the FreeRDP remote desktop protocol implementation involves reading data beyond the allowed buffer limit. This allows attackers to access confidential data and cause service interruptions.

The vulnerability of the PRIMARYDRAWINGORDERFIELDBYTES function in the FreeRDP remote desktop protocol implementation is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service interruptions...

5.5CVSS7.1AI score0.01457EPSS
Exploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.2 views

The vulnerability of the RLEDECOMPRESS component in the FreeRDP remote desktop protocol allows a intruder to gain access to confidential data and also trigger a service failure.

The vulnerability of the RLEDECOMPRESS component in the FreeRDP remote desktop protocol is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and also cause service failures...

6.5CVSS7.2AI score0.01837EPSS
Exploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.5 views

The vulnerability of the `static ptrdiff_t finderrfunc` function in the `src/lj_err.c` file of the LuaJIT compiler, a programming language for Lua. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the static ptrdifft finderrfunc function in the src/ljerr.c file of the LuaJIT compiler for the Lua programming language is related to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.5CVSS7.4AI score0.02862EPSS
Exploits1References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.2 views

The vulnerability of the glyph_cache_put component in the implementation of the remote desktop protocol FreeRDP, related to reading data beyond the buffer’s acceptable limits, allows an intruder to access confidential data and also causes a service failure.

The vulnerability of the glyphcacheput component in the implementation of the remote desktop protocol FreeRDP is related to reading data from a buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data and also cause service...

5.8CVSS7.5AI score0.01666EPSS
Exploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.6 views

The vulnerability of the ati_mm_read function in hw/display/ati.c of the QEMU hardware emulation software allows a hacker to induce a service failure.

The vulnerability of the atimmread function in the hw/display/ati.c file of the QEMU hardware emulation software is related to reading data beyond the acceptable buffer limits. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS6.9AI score0.00398EPSS
Exploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.3 views

The vulnerability of the TrioParse component in the implementation of the remote desktop protocol FreeRDP allows a perpetrator to gain access to confidential data and also trigger a service failure.

The vulnerability of the TrioParse component in the FreeRDP remote desktop protocol lies in its ability to read data from a buffer beyond acceptable limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data and also cause service failures...

6.5CVSS7.5AI score0.01848EPSS
Exploits0References13Affected Software5
OSV
OSV
added 2021/03/12 1:15 a.m.0 views

UBUNTU-CVE-2020-36281

Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c...

7.5CVSS6AI score0.02866EPSS
Exploits1References5
OSV
OSV
added 2021/03/12 12:15 a.m.1 views

DEBIAN-CVE-2020-36278

Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c...

7.5CVSS7.6AI score0.02871EPSS
Exploits1References1
OSV
OSV
added 2021/03/12 12:15 a.m.1 views

UBUNTU-CVE-2020-36278

Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c...

7.5CVSS6AI score0.02871EPSS
Exploits1References5
OSV
OSV
added 2021/03/12 12:15 a.m.1 views

UBUNTU-CVE-2020-36280

Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c...

7.5CVSS7.3AI score0.02356EPSS
Exploits1References5
CNNVD
CNNVD
added 2021/03/11 12:0 a.m.5 views

Dan Bloomberg Leptonica 缓冲区错误漏洞

Dan Bloomberg Leptonica is a Dan Bloomberg open source application. It provides basic image processing and image analysis operations. A security vulnerability exists in Leptonica before 1.80.0, which stems from adaptmap reg.c and adaptmap.c and results in a heap-based buffer overread...

7.5CVSS7.4AI score0.02574EPSS
Exploits1References12
Positive Technologies
Positive Technologies
added 2021/03/11 12:0 a.m.2 views

PT-2021-4617 · Leptonica +1 · Leptonica +1

Name of the Vulnerable Software and Affected Versions: Leptonica versions prior to 1.80.0 Description: The issue is related to a heap-based buffer over-read in the findNextBorderPixel function in ccbord.c. This can potentially allow a remote attacker to cause a denial of service. Recommendations:...

7.8CVSS7.7AI score0.02871EPSS
Exploits4References49
OSV
OSV
added 2021/03/05 11:2 a.m.3 views

OESA-2021-1070 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. Security Fixes: In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file...

7.1CVSS7.5AI score0.01498EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:0 a.m.5 views

The vulnerabilities of the 3D model rendering software programs Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, and Luxion KeyVR allow attackers to execute arbitrary code.

The vulnerability of the 3D model rendering software programs Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, and Luxion KeyVR lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code during the...

7.8CVSS7.8AI score0.0208EPSS
Exploits0References3Affected Software4
CNNVD
CNNVD
added 2021/03/01 12:0 a.m.4 views

Qualcomm 封闭源组件安全漏洞

A security vulnerability exists in the Qualcomm Closed Source component that stems from the absence of a NULL termination check on the SDP, where a buffer over-read may occur when parsing received SDP values...

9.1CVSS8.5AI score0.00959EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/03/01 12:0 a.m.4 views

Qualcomm 封闭源组件安全漏洞

The Qualcomm component is a component of Qualcomm Incorporated Qualcom. Intrinsic components that provide Qualcomm devices A security vulnerability exists in the Qualcomm Closed Source Component that stems from improper length checking and buffer over-reading when processing maximum length MT SMS...

9.1CVSS8.4AI score0.00918EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:0 a.m.6 views

The vulnerability of Adobe Audition for Windows and macOS, related to reading data beyond the buffer in memory, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Adobe Audition for Windows and macOS relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.1CVSS5.7AI score0.02873EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/11 12:0 a.m.5 views

The vulnerability of Adobe Premiere Pro’s nonlinear video editing software, related to reading beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Premiere Pro’s nonlinear video editing software is related to reading data beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.1CVSS5.7AI score0.02677EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/11 12:0 a.m.4 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

7.1CVSS6.1AI score0.02812EPSS
Exploits0References3
Rows per page
Query Builder