Lucene search
K

5828 matches found

BDU FSTEC
BDU FSTEC
added 2021/01/19 12:0 a.m.2 views

The vulnerability of Adobe Illustrator’s graphic editor lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

9.3CVSS8AI score0.02972EPSS
Exploits0References3Affected Software1
Veracode
Veracode
added 2021/01/13 3:41 a.m.20 views

Denial Of Service (DoS)

pillow is vulnerable to denial of service DoS. The vulnerability exists through a buffer overread during the decoding of a PcxImageFile through the value of stride...

7.1CVSS3.3AI score0.01498EPSS
Exploits0References10Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.3 views

The vulnerability in the implementation of the ConvolvePixel() function in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability in the implementation of the ConvolvePixel function in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

9.4CVSS7.9AI score0.18902EPSS
Exploits4References19Affected Software10
OSV
OSV
added 2021/01/12 9:15 p.m.2 views

CVE-2020-26996

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of CG4 files. This could result in a memory access past the end of an allocated buffer. An attacker cou...

8.8CVSS7.4AI score
Exploits0References2
OSV
OSV
added 2021/01/12 9:15 a.m.3 views

ALPINE-CVE-2020-35653

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations...

7.1CVSS8.7AI score0.01498EPSS
Exploits0References1
OSV
OSV
added 2021/01/12 9:15 a.m.5 views

ALPINE-CVE-2020-35655

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

5.4CVSS8.8AI score0.01459EPSS
Exploits0References1
OSV
OSV
added 2021/01/12 9:15 a.m.1 views

DEBIAN-CVE-2020-35655

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

5.4CVSS6.1AI score0.01459EPSS
Exploits0References1
PyPA
PyPA
added 2021/01/12 9:15 a.m.5 views

PYSEC-2021-69

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations...

7.1CVSS7.1AI score0.01498EPSS
Exploits0References4Affected Software1
PyPA
PyPA
added 2021/01/12 9:15 a.m.6 views

PYSEC-2021-71

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

5.8CVSS7.2AI score0.01459EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2021/01/12 9:15 a.m.2 views

UBUNTU-CVE-2020-35653

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations...

7.1CVSS7.1AI score0.01498EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/01/11 12:0 a.m.2 views

Pillow 缓冲区错误漏洞

Pillow is a Python-based image processing library. buffer overflow vulnerability exists in versions of Pillow prior to 8.1.0, which can be exploited by attackers to cause a buffer over read...

7.1CVSS7.1AI score0.01498EPSS
Exploits0References14
OSV
OSV
added 2021/01/08 3:15 p.m.4 views

CVE-2021-1063

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input offset is not validated, which may lead to a buffer overread, which in turn may cause tampering of data, information disclosure, or denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 pri...

7.8CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2021/01/08 3:15 p.m.20 views

CVE-2021-1063

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input offset is not validated, which may lead to a buffer overread, which in turn may cause tampering of data, information disclosure, or denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 pri...

7.8CVSS7.6AI score0.00378EPSS
Exploits0References1
Prion
Prion
added 2021/01/08 3:15 p.m.21 views

Input validation

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input offset is not validated, which may lead to a buffer overread, which in turn may cause tampering of data, information disclosure, or denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 pri...

4.6CVSS7.7AI score0.00378EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/01/08 3:5 p.m.45 views

CVE-2021-1063

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin where an input offset is not validated, causing a buffer overread that can lead to data tampering, information disclosure, or denial of service. Affected are vGPU versions 8.x (before 8.6) and 11.0 (before 11.3). Remediation: upgrade...

7.8CVSS7.7AI score0.00378EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/08 3:5 p.m.28 views

CVE-2021-1063

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input offset is not validated, which may lead to a buffer overread, which in turn may cause tampering of data, information disclosure, or denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 pri...

8.1AI score0.00378EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2021/01/07 8:0 a.m.3 views

The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32 when processing invalid multi-byte input sequences in the EUC-KR encoding may have a buffer over-read.

...

7.1CVSS7AI score0.03538EPSS
Exploits0
OSV
OSV
added 2021/01/04 6:15 p.m.2 views

DEBIAN-CVE-2019-25013

The iconv feature in the GNU C Library aka glibc or libc6 through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read...

5.9CVSS7AI score0.03538EPSS
Exploits0References1
OSV
OSV
added 2021/01/04 6:15 p.m.1 views

UBUNTU-CVE-2019-25013

The iconv feature in the GNU C Library aka glibc or libc6 through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read...

5.9CVSS7.1AI score0.03538EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/01/04 12:0 a.m.5 views

Qualcomm Qualcomm Wlan Firmware Buffer Error Vulnerability

Qualcomm Wlan Firmware is a Bluetooth support firmware from Qualcomm, Inc. A buffer error vulnerability exists in Qualcomm WLAN Firmware, which results in a buffer over-read due to a failure to check the length of incoming messages. The following products and versions are affected: AQT1000, AR803...

7.8CVSS6.9AI score0.00598EPSS
Exploits0References2
Rows per page
Query Builder