Lucene search
K

5828 matches found

CNNVD
CNNVD
added 2021/01/04 12:0 a.m.7 views

Qualcomm Wlan Firmware Buffer Error Vulnerability

Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. A buffer error vulnerability exists in Qualcomm WLAN Firmware that originates from a buffer over-read that occurs if the length of the IE is less than the length of the accessed frame pointer when processing a...

9.4CVSS7AI score0.00796EPSS
Exploits0References3
OSV
OSV
added 2021/01/02 12:0 p.m.20 views

RUSTSEC-2021-0008 reading on uninitialized buffer can cause UB (`impl<R> BufRead for GreedyAccessReader<R>`)

Affected versions of this crate creates an uninitialized buffer and passes it to user-provided Read implementation. This is unsound, because it allows safe Rust code to exhibit an undefined behavior read from uninitialized memory. The flaw was corrected in version 0.1.1 by zero-initializing a new...

9.1CVSS9.2AI score0.01642EPSS
Exploits1References3
OSV
OSV
added 2020/12/31 1:15 a.m.1 views

DEBIAN-CVE-2020-11947

iscsiaioioctlcb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker...

3.8CVSS6.5AI score0.00463EPSS
Exploits0References1
CNNVD
CNNVD
added 2020/12/30 12:0 a.m.4 views

Huawei CloudEngine Buffer Error Vulnerability

Huawei CloudEngine 12800 and others are products of Huawei, China.Huawei CloudEngine 12800 is a 12800 series data center switch.Huawei Cloudengine 5800 is a 5800 series data center switch.Huawei Cloudengine 6800 is a 6800 series data center switch. A buffer error vulnerability exists in Huawei...

6.5CVSS5.9AI score0.00332EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/12/24 12:0 a.m.2 views

The vulnerability of the urldecode() function in the PHP programming language, related to reading beyond the allowable buffer data limits, allows attackers to gain access to protected information.

The vulnerability of the urldecode function in the PHP programming language is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to gain access to protected information...

7.5CVSS6.7AI score0.04311EPSS
Exploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.5 views

The vulnerability of the Data-Loss-Prevention module in the Clam Antivirus antivirus software allows a hacker to trigger a service failure.

The vulnerability of the Data-Loss-Prevention module in the Clam Antivirus antivirus software relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending a specially crafted email message...

7.8CVSS7.7AI score0.02604EPSS
Exploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:0 a.m.3 views

The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user...

10CVSS7.8AI score0.04438EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:0 a.m.3 views

The vulnerability of the cloud-based video editing, annotation, and format conversion application Adobe Prelude lies in the reading of data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the cloud-based video editing, annotation, and format conversion application Adobe Prelude lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current...

7.8CVSS6.4AI score0.04848EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2020/12/16 2:15 p.m.1 views

UBUNTU-CVE-2020-29362

An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte array through a serialized PKCS11 function call, the receiving...

5.3CVSS6.9AI score0.02261EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/12/15 2:59 p.m.4 views

kernel: Buffer over-read in crypto_authenc_extractkeys() when a payload longer than 4 bytes is not aligned.

A buffer over-read flaw was found in cryptoauthencextractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. When a payload longer than 4 bytes, and is not following 4-byte alignment boundary guidelines, it causes a buffer over-read threat, leading to a system crash...

5.5CVSS7.2AI score0.00491EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2020/12/15 12:0 a.m.3 views

The vulnerability of the Adobe Media Encoder application, related to reading beyond the buffer in memory, allows an attacker to disclose protected information or cause service failures.

The vulnerability of the Adobe Media Encoder application relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

8.8CVSS7.2AI score0.02244EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2020/12/14 12:0 a.m.3 views

P11-glue P11-kit Buffer Error Vulnerability

P11-glue P11-kit is a utility software for loading and enumerating PKCS modules by the individual developer of P11-glue. A buffer error vulnerability exists in P11-glue P11-kit server/remote versions 0.23.6 through 0.23.21, which stems from a heap-based buffer over-read found in the RPC protocol...

5.3CVSS6.7AI score0.02261EPSS
Exploits0References36
BDU FSTEC
BDU FSTEC
added 2020/12/08 12:0 a.m.3 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows attackers to disclose protected information or cause service failures.

The vulnerability of the Adobe Framemaker desktop publishing system relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

8.8CVSS6.8AI score0.02747EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/08 12:0 a.m.3 views

The vulnerability of the Adobe Media Encoder application, related to reading beyond the buffer in memory, allows an attacker to disclose protected information or cause service failures.

The vulnerability of the Adobe Media Encoder application relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

8.8CVSS7.2AI score0.02244EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.6 views

Multiple Qualcomm Products Input Validation Error Vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. It is a way of miniaturizing circuitry mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. An input validation error vulnerability exists in several Qualcomm...

9.8CVSS7.5AI score0.00911EPSS
Exploits0References4
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.3 views

Buffer Error Vulnerability in Multiple Qualcomm Products

A Qualcomm chip is a chip from Qualcomm Incorporated USA. It is a way of miniaturizing circuitry mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. A buffer error vulnerability exists in several Qualcomm products, which...

10CVSS7.4AI score0.01054EPSS
Exploits0References4
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.5 views

Buffer Error Vulnerability in Multiple Qualcomm Products

A Qualcomm chip is a chip from Qualcomm Incorporated USA. a way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. A buffer error vulnerability exists in multiple Qualcomm products...

7.5CVSS7.3AI score0.00778EPSS
Exploits0References4
CNNVD
CNNVD
added 2020/12/04 12:0 a.m.5 views

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in previous versions of Google Chrome 87.0.4280.88 that originates from reading the web beyond boundaries. A remote attacker can exploit the vulnerability to obtain potentially sensitive information...

8.1CVSS7.3AI score0.0209EPSS
Exploits0References8
Microsoft CVE
Microsoft CVE
added 2020/12/03 8:0 a.m.2 views

A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory aka CID-6735b4632def.

...

6.1CVSS8.3AI score0.00374EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2020/12/01 12:5 p.m.5 views

oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c

An out-of-bounds read vulnerability was found in Oniguruma in the way it handled regular expression quantifiers. A remote attacker could abuse this flaw by providing a malformed regular expression that, when processed by an application linked to Oniguruma, could possibly crash the application,...

7.5CVSS7.4AI score0.06889EPSS
Exploits1References4
Rows per page
Query Builder