Lucene search
+L

6405 matches found

BDU FSTEC
BDU FSTEC
added 2022/01/26 12:00 a.m.16 views

The vulnerability of the professional video editing software Adobe Premiere Pro, related to reading data beyond the buffer in memory, allows attackers to exploit their privileges and gain unauthorized access to protected information.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the reading of data beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected information through a specially...

4.3CVSS5.5AI score0.00258EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/26 12:00 a.m.10 views

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude lies in the reading of data beyond the buffer in memory. This allows attackers to exploit their privileges and gain unauthorized access to protected information.

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected...

4.3CVSS5.7AI score0.00275EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/26 12:00 a.m.13 views

The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Adobe Bridge file manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially created file...

4.3CVSS5.5AI score0.01779EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/26 12:00 a.m.14 views

The vulnerability of the Adobe Media Encoder application, related to reading beyond the buffer in memory, allows attackers to escalate their privileges and gain unauthorized access to protected information.

The vulnerability of the Adobe Media Encoder application relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected information through a specially created MP4 file...

4.3CVSS6.3AI score0.00312EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/26 12:00 a.m.14 views

The vulnerability of the professional video editing software Adobe Premiere Pro, related to reading data beyond the buffer in memory, allows attackers to exploit their privileges and gain unauthorized access to protected information.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected information...

4.3CVSS5.7AI score0.00274EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.16 views

The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as R6400v2, R6700v3, R6900P, R7000, R7000P, RAX200, RAX75, and RAX80 lies in the recording of data beyond the buffer in memory. This allows a malicious actor to execute arbitrary code or cause service failures.

The vulnerability of NETGEAR Wi-Fi router software models such as R6400v2, R6700v3, R6900P, R7000, R7000P, RAX200, RAX75, and RAX80 lies in the writing of data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

7.4CVSS8.3AI score0.0123EPSS
SaveExploits0References3Affected Software8
OSV
OSV
added 2022/01/21 7:15 p.m.10 views

CVE-2022-23130

Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 and prior, Mitsubishi Electric ICONICS Suite versions 10.97 and prior, Mitsubish...

5.5CVSS6.2AI score0.01004EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/01/21 12:00 a.m.13 views

PT-2022-6880 · File +6 · File +6

Name of the Vulnerable Software and Affected Versions: File versions prior to 5.43 Description: The issue is related to a stack-based buffer over-read in the file copystr function in funcs.c, which can lead to a denial of service when a specially crafted file is used. This can be exploited by an...

5.5CVSS8.4AI score0.00677EPSS
SaveExploits1References46
BDU FSTEC
BDU FSTEC
added 2022/01/20 12:00 a.m.14 views

The vulnerability of the t2 encoder in the OpenJPEG library, related to reading data beyond the buffer’s acceptable limits, allows a malicious actor to cause service failures.

The vulnerability of the t2 encoder in the OpenJPEG library for image encoding and decoding involves reading data beyond the acceptable buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.1CVSS6.7AI score0.01443EPSS
SaveExploits0References11Affected Software5
Microsoft CVE
Microsoft CVE
added 2022/01/19 8:00 a.m.11 views

libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c as demonstrated by a stack-based buffer over-read.

...

9.8CVSS8.2AI score0.02937EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2022/01/19 8:00 a.m.7 views

Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest tSmbNtlmAuthChallenge and tSmbNtlmAuthResponse read and write operations as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request.

...

9.8CVSS8.3AI score0.03107EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2022/01/19 12:00 a.m.7 views

bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.

...

7.5CVSS7AI score0.024EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.9 views

The vulnerability of the `ntfsattr_find` and `ntfs_externalattr_find` functions of the NTFS file system driver for the FUSE NTFS-3G module arises from the fact that they involve reading data beyond the allowed buffer limits. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfsattrfind and ntfsexternalattrfind functions of the NTFS file system driver for the FUSE NTFS-3G module lies in the reading of data beyond the allowed limits of the buffer. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its...

7.8CVSS6.6AI score0.00421EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.11 views

The vulnerability of the ntfs_ie_lookup function in the NTFS file system driver for the FUSE NTFS-3G module arises from the reading beyond the allowed buffer data limits. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfsielookup function in the NTFS file system driver for the FUSE NTFS-3G module relates to reading data from beyond the allowed limits of the buffer. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause...

7.8CVSS6.6AI score0.00426EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.12 views

The vulnerability of the `ntfs_runlists_merge_i` function in the NTFS file system driver for the FUSE NTFS-3G module arises from the reading beyond the buffer’s allowed limits. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfsrunlistsmergei function in the NTFS file system driver for the FUSE NTFS-3G module relates to reading data from beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause servi...

7.8CVSS6.8AI score0.00423EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.12 views

The vulnerability of the wireshark traffic analysis program, related to reading data beyond the allowed buffer limits, allows a hacker to cause a service failure.

The vulnerability of the wireshark traffic analysis program lies in reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

5.3CVSS6.5AI score0.02589EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.11 views

The vulnerability of the wireshark traffic analysis program, related to reading data beyond the allowed buffer limits, allows a hacker to cause a service failure.

The vulnerability of the wireshark traffic analysis program lies in reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

7.5CVSS7.1AI score0.03109EPSS
SaveExploits1References8Affected Software4
OSV
OSV
added 2022/01/13 10:15 p.m.12 views

CVE-2021-34942

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score0.02041EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/01/13 10:15 p.m.7 views

CVE-2021-34985

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley ContextCapture 10.18.0.232. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

5.5CVSS4.9AI score0.01699EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/01/13 10:15 p.m.10 views

CVE-2021-34984

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley ContextCapture 10.18.0.232. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

5.5CVSS4.9AI score0.01699EPSS
SaveExploits0References2
Rows per page
Query Builder