Lucene search
K

4212 matches found

BDU FSTEC
BDU FSTEC
added 2021/11/10 12:0 a.m.3 views

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco Small Business 220 router software allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Small Business 220 router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary...

8.8CVSS8.4AI score0.00504EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:0 a.m.1 views

The vulnerability of the Fatek Automation Communication Server arises from operations that go beyond the buffer boundaries in memory, allowing attackers to cause service failures or execute arbitrary code.

The vulnerability of the Fatek Automation Communication Server lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code by sending specially crafted requests...

10CVSS8.6AI score0.01758EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2021/11/08 6:15 a.m.3 views

AZL-79102 CVE-2021-41771 affecting package golang 1.25.7-1

ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation...

7.5CVSS6.7AI score0.04372EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/11/05 12:0 a.m.33 views

Amazon Linux 2 : openssl (ALAS-2021-1721)

The version of openssl installed on the remote host is prior to 1.0.2k-19. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1721 advisory. It was found that openssl assumed ASN.1 strings to be NUL terminated. A malicious actor may be able to force an application into...

7.4CVSS6.6AI score0.50445EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.2 views

The vulnerability of the reading mode in Google Chrome’s web browser involves writing beyond the buffer in memory, allowing an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome web browser’s reading mode is related to writing beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a specially created...

8.8CVSS7.8AI score0.01343EPSS
Exploits1References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.3 views

The vulnerability of the QEMU hardware emulation API, related to writing beyond the buffer boundaries, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation API is related to an initialization error in the memory region cache. Exploiting this vulnerability can allow an attacker to cause a system failure...

4CVSS6.9AI score0.0036EPSS
Exploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.4 views

The vulnerability of the TabStrip control element in Google Chrome web browsers involves an operation that goes beyond the acceptable buffer data limit. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the TabStrip control element in Google Chrome browsers relates to the execution of operations that exceed the allowed buffer data limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

8.8CVSS8AI score0.00839EPSS
Exploits1References10Affected Software5
OSV
OSV
added 2021/10/28 10:13 p.m.3 views

CLSA-2021-1635459208 Fix CVE(s): CVE-2021-25217

SECURITY UPDATE: buffer overrun in common code parseX - debian/patches/CVE-2021-25217.patch: fix incorrect order of operations in common/parse.c. - CVE-2021-25217...

7.4CVSS6AI score0.06118EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2021/10/28 12:0 a.m.304 views

F5 Networks BIG-IP : OpenSSL vulnerability (K19559038)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K19559038 advisory. ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the...

7.4CVSS7AI score0.50445EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.2 views

The vulnerability in the `hw/net/tulip.c` component of the QEMU hardware emulation software involves writing beyond the buffer boundaries. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the hw/net/tulip.c component of the QEMU hardware emulation software involves writing beyond the buffer boundaries during copy operations for TX/RX data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, a...

6.8CVSS7.2AI score0.01921EPSS
Exploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.3 views

The vulnerability of the filter_intra component in the Ffmpeg library, related to writing beyond the buffer boundary, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the filterintra component in the Ffmpeg library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS7.3AI score0.01735EPSS
Exploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.4 views

The vulnerability of the WebAudio component in the Google Chrome web browser, related to the occurrence of operations beyond the buffer boundaries in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebAudio component in the Google Chrome web browser is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptio...

8.8CVSS8AI score0.01181EPSS
Exploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.4 views

The vulnerability of the Media Feeds component in the Google Chrome web browser involves an operation that goes beyond the acceptable data buffer limits. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Media Feeds component in the Google Chrome web browser relates to the execution of operations beyond the allowed data buffer limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

8.8CVSS8AI score0.00965EPSS
Exploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.3 views

The vulnerability of the library for reading, creating, and editing DjVu files, DjVuLibre, is related to reading data beyond the allowed buffer limits, allowing an intruder to cause a service failure.

The vulnerability of the library for viewing, creating, and editing DjVu files in DjVuLibre is related to the lack of checks for zero bytes. Exploiting this vulnerability could allow a malicious actor to cause service failures...

6.5CVSS6AI score0.01573EPSS
Exploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.3 views

The vulnerability of the History component in the Google Chrome web browser, related to writing beyond the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the History component in the Google Chrome web browser is related to writing beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a special...

8.8CVSS7.8AI score0.01343EPSS
Exploits1References9Affected Software5
CNNVD
CNNVD
added 2021/10/27 12:0 a.m.5 views

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects "AE" is a graphics video processing software from Adobe for organizations involved in design and video special effects, including television stations, animation production companies, personal post-production studios, and multimedia studios. Effects 18.4.1 and earlier versions...

9.3CVSS6.4AI score0.02315EPSS
Exploits0References4
OSV
OSV
added 2021/10/22 5:9 p.m.5 views

CLSA-2021-1634922551 Fixed CVE-2021-25217 in dhcp

CVE-2021-25217: avoid buffer overrun...

7.4CVSS7.2AI score0.06118EPSS
Exploits1References1
OSV
OSV
added 2021/10/19 3:15 p.m.0 views

UBUNTU-CVE-2021-3746

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerabili...

6.5CVSS6.9AI score0.00894EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/10/14 12:0 a.m.10 views

PT-2022-4748 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw was found in the sctp make strreset req function in net/sctp/sm make chunk.c in the SCTP network protocol. This issue is related to an attempt to use more buffer than is...

9.8CVSS7.5AI score0.89063EPSS
Exploits336References1612
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.4 views

The vulnerability of the Bluetooth Classic environment for developing IoT applications allows a intruder to trigger a service failure.

The vulnerability in the Bluetooth Classic environment for IoT application development, espressif esp-idf, relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure using a specially crafted LMP package...

6.5CVSS5.7AI score
Exploits0References2Affected Software1
Rows per page
Query Builder