Lucene search
K

4206 matches found

BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.3 views

The vulnerability of Adobe Illustrator CC 2020, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe Illustrator CC 2020 is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by opening a malicious file...

10CVSS8AI score0.0334EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.2 views

Vulnerabilities of operating systems such as iOS, tvOS, macOS, watchOS, the browser Safari, the multimedia player iTunes for Windows operating systems, and the iCloud service for Windows operating systems, related to the execution of operations beyond the buffer in memory, allowing attackers to execute arbitrary code.

Vulnerabilities of operating systems such as iOS, tvOS, macOS, watchOS, the browser Safari, the multimedia player iTunes for operating systems Windows, and the iCloud service for operating systems Windows are related to the execution of operations outside of the buffer in memory. Exploitation of...

10CVSS8AI score0.01855EPSS
Exploits0References11Affected Software12
BDU FSTEC
BDU FSTEC
added 2020/05/13 12:0 a.m.2 views

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine for Windows operating systems arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.6AI score0.11685EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/05/13 12:0 a.m.2 views

The vulnerability of the hpack_dht_insert function in the HAProxy networking software library, located in the hpack-tbl.c file, allows for unauthorized access to confidential data by exceeding the allowed buffer size. This vulnerability enables attackers to cause service failures or compromise data integrity.

The vulnerability of the hpackdhtinsert function in the HAProxy networking software library is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service failure...

9CVSS7.7AI score0.60727EPSS
Exploits0References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.18 views

The vulnerability of the GDI component in Windows operating systems, which allows a hacker to execute arbitrary code

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or...

9.3CVSS8.4AI score0.16701EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.3 views

The vulnerability of the Windows Codecs Library component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Codecs Library component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.01979EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.2 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine, related to the execution of operations beyond the buffer in memory, allows attackers to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to incorrect implementation of the engine. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.1CVSS7AI score0.02861EPSS
Exploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.2 views

The vulnerability of the Windows Jet Database Engine database management system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine database management system in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.3CVSS7.7AI score0.11685EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2020/05/06 12:2 p.m.43 views

Security Bulletin: Vulnerability in curl affects IBM Cloud Pak System (CVE-2018-14618)

Summary Vulnerability is identified in curl used in Cloud Pak System. Cloud Pak System has addressed the vulnerability. Vulnerability Details CVEID: CVE-2018-14618 DESCRIPTION: curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function...

10CVSS0.4AI score0.10823EPSS
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:0 a.m.1 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to an operation that goes beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability cou...

9.3CVSS8.1AI score0.05569EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:0 a.m.3 views

Vulnerabilities of operating systems iOS, iPadOS, tvOS, watchOS, and the browser Safari, as well as the multimedia player iTunes for Windows operating systems, arise due to operations that go beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of operating systems iOS, iPadOS, tvOS, watchOS, and the web browser Safari, as well as the multimedia player iTunes for Windows operating systems, arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to...

9.3CVSS7.2AI score0.01906EPSS
Exploits0References11Affected Software13
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.3 views

The vulnerability of the lbs_ibss_join_existing function (drivers/net/wireless/marvell/libertas/cfg.c) in the Marvell WiFi kernel driver for the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the lbsibssjoinexisting function drivers/net/wireless/marvell/libertas/cfg.c in the Marvell WiFi kernel driver for the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential...

10CVSS7.2AI score0.02909EPSS
Exploits0References53Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/04/17 12:0 a.m.3 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

9.3CVSS7.5AI score0.01747EPSS
Exploits0References13Affected Software18
NVD
NVD
added 2020/04/16 11:15 a.m.11 views

CVE-2019-14021

Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in...

7.8CVSS7.8AI score0.00203EPSS
Exploits0References1
CVE
CVE
added 2020/04/16 10:46 a.m.56 views

CVE-2019-14021

CVE-2019-14021 is a buffer overrun in Qualcomm Snapdragon components triggered during EFS filename and payload processing over the diag interface due to missing length checks. This affects a wide range of Snapdragon products (e.g., APQ8096AU/APQ8098, MDM9150/MDM9206/MDM9607/MDM9640/MDM9650, MSM89...

7.8CVSS7.8AI score0.00203EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/04/16 10:46 a.m.24 views

CVE-2019-14021

Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in...

7.9AI score0.00203EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:0 a.m.4 views

The vulnerability of the Ultra2 decoder in the VNC client software for remote desktop management tools called UltraVNC allows a hacker to execute arbitrary code.

The vulnerability of the Ultra2 decoder in the VNC client software of the remote desktop management tool UltraVNC is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.4AI score0.03129EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:0 a.m.2 views

The vulnerability of the VNC client of the remote desktop management software UltraVNC allows a hacker to execute arbitrary code.

The vulnerability of the VNC client of the remote desktop management software UltraVNC is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.6AI score0.04434EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:0 a.m.3 views

The vulnerability of the ClientConnection::Copybuffer function in the VNC client of the remote desktop control software UltraVNC allows a hacker to execute arbitrary code.

The vulnerability of the ClientConnection::Copybuffer function in the VNC client software for remote desktop management, UltraVNC, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

10CVSS8.4AI score0.02838EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.3 views

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, watchOS, Safari browser, multimedia player iTunes, and iCloud service arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, watchOS, Safari browser, multimedia player iTunes, and iCloud service arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious...

9.3CVSS7.6AI score0.11064EPSS
Exploits1References12Affected Software16
Rows per page
Query Builder