Lucene search
+L

4918 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/16 12:00 a.m.•9 views

CVE-2019-14021: Buffer Copy without Checking Size of Input

Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in...

7.8CVSS7.5AI score0.00202EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/04/16 12:00 a.m.•23 views

UltraVNC Code Execution

The vulnerability of the VNC client of the remote desktop management software UltraVNC is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.6AI score0.04434EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/04/16 12:00 a.m.•25 views

UltraVNC RCE

The vulnerability of the Ultra2 decoder in the VNC client software of the remote desktop management tool UltraVNC is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.4AI score0.03129EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/04/16 12:00 a.m.•20 views

UltraVNC Copybuffer Code Execution

The vulnerability of the ClientConnection::Copybuffer function in the VNC client software for remote desktop management, UltraVNC, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

10CVSS8.4AI score0.02838EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/04/14 12:00 a.m.•10 views

WebKit Buffer Overflow

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, watchOS, Safari browser, multimedia player iTunes, and iCloud service arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious...

9.3CVSS7.6AI score0.11113EPSS
SaveExploits2References12Affected Software16
Microsoft KB
Microsoft KB
•added 2020/04/13 2:02 a.m.•64 views

MS03-026: Buffer Overrun in RPC May Allow Code Execution

Technical UpdateSeptember 10, 2003: The following changes were made to this article: Updated the "Security Patch Replacement Information" sections to indicate that this patch has been replaced by 824146 MS03-039. For more information about the 824146 security patch MS03-039, click the following...

0.5AI score
SaveExploits0
Oracle linux
Oracle linux
•added 2020/04/13 12:00 a.m.•45 views

krb5-appl security update

1.0.1-10 - Apply previous patch - Resolves: 1814774 1.0.1-9 - Fix CVE-2020-10188 netclear/nextitem buffer overrun - Resolves: 1814774 1.0.1-8 - bump release number to sort newer than the recent 6.2 update...

10CVSS1.6AI score0.74339EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
•added 2020/04/10 12:00 a.m.•13 views

WebKit Heap Buffer Overflow DoS

The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

9.3CVSS8.1AI score0.02012EPSS
SaveExploits0References10Affected Software15
BDU FSTEC
BDU FSTEC
•added 2020/04/10 12:00 a.m.•10 views

WebKit Heap Buffer Overflow DoS

The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

9.3CVSS7.8AI score0.01839EPSS
SaveExploits0References11Affected Software18
BDU FSTEC
BDU FSTEC
•added 2020/04/10 12:00 a.m.•11 views

WebKit Heap Buffer Overflow DoS

The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

9.3CVSS7.6AI score0.02442EPSS
SaveExploits1References11Affected Software18
BDU FSTEC
BDU FSTEC
•added 2020/04/10 12:00 a.m.•24 views

Google Chrome V8 Script Handler XSS

The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise data integrity, cause service failures, or gain unauthorized access to...

9.3CVSS7.4AI score0.01937EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2020/04/06 12:00 a.m.•18 views

FreeTDS Code Execution

The vulnerability of the FreeTDS library set up on the Ubuntu operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...

10CVSS8.5AI score0.01781EPSS
SaveExploits0References4Affected Software2
RedhatCVE
RedhatCVE
•added 2020/04/05 4:59 a.m.•36 views

CVE-2019-9025

An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mbsplit function in ext/mbstring/phpmbregex.c can cause PHP to execute memcpy with a negative argument, which could read and write past buffers allocated for the data...

9.8CVSS4.5AI score0.03065EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2020/03/25 12:00 a.m.•15 views

Adobe Photoshop Heap Buffer Overflow RCE

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by opening the malicious file...

10CVSS8.6AI score0.0394EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2020/03/25 12:00 a.m.•18 views

Adobe Photoshop Heap Buffer Overflow RCE

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by opening the malicious file...

10CVSS8.6AI score0.0394EPSS
SaveExploits0References3Affected Software2
osv_cve
osv_cve
•added 2020/03/23 6:15 p.m.•21 views

CVE-2020-8875

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS6AI score0.00545EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/03/23 6:15 p.m.•9 views

CVE-2020-8875

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS8.1AI score0.00545EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/03/20 12:00 a.m.•10 views

Intel Trace Analyzer Collector Buffer Overflow

The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS6.4AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/03/20 12:00 a.m.•18 views

Intel Graphics Driver Heap Buffer Overflow Privilege Escalation

The vulnerability of Intel Graphics Drivers drivers arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to increase their privileges or cause service failures...

8.4CVSS6.7AI score0.00327EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/03/20 12:00 a.m.•20 views

Media Foundation Component Data Compromise

The vulnerability of the Media Foundation component in Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, or accessibility of protected informati...

9.3CVSS7.7AI score0.0561EPSS
SaveExploits0References3
Rows per page
Query Builder