Lucene search
K

4205 matches found

Vulnrichment
Vulnrichment
added 2024/12/02 1:44 p.m.1 views

CVE-2024-53106 ima: fix buffer overrun in ima_eventdigest_init_common

In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in imaeventdigestinitcommon Function imaeventdigestinit calls imaeventdigestinitcommon with HASHALGOLAST which is then used to access the array hashdigestsize leading to buffer overrun. Have a conditional...

7.8AI score0.0002EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2024/12/02 1:44 p.m.12 views

CVE-2024-53106

In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in imaeventdigestinitcommon Function imaeventdigestinit calls imaeventdigestinitcommon with HASHALGOLAST which is then used to access the array hashdigestsize leading to buffer overrun. Have a conditional...

7.8CVSS6.2AI score0.0002EPSS
Exploits0
OSV
OSV
added 2024/11/28 12:15 a.m.2 views

CVE-2024-11794

Fuji Electric Monitouch V-SFT V10 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in th...

7.8CVSS7.5AI score0.00457EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/27 12:0 a.m.2 views

The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bpf component in the Linux operating system’s kernel arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

6.6CVSS6.4AI score0.00017EPSS
Exploits0References20Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.3 views

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created PAR file...

7.8CVSS8.3AI score0.00176EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.2 views

The vulnerability of the MDP package for the operating system of industrial personal computers TwinCAT/BSD, related to operations beyond the buffer in memory, allows attackers to exploit their privileges, execute arbitrary code, or cause system failures.

The vulnerability of the MDP package for the operating system of industrial personal computers TwinCAT/BSD relates to operations that occur outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges, execute arbitrary code, or cause service failure...

6.5CVSS6AI score0.00131EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/25 12:0 a.m.2 views

The vulnerability of the ctl_request_sense() function in the ctl subsystem of FreeBSD allows a hacker to execute arbitrary code.

The vulnerability of the ctlrequestsense function in the ctl subsystem of FreeBSD lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.4CVSS6.3AI score0.02671EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2024/11/22 10:15 p.m.0 views

CVE-2024-9113

FastStone Image Viewer TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS6.2AI score0.00891EPSS
Exploits0References1
OSV
OSV
added 2024/11/22 9:15 p.m.0 views

CVE-2024-11546

IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

7.8CVSS6.2AI score
Exploits0References1
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.1 views

Tungsten Automation Power PDF 缓冲区错误漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation. Tungsten Automation Power PDF suffers from a buffer error vulnerability that stems from a PDF file parsing issue that includes an out-of-bounds write problem. An attacker could exploit th...

7.8CVSS8.2AI score0.00717EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.2 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.3AI score0.00336EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/21 12:0 a.m.1 views

The vulnerability of component t7xx in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of component t7xx in the Linux operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00033EPSS
Exploits0References19Affected Software4
Positive Technologies
Positive Technologies
added 2024/11/21 12:0 a.m.3 views

PT-2024-17063 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this issue, where the target must visit a...

7.8CVSS7.3AI score0.00596EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/11/21 12:0 a.m.2 views

PT-2024-17077 · Irfan Skiljan · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

7.8CVSS7.4AI score0.00596EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/11/21 12:0 a.m.1 views

The vulnerability of the LightGBM gradient boosting framework lies in the possibility of an operation exceeding the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the LightGBM gradient boosting framework lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS6.2AI score0.01877EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.1 views

The vulnerability of Adobe Illustrator’s graphic editor lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS6.4AI score0.00191EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.1 views

The vulnerability of the pskernel.DLL library, which is used in software for simulation, design, and drawing in AutoCAD, allows a perpetrator to execute arbitrary code.

The vulnerability of the pskernel.DLL library, which is used for simulation, design, and drawing in AutoCAD, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using specially created...

10CVSS8AI score0.00254EPSS
Exploits0References4Affected Software9
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.1 views

The vulnerability of the ASMKERN228A.dll and ASMKERN229A.dll libraries, which are software for modeling, designing, and drawing in AutoCAD, allows a perpetrator to execute arbitrary code.

The vulnerability of the ASMKERN228A.dll and ASMKERN229A.dll libraries, which are software libraries for modeling, designing, and drafting in AutoCAD, is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execut...

10CVSS8AI score0.00531EPSS
Exploits0References9Affected Software9
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.1 views

The vulnerability of the ASMIMPORT228A.dll library in the AutoCAD simulation, design, and drafting software allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the ASMIMPORT228A.dll software for simulation, design, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, execute...

7.6CVSS7.8AI score0.00362EPSS
Exploits0References6Affected Software9
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.1 views

The vulnerability of the pskernel.DLL library, which is used in software for simulation, design, and drawing in AutoCAD, allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the pskernel.DLL library, which is used for simulation, design, and drafting in AutoCAD, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information,...

10CVSS7.8AI score0.00434EPSS
Exploits0References6Affected Software9
Rows per page
Query Builder