Lucene search
+L

3359 matches found

BDU FSTEC
BDU FSTEC
added 2021/02/09 12:00 a.m.11 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

7.8CVSS7.4AI score0.03474EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/02/01 12:00 a.m.14 views

Qualcomm Video Input Validation Error Vulnerability

Qualcomm Video is a Qualcomm Incorporated USA video component used in Qualcomm products. A security vulnerability exists in Qualcomm Video that stems from an arbitrary memory write issue in the video driver when setting internal buffers...

7.8CVSS7.2AI score0.00161EPSS
SaveExploits0References3
OSV
OSV
added 2021/01/31 12:00 p.m.57 views

RUSTSEC-2021-0051 KeyValueReader passes uninitialized memory to Read instance

The KeyValueReader type in affected versions of this crate set up an uninitialized memory buffer and passed them to be read in to a user-provided Read instance. The Read instance could read uninitialized memory and cause undefined behavior and miscompilations. This issue was fixed in commit dd59b...

9.8CVSS9.3AI score0.011EPSS
SaveExploits0References3
RustSec
RustSec
added 2021/01/31 12:00 p.m.29 views

KeyValueReader passes uninitialized memory to Read instance

The KeyValueReader type in affected versions of this crate set up an uninitialized memory buffer and passed them to be read in to a user-provided Read instance. The Read instance could read uninitialized memory and cause undefined behavior and miscompilations. This issue was fixed in commit dd59b...

9.8CVSS5.2AI score0.011EPSS
SaveExploits0Affected Software1
Hacker One
Hacker One
added 2021/01/26 4:28 p.m.101 views

GitHub Security Lab: ihsinme: CPP Add query for CWE-14 compiler removal of code to clear buffers.

This bug was reported directly to GitHub Security Lab...

2.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/01/21 12:00 a.m.12 views

The vulnerability of the compiler of the protobuf serialization library allows a hacker to execute arbitrary code.

The vulnerability of the protobuf serialization library compiler is related to an error in the processing of integer variables. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7AI score0.05106EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/01/19 12:00 a.m.15 views

The vulnerability of the Linux operating system’s kernel, related to reading data beyond the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Linux operating system’s kernel is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

8.1CVSS6.7AI score0.05114EPSS
SaveExploits1References18Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/01/14 12:00 a.m.34 views

The vulnerability of Google Chrome’s Skia graphic library allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Google Chrome’s Skia graphics library is related to the storage of data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

6.8CVSS7.9AI score0.01474EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:00 a.m.9 views

The vulnerability of Firefox, Firefox ESR, and the Thunderbird email client relates to the issue of executing code outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.02972EPSS
SaveExploits0References19Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:00 a.m.7 views

The vulnerability of Firefox, Firefox ESR, and the Thunderbird email client relates to the issue of executing code outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.02668EPSS
SaveExploits0References13Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:00 a.m.11 views

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude lies in the recording beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude involves writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current...

10CVSS7.9AI score0.04528EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:00 a.m.11 views

The vulnerability of the Adobe Photoshop graphic editor lies in the ability to write beyond the buffer boundaries in memory, allowing attackers to access protected information.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

7.8CVSS5.9AI score0.04235EPSS
SaveExploits0References3Affected Software2
CNNVD
CNNVD
added 2020/12/11 12:00 a.m.11 views

Linux kernel 资源管理错误漏洞

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A post-release reuse vulnerability exists in kernel/trace/ringbuffer.c in versions of Linux kernel prior to 5.10-rc1...

5.7CVSS6.7AI score0.00276EPSS
SaveExploits0References14
NVD
NVD
added 2020/12/03 9:15 p.m.31 views

CVE-2018-21270

Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream when using Node.js 4.x...

6.5CVSS6.3AI score0.03638EPSS
SaveExploits1References3
OSV
OSV
added 2020/12/03 9:15 p.m.5 views

DEBIAN-CVE-2018-21270

Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream when using Node.js 4.x...

6.5CVSS6.9AI score0.03638EPSS
SaveExploits1References1
OSV
OSV
added 2020/12/03 9:15 p.m.15 views

CVE-2018-21270

Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream when using Node.js 4.x...

6.5CVSS6.5AI score
SaveExploits0References3
Prion
Prion
added 2020/12/03 9:15 p.m.15 views

Out-of-bounds

Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream when using Node.js 4.x...

5.8CVSS6.4AI score0.03638EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
added 2020/12/03 9:15 p.m.15 views

CVE-2018-21270

Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream when using Node.js 4.x...

6.5CVSS6.9AI score0.03638EPSS
SaveExploits1References5
OSV
OSV
added 2020/12/03 9:15 p.m.6 views

UBUNTU-CVE-2018-21270

Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream when using Node.js 4.x...

6.5CVSS6.9AI score0.03638EPSS
SaveExploits1References6
Debian CVE
Debian CVE
added 2020/12/03 9:00 p.m.64 views

CVE-2018-21270

Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream when using Node.js 4.x...

6.5CVSS6.6AI score0.03638EPSS
SaveExploits1
Rows per page
Query Builder