Lucene search
+L

5278 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/29 12:0 a.m.10 views

Vulnerability of operating systems iOS, tvOS, the browser Safari, the multimedia player iTunes for Windows operating systems, and the service iCloud for Windows operating systems, related to a data type conversion error, allowing an attacker to execute arbitrary code.

The vulnerabilities of operating systems iOS, tvOS, the browser Safari, the multimedia player iTunes for Windows operating systems, and the iCloud service for Windows operating systems are related to a data type conversion error. Exploiting these vulnerabilities allows a malicious actor to execut...

9.3CVSS8.2AI score0.09755EPSS
SaveExploits4References12Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:0 a.m.9 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion flaws, allowing attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion deficiencies. Exploiting these vulnerabilities can allow attacker...

10CVSS8.2AI score0.04427EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:0 a.m.8 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion flaws, allowing attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion deficiencies. Exploiting these vulnerabilities can allow attacker...

10CVSS8.2AI score0.04427EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2020/04/28 3:59 p.m.6 views

samba: Crash after failed character conversion at log level 3 or above

A flaw was found in samba. When log levels are set at 3 or higher, the string obtained from the client, after a failed character conversion, is printed which could cause long-lived processes to terminate. The highest threat from this vulnerability is to system availability...

6.5CVSS7.2AI score0.03151EPSS
SaveExploits0References5
Rockylinux
Rockylinux
added 2020/04/28 9:7 a.m.21 views

new package: virt-p2v

An update is available for virt-p2v. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Virt-p2v is a tool for conversion of a physical server to a virtual guest...

2.5AI score
SaveExploits0
OSV
OSV
added 2020/04/28 9:7 a.m.14 views

ALEA-2020:1709 new package: virt-p2v

Virt-p2v is a tool for conversion of a physical server to a virtual guest. This enhancement update adds the virt-p2v package to AlmaLinux BZ1704180 All users who require virt-p2v are advised to install this new package...

6.8AI score
SaveExploits0
OSV
OSV
added 2020/04/24 12:0 p.m.19 views

RUSTSEC-2020-0013 fake-static allows converting any reference into a `'static` reference

fake-static allows converting a reference with any lifetime into a reference with 'static lifetime without the unsafe keyword. Internally, this crate does not use unsafe code, it instead exploits a soundness bug in rustc: https://github.com/rust-lang/rust/issues/25860...

7.1AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.9 views

The vulnerability of the Spidermonkey component in Firefox and Firefox ESR web browsers allows a hacker to trigger a service failure.

The vulnerability of the Spidermonkey component in Firefox and Firefox ESR browsers is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.1CVSS7.1AI score0.01262EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.9 views

The vulnerability of the WebKit rendering module, related to type conversion errors, allows attackers to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to a type conversion error. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS7.1AI score0.04369EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.8 views

The vulnerability of the WebKit rendering module, related to type conversion errors, allows attackers to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to a type conversion error. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially crafted malicious file or web page...

10CVSS7.1AI score0.01846EPSS
SaveExploits0References10Affected Software6
CNVD
CNVD
added 2020/04/20 12:0 a.m.5 views

Autodesk FBX-SDK Denial of Service Vulnerability

Autodesk FBX-SDK is a C++ software development platform and API toolkit from Autodesk USA, which is mainly used to convert existing content to FBX format. A code issue vulnerability exists in Autodesk FBX-SDK 2019.0 and prior versions. An attacker could exploit the vulnerability to cause a denial...

5.5CVSS7AI score0.00754EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/17 12:0 a.m.9 views

The vulnerability of the unpacked_load_raw() function in the LibRaw image processing library allows a attacker to cause a service failure.

The vulnerability of the unpackedloadraw function in dcrawcommon.cpp in the LibRaw image processing library is related to type conversion errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS6.7AI score0.02505EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:0 a.m.7 views

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, and watchOS, as well as in the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service, allows a perpetrator to execute arbitrary code.

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, and watchOS, as well as in the multimedia player iTunes for Windows, Safari browser, and iCloud for Windows, is related to data type conversion errors. Exploiting this vulnerability allows a remote attacker to...

9.3CVSS7.7AI score0.18108EPSS
SaveExploits2References11Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.10 views

The vulnerability of the Django web application framework, related to a bug in the password restoration mechanism, allows attackers to compromise data integrity.

The vulnerability of the Django web application framework lies in the improper validation of email addresses after converting Unicode characters into registry keys. This allows an attacker to send a reset token. Exploiting this vulnerability could enable a remote attacker to compromise data...

7.8CVSS6.5AI score0.35052EPSS
SaveExploits7References10Affected Software3
Veracode
Veracode
added 2020/04/10 1:1 a.m.23 views

Denial Of Service (DoS)

dbus is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the D-Bus library handled endianness conversion when receiving messages. A local user could use this flaw to send a specially-crafted message to dbus-daemon or to a service using the bus, such as...

4.6CVSS2.5AI score0.00386EPSS
SaveExploits0References18Affected Software1
Veracode
Veracode
added 2020/04/10 12:44 a.m.18 views

Denial Of Service (DoS)

tetex is vulnerable to denial of service DoS. The vulnerability exists as multiple array index errors were found in the way teTeX converted DVI files into the Portable Network Graphics PNG format. An attacker could create a malicious DVI file that would cause the dvipng executable to crash...

4.3CVSS4.3AI score0.04539EPSS
SaveExploits1References11Affected Software1
Veracode
Veracode
added 2020/04/10 12:34 a.m.33 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as CIFS clients convert Unicode strings sent by a server to their local character sets, and then write those strings into memory. If a malicious server sent a long enough string, it could write past the end of the target memo...

7.1CVSS2.8AI score0.03034EPSS
SaveExploits1References43Affected Software2
Veracode
Veracode
added 2020/04/10 12:32 a.m.29 views

Denial Of Service (DoS)

postgresql is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way PostgreSQL handles encoding conversion. A remote, authenticated user could trigger an encoding conversion failure, possibly leading to a temporary denial of service...

4CVSS2.9AI score0.10242EPSS
SaveExploits3References26Affected Software10
Microsoft KB
Microsoft KB
added 2020/04/10 12:0 a.m.11 views

An update that provides new APIs for conversion between local time and UTC in Windows 7 or in Windows Server 2008 R2 is available

An update that provides new APIs for conversion between local time and UTC in Windows 7 or in Windows Server 2008 R2 is available INTRODUCTION This article introduces an update that provides new APIs for conversion between local time and Coordinated Universal Time UTC in Windows 7 or in Windows...

6.3AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/04/09 12:0 a.m.30 views

Platform Update Supplement for Windows Vista and for Windows Server 2008

Platform Update Supplement for Windows Vista and for Windows Server 2008 INTRODUCTION The Platform Update Supplement for Windows Vista and for Windows Server 2008 is available. This update provides fixes and improvements to graphics, media foundation and print functionality in Windows Vista Servi...

5.6AI score
SaveExploits0
Rows per page
Query Builder