Lucene search
+L

1418 matches found

NVD
NVD
•added 2020/12/02 6:15 p.m.•44 views

CVE-2017-14451

An exploitable out-of-bounds read vulnerability exists in libevm Ethereum Virtual Machine of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-of-bounds write resulting in remote code execution. An attacker can create/send...

10CVSS9.7AI score0.02647EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2020/12/02 5:23 p.m.•55 views

CVE-2017-14451

An exploitable out-of-bounds read vulnerability exists in libevm Ethereum Virtual Machine of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-of-bounds write resulting in remote code execution. An attacker can create/send...

9.8AI score0.02647EPSS
SaveExploits1References1
CVE
CVE
•added 2020/12/02 5:23 p.m.•74 views

CVE-2017-14451

CVE-2017-14451 is an exploitable out-of-bounds read in libevm (CPP‑Ethereum). The root cause, per TALOS/Red Hat/NVD details, is the pow2N function returning exp[_n] without bounds checks, with exp defined as size 6. The _type parameter (0–255) can drive laneCount/laneWidth to values beyond the ar...

10CVSS8.6AI score0.02647EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/12/02 12:00 a.m.•1 views

PT-2020-8076

Name of the Vulnerable Software and Affected Versions: CPP-Ethereum affected versions not specified Description: An exploitable out-of-bounds read issue exists in libevm Ethereum Virtual Machine of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read, which can...

10CVSS0.02647EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/02 12:00 a.m.•1 views

CVE-2017-14451: Out-of-bounds Read

An exploitable out-of-bounds read vulnerability exists in libevm Ethereum Virtual Machine of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-of-bounds write resulting in remote code execution. An attacker can create/send...

10CVSS6.2AI score0.02647EPSS
SaveExploits1References2
OSV
OSV
•added 2020/11/10 1:15 p.m.•15 views

CVE-2020-0409

In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8...

7.8CVSS7.3AI score0.00259EPSS
SaveExploits0References1
NVD
NVD
•added 2020/10/14 2:15 p.m.•25 views

CVE-2020-0421

In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-...

7.8CVSS0.00266EPSS
SaveExploits0References1
NVD
NVD
•added 2020/10/14 2:15 p.m.•31 views

CVE-2020-0408

In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0...

7.8CVSS0.00192EPSS
SaveExploits0References1
Prion
Prion
•added 2020/10/14 2:15 p.m.•27 views

Integer overflow

In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0...

7.2CVSS7.7AI score0.00192EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2020/10/14 2:15 p.m.•23 views

Out-of-bounds

In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-...

7.2CVSS7.7AI score0.00266EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/10/14 1:07 p.m.•40 views

CVE-2020-0421

In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-...

8AI score0.00266EPSS
SaveExploits0References1
CVE
CVE
•added 2020/10/14 1:07 p.m.•133 views

CVE-2020-0421

CVE-2020-0421 is an Elevation of Privilege vulnerability in the Android Framework (affecting Android 8.0–11) that could allow a locally malicious app to bypass user interaction requirements and gain additional permissions. The root cause is described as an out-of-bounds write in String8.cpp (appe...

7.8CVSS7.7AI score0.00266EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2020/10/14 1:07 p.m.•0 views

CVE-2020-0421

In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-...

8.5CVSS0.00266EPSS
SaveExploits0References1
Mend
Mend
•added 2020/10/14 1:05 p.m.•1 views

CVE-2020-0408

In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0...

8.5CVSS0.00192EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/14 12:00 a.m.•1 views

CVE-2020-0421: Improper Handling of Exceptional Conditions

In appendFormatV of String8.cpp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-...

7.8CVSS5.9AI score0.00266EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/14 12:00 a.m.•6 views

CVE-2020-0408: Integer Overflow or Wraparound

In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0...

7.8CVSS5.9AI score0.00192EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/10/01 12:00 a.m.•2 views

PT-2020-11759

Name of the Vulnerable Software and Affected Versions Android versions Android-8.0 through Android-11 Description The issue is related to an integer overflow in String16.cpp, which could lead to a possible out of bounds write. This might result in local escalation of privilege without requiring...

7.8CVSS0.00192EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2020/10/01 12:00 a.m.•1 views

PT-2020-11771

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 11 Description The issue is related to incorrect error handling in the appendFormatV function of String8.cpp, which could lead to a possible out of bounds write. This might result in local escalation of privilege...

7.8CVSS0.00266EPSS
SaveExploits0References5
OSV
OSV
•added 2020/10/01 12:00 a.m.•49 views

ASB-A-156999009

In remove of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.5AI score0.00192EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2020/09/25 7:00 a.m.•14 views

The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.

...

6.5CVSS7AI score0.02536EPSS
SaveExploits2
Rows per page
Query Builder