Lucene search
K

772 matches found

NVD
NVD
added 2021/06/14 10:15 p.m.25 views

CVE-2021-34693

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized...

5.5CVSS0.00476EPSS
Exploits1References7
UbuntuCve
UbuntuCve
added 2021/06/14 10:15 p.m.35 views

CVE-2021-34693

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized...

5.5CVSS6.7AI score0.00476EPSS
Exploits1References10
Zero Day Initiative
Zero Day Initiative
added 2021/06/14 12:0 a.m.61 views

Microsoft Paint 3D STL File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Paint 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS5.4AI score0.02938EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2021/06/14 12:0 a.m.52 views

CVE-2021-34693

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized...

5.5CVSS5.9AI score0.00476EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2021/06/11 3:15 p.m.22 views

CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

5.5CVSS6.2AI score0.00314EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2021/06/11 3:15 p.m.27 views

CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

5.5CVSS6.8AI score0.00314EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/06/11 2:54 p.m.19 views

CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of...

6AI score0.00314EPSS
Exploits0References2
Fedora
Fedora
added 2021/06/11 1:15 a.m.24 views

[SECURITY] Fedora 34 Update: redis-6.2.4-1.fc34

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

8.8CVSS0.7AI score0.04342EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.55 views

Microsoft Print 3D PLY File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS5.3AI score0.02146EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.56 views

Microsoft Paint 3D GLB File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Paint 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS5.5AI score0.02938EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/06/10 12:0 a.m.1 views

The vulnerability of Apache Commons Collections and Cisco’s software products lies in the possibility of restoring unreliable data structures in memory, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Apache Commons Collections and Cisco’s software products lies in the rehydration of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

8.8CVSS7.3AI score0.18763EPSS
Exploits1References5Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.46 views

Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Animate. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS4.5AI score0.0292EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/07 12:0 a.m.53 views

OpenText Brava! Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS2.6AI score0.01422EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/06/02 12:0 a.m.33 views

Apple macOS ImageIO PICT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS3.7AI score0.01035EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/02 12:0 a.m.28 views

OpenText Brava! Desktop DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS2.4AI score0.01097EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/06/02 12:0 a.m.32 views

OpenText Brava! Desktop DWF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS2.5AI score0.01097EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.1 views

The vulnerability of the data structure saving function in the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, allows a hacker to execute arbitrary code.

The vulnerability of the data structure saving function in the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor...

9.3CVSS8.4AI score0.10618EPSS
Exploits1References6Affected Software2
Tenable Nessus
Tenable Nessus
added 2021/05/25 12:0 a.m.185 views

openSUSE Security Update : the Linux Kernel (openSUSE-2021-758)

The SUSE Linux Enterprise 15 SP2 kernel RT was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to...

9.8CVSS7.8AI score0.03233EPSS
Exploits7References149
Zero Day Initiative
Zero Day Initiative
added 2021/05/20 12:0 a.m.70 views

Apple macOS ImageIO DDS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS3.6AI score0.01144EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/05/20 12:0 a.m.53 views

Apple macOS KTX Image DecodeRow Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the DecodeRow...

4.3CVSS3.2AI score0.01106EPSS
Exploits0References1
Rows per page
Query Builder