Lucene search
+L

317 matches found

BDU FSTEC
BDU FSTEC
added 2025/01/16 12:00 a.m.12 views

The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development tools is related to buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development environment is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

7.6CVSS8AI score0.0183EPSS
SaveExploits0References3Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/01/16 12:00 a.m.16 views

The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development tools lies in the creation of a temporary file in a directory with incorrect permissions, allowing an attacker to escalate their privileges.

The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development tools is related to the creation of a temporary file in the directory with incorrect permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.3CVSS7.3AI score0.01243EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/12/13 12:00 a.m.16 views

The vulnerability of the software development environment for systems that automate technological processes, the Totally Integrated Automation Portal (Portal TIA), and the software used for modeling and simulating the operation of Siemens S7 controllers, arises from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the software development environment for systems that automate technological processes, such as the Totally Integrated Automation Portal Portal TIA and software for simulating and testing the operation of Siemens S7 controllers, is related to insufficient verification of inpu...

7.3CVSS5.8AI score0.00179EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.15 views

The vulnerability of the JavaScript and TypeScript matrix-react-sdk development tools lies in the insufficient protection of sensitive data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the JavaScript and TypeScript matrix-react-sdk development tools is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.3CVSS5.5AI score0.00656EPSS
SaveExploits0References7Affected Software1
RedHat Linux
RedHat Linux
added 2024/09/19 6:49 a.m.12 views

mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran

The Mozilla Foundation's Security Advisory: Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence...

8.8CVSS7.2AI score0.00595EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2024/09/18 9:11 p.m.14 views

mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran

The Mozilla Foundation's Security Advisory: Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence...

8.8CVSS7.2AI score0.00595EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2024/09/17 11:27 a.m.17 views

mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran

The Mozilla Foundation's Security Advisory: Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence...

8.8CVSS7.2AI score0.00595EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2024/09/16 12:24 p.m.19 views

mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran

The Mozilla Foundation's Security Advisory: Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence...

8.8CVSS7.2AI score0.00595EPSS
SaveExploits0References8
Redos
Redos
added 2024/09/04 12:00 a.m.26 views

ROS-20240904-02

Vulnerability of Microsoft .NET software platforms and Microsoft software development tools Visual Studio is related to a heap buffer overflow. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service...

6.3CVSS6.9AI score0.01248EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/07/16 12:00 a.m.8 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security vulnerability that stems from a competitive condition issue found in the DevTools module. No details of the vulnerability are provided at this time...

8.8CVSS6.6AI score0.00788EPSS
SaveExploits3References5
CNVD
CNVD
added 2024/07/12 12:00 a.m.15 views

Microsoft .NET Core and Visual Studio Denial of Service Vulnerability

Microsoft .NET Core and Microsoft Visual Studio are both products of Microsoft Corporation USA. NET Core is a free and open source development platform. NET Core is a free, open source development platform that features multi-language support and cross-platform capabilities.Microsoft Visual Studi...

7.5CVSS6.4AI score0.02939EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2024/05/14 4:58 a.m.23 views

CVE-2024-0151

Arm is aware of a potential software security issue in code that uses Cortex-M Security Extensions CMSE and has been compiled with tools that implement Arm v8-M Security Extensions Requirements on Development Tools before version 1.4. This issue potentially allows an attacker who can pass...

7.9CVSS7.4AI score0.00448EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/04/24 5:12 p.m.25 views

CVE-2024-0151

Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions CMSE, that has been compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4, allows an attacker to pass values to...

6.7AI score0.00448EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.7 views

openSUSE: Security Advisory for gcc13 (SUSE-SU-2023:4458-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.8CVSS5.3AI score0.00758EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2024/01/30 12:00 a.m.9 views

The vulnerability in the set of tools for web development, DevTools, available in Mozilla Firefox, Firefox ESR, and the email client Thunderbird, allows a hacker to escalate their privileges.

The vulnerability of the DevTools suite for web development in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

4.2CVSS7.5AI score0.00633EPSS
SaveExploits0References13Affected Software7
OSV
OSV
added 2024/01/07 9:27 p.m.6 views

SUSE-SU-2024:0045-1 Security update for gcc13

This update for gcc13 fixes the following issues: This update ship the GCC 13.2 compiler suite and its base libraries. The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones. The new compilers for C, C++, and Fortran are provided...

4.8CVSS5.5AI score0.00758EPSS
SaveExploits1References12
OSV
OSV
added 2023/11/20 9:15 a.m.8 views

SUSE-SU-2023:4480-1 Security update for gcc13

This update for gcc13 fixes the following issues: This update ship the GCC 13.2 compiler suite and its base libraries. The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones. The new compilers for C, C++, and Fortran are provided...

4.8CVSS5.5AI score0.00758EPSS
SaveExploits1References12
OpenVAS
OpenVAS
added 2023/11/03 12:00 a.m.14 views

SUSE: Security Advisory (SUSE-SU-2023:4287-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.8CVSS5.5AI score0.00758EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2023/11/01 12:00 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2023:4287-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.8CVSS6.7AI score0.00758EPSS
SaveExploits1References13
OpenVAS
OpenVAS
added 2023/10/24 12:00 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2023:4162-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.8CVSS5.6AI score0.00758EPSS
SaveExploits1References4
Rows per page
Query Builder