Lucene search
+L

17070 matches found

BDU FSTEC
BDU FSTEC
added 2022/10/26 12:00 a.m.13 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially crafted file...

7.8CVSS7.6AI score0.00395EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/24 12:00 a.m.10 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.5AI score0.00452EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/24 12:00 a.m.10 views

The vulnerability of the Adobe InCopy text creation and editing software lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially crafted file...

7.8CVSS8AI score0.006EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/10/23 12:00 a.m.25 views

Debian DSA-5260-1 : lava - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5260 advisory. - In Linaro Automated Validation Architecture LAVA before 2022.10, there is dynamic code execution in lavaserver/lavatable.py. Due to improper input sanitization, an...

8.8CVSS8.5AI score0.0136EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2022/10/21 12:00 a.m.3 views

PT-2025-40110

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's x86/fpu component, specifically within the copy xstate to uabi function. This issue arises when an extended state component is present in the initial...

5.5CVSS7.4AI score0.00128EPSS
SaveExploits0
Kitploit
Kitploit
added 2022/10/20 11:30 a.m.61 views

PartyLoud - A Simple Tool To Generate Fake Web Browsing And Mitigate Tracking

PartyLoud is a highly configurable and straightforward free tool that helps you prevent tracking directly from your linux terminal, no special skills required. Once started, you can forget it is running. It provides several flags; each flag lets you customize your experience and change PartyLoud...

7.2AI score
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:00 a.m.11 views

The vulnerability of the Adobe InCopy text creation and editing software lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created SVG file...

7.8CVSS8AI score0.006EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:00 a.m.10 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in a buffer overflow in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00682EPSS
SaveExploits0References4Affected Software1
Fedora
Fedora
added 2022/10/17 10:55 p.m.30 views

[SECURITY] Fedora 37 Update: dhcp-4.4.3-4.P1.fc37

DHCP Dynamic Host Configuration Protocol...

6.5CVSS7AI score0.00683EPSS
SaveExploits0
Wolfi
Wolfi
added 2022/10/14 7:00 p.m.33 views

GHSA-69CH-W2M2-3VJP vulnerabilities

Vulnerabilities for packages: k3d, hey, vt-cli, gitleaks, terraform-provider-sendgrid, grpcurl, php-fpmexporter, dynamic-localpv-provisioner, kubeflow...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2022/10/14 3:15 p.m.35 views

CVE-2022-32149 vulnerabilities

Vulnerabilities for packages: k3d, hey, vt-cli, gitleaks, terraform-provider-sendgrid, grpcurl, php-fpmexporter, dynamic-localpv-provisioner, kubeflow...

7.5CVSS6.7AI score0.0155EPSS
SaveExploits0
Fedora
Fedora
added 2022/10/14 1:03 p.m.43 views

[SECURITY] Fedora 36 Update: dhcp-4.4.3-4.P1.fc36

DHCP Dynamic Host Configuration Protocol...

6.5CVSS7AI score0.00683EPSS
SaveExploits0
OSV
OSV
added 2022/10/14 11:05 a.m.9 views

OESA-2022-1993 dhcp security update

The Dynamic Host Configuration Protocol DHCP is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks. Security Fixes: In...

7.5CVSS6.9AI score0.11387EPSS
SaveExploits0References5
NVD
NVD
added 2022/10/13 1:15 p.m.35 views

CVE-2022-42889

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation...

9.8CVSS0.99931EPSS
SaveExploits42References9
NVD
NVD
added 2022/10/13 3:15 a.m.26 views

CVE-2022-42902

In Linaro Automated Validation Architecture LAVA before 2022.10, there is dynamic code execution in lavaserver/lavatable.py. Due to improper input sanitization, an anonymous user can force the lava-server-gunicorn service to execute user-provided code on the server...

8.8CVSS0.0136EPSS
SaveExploits1References4
Prion
Prion
added 2022/10/13 3:15 a.m.26 views

Input validation

In Linaro Automated Validation Architecture LAVA before 2022.10, there is dynamic code execution in lavaserver/lavatable.py. Due to improper input sanitization, an anonymous user can force the lava-server-gunicorn service to execute user-provided code on the server...

6.5CVSS8.8AI score0.0136EPSS
SaveExploits1References4Affected Software2
CVE
CVE
added 2022/10/13 12:00 a.m.85 views

CVE-2022-42902

CVE-2022-42902 affects Linaro Automated Validation Architecture (LAVA); in versions prior to 2022.10, lava_server/lavatable.py allows remote code execution due to improper input sanitization, enabling an anonymous user to cause lava-server-gunicorn to run user-provided code. Debian advisories (DL...

8.8CVSS8.7AI score0.0136EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/13 12:00 a.m.8 views

PT-2022-26653 · Linaro · Lava

Name of the Vulnerable Software and Affected Versions: Linaro Automated Validation Architecture LAVA versions prior to 2022.10 Description: The issue is related to dynamic code execution in lava server/lavatable.py due to improper input sanitization. This allows an anonymous user to force the...

8.8CVSS8.7AI score0.0136EPSS
SaveExploits1References17
CVE
CVE
added 2022/10/13 12:00 a.m.1089 views

CVE-2022-42889

CVE-2022-42889 affects Apache Commons Text 1.5–1.9 where default interpolation lookups (script, dns, url) can trigger arbitrary code execution or remote access when untrusted values are used. The vulnerability can lead to remote code execution or unintended contact with remote servers via the Str...

9.8CVSS10AI score0.99931EPSS
SaveExploits42References9Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/13 12:00 a.m.13 views

The vulnerability of the create_helper() function in the /src/helper.c component of the DNS server Dnsmasq, which allows a hacker to cause a service failure.

The vulnerability of the createhelper function in the /src/helper.c component of the DNS server Dnsmasq is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to cause a service failure by using a specially created DHCP response...

4.3CVSS5.8AI score0.02664EPSS
SaveExploits0References6Affected Software4
Rows per page
Query Builder