Lucene search
+L

163 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/05 12:00 a.m.•4 views

CVE-2023-48694: Expired Pointer Dereference

Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference and type confusion vulnerabilities in Azure RTOS USBX. The affected components include...

9.8CVSS8.6AI score0.01332EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/05 12:00 a.m.•3 views

CVE-2023-48696: Expired Pointer Dereference

Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference vulnerabilities in Azure RTOS USBX. The affected components include components in host class,...

9.8CVSS8.5AI score0.00946EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/11/17 12:00 a.m.•17 views

PT-2023-7500

Name of the Vulnerable Software and Affected Versions Azure RTOS USBX versions prior to 6.3.0 Description The issue is related to expired pointer dereference vulnerabilities in Azure RTOS USBX, which can lead to remote code execution. The affected components include functions and processes in the...

9.8CVSS9.6AI score0.00931EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/18 12:00 a.m.•2 views

CVE-2023-20212: Expired Pointer Dereference

A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a logic error in the memory management of an affected device. An attacker could exploit this vulnerability ...

7.5CVSS7.2AI score0.03441EPSS
SaveExploits0References2
NVD
NVD
•added 2023/04/15 12:15 a.m.•24 views

CVE-2023-26463

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

9.8CVSS9.7AI score0.02283EPSS
SaveExploits0References3
OSV
OSV
•added 2023/04/15 12:15 a.m.•21 views

AZL-26300 CVE-2023-26463 affecting package strongswan for versions less than 5.9.10-1

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

9.8CVSS8AI score0.02283EPSS
SaveExploits0References1
Prion
Prion
•added 2023/04/15 12:15 a.m.•34 views

Null pointer dereference

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

7.5CVSS9.5AI score0.02283EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2023/04/14 12:00 a.m.•136 views

CVE-2023-26463

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

9.8CVSS9.7AI score0.02283EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/14 12:00 a.m.•2 views

CVE-2023-26463: Improper Certificate Validation

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

9.8CVSS6.1AI score0.02283EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
•added 2023/04/14 12:00 a.m.•118 views

CVE-2023-26463

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

9.8CVSS9.7AI score0.02283EPSS
SaveExploits0
Cvelist
Cvelist
•added 2023/04/14 12:00 a.m.•69 views

CVE-2023-26463

strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...

9.9AI score0.02283EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 3:59 a.m.•9 views

SUSE CVE-2020-12373

Expired pointer dereference in some IntelR Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access...

1.9CVSS7.3AI score0.00269EPSS
SaveExploits0References13
CNVD
CNVD
•added 2022/02/11 12:00 a.m.•62 views

Radareorg Radare2 Resource Management Error Vulnerability (CNVD-2022-13390)

radare2 is a set of libraries and tools for working with binary files. radareorg Radare2 is vulnerable to a resource management error that stems from the product's invocation of an expired pointer. No detailed vulnerability details are currently available...

8.8CVSS2.1AI score0.01097EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/02/08 12:00 a.m.•15 views

radare2 资源管理错误漏洞

radare2 is a set of libraries and tools for working with binary files. radareorg Radare2 is vulnerable to a resource management error that stems from the product's invocation of an expired pointer. No detailed vulnerability details are currently available...

8.8CVSS5.5AI score0.01097EPSS
SaveExploits1References6
Huntr
Huntr
•added 2022/01/23 2:52 a.m.•31 views

None in radareorg/radare2

Description This vulnerability is of type Expired Pointer Dereference or specifically, use-after-free. The bug exists in latest stable release radare2-5.5.4 and lastest master branch ed2030b79e68986bf04f3a6279463ab989fe400f, updated in Jan 22, 2022. Specifically, the vulnerable code located at...

6.8CVSS7.8AI score0.01097EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2021/05/19 12:00 a.m.•43 views

RHEL 8 : curl (RHSA-2021:1610)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1610 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTT...

7.5CVSS6.7AI score0.0977EPSS
SaveExploits3References15
Tenable Nessus
Tenable Nessus
•added 2021/03/15 12:00 a.m.•64 views

openSUSE Security Update : kernel-firmware (openSUSE-2021-407)

This update for kernel-firmware fixes the following issues : - CVE-2020-12373: Fixed an expired pointer dereference may lead to DOS bsc1181738. - CVE-2020-12364: Fixed a NULL pointer reference may lead to DOS bsc1181736. - CVE-2020-12362: Fixed an integer overflow which could have led to privileg...

7.8CVSS6.9AI score0.00359EPSS
SaveExploits0References8
NVD
NVD
•added 2021/02/17 2:15 p.m.•38 views

CVE-2020-12373

Expired pointer dereference in some IntelR Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access...

6.7CVSS0.00269EPSS
SaveExploits0References1
Prion
Prion
•added 2021/02/17 2:15 p.m.•33 views

Null pointer dereference

Expired pointer dereference in some IntelR Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access...

4.6CVSS6.1AI score0.00269EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/02/17 1:54 p.m.•46 views

CVE-2020-12373

Expired pointer dereference in some IntelR Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access...

6.4AI score0.00269EPSS
SaveExploits0References1
Rows per page
Query Builder