Lucene search
+L

20240 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.24 views

Autodesk Design Review DWF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS6AI score0.02208EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.27 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.01708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.22 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.01708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.30 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.02208EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/10/06 12:00 a.m.31 views

Redis Stack Overflow Vulnerability (GHSA-p486-xggp-782c)

Redis is prone to a heap-based stack overflow vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if...

8.8CVSS6.5AI score0.16206EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/10/06 12:00 a.m.25 views

Python < 2.7.14, 3.4.x < 3.4.8, 3.5.x < 3.5.5 PyString_DecodeEscape integer overflow (bpo-30657) - Linux

CPython aka Python is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

9.8CVSS9.6AI score0.07944EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/10/06 12:00 a.m.15 views

Python < 2.7.14, 3.4.x < 3.4.8, 3.5.x < 3.5.5 PyString_DecodeEscape integer overflow (bpo-30657) - Mac OS X

CPython aka Python is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

9.8CVSS9.6AI score0.07944EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.27 views

Autodesk Design Review RLC File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.02208EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.18 views

Autodesk Design Review PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.01708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/06 12:00 a.m.25 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.02208EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/05 9:15 p.m.21 views

CVE-2021-3625

Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions = v2.5.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363...

9.8CVSS0.02312EPSS
SaveExploits2References1
Prion
Prion
added 2021/10/05 9:15 p.m.22 views

Heap overflow

Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions = v2.5.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363...

7.5CVSS9.5AI score0.02312EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2021/10/05 8:50 p.m.93 views

CVE-2021-3625

CVE-2021-3625 concerns a heap-based buffer overflow (CWE-122) in Zephyr’s USB DFU DNLOAD path. Affected product: Zephyr RTOS; vulnerable component is the USB DFU DNLOAD code, with root cause described as a heap-based overflow. Impact details in sources indicate a potential for memory data leakage...

9.8CVSS9.7AI score0.02312EPSS
SaveExploits2References1Affected Software1
Veracode
Veracode
added 2021/10/05 12:06 p.m.178 views

Remote Code Execution (RCE)

Redis is vulnerable to remote code execution. The vulnerability exists due to heap-based Lua stack to be overflowed. An attacker is able to crash the system by sending a maliciously crafted script to the system...

8.8CVSS4AI score0.16206EPSS
SaveExploits0References19Affected Software2
NVD
NVD
added 2021/10/04 6:15 p.m.20 views

CVE-2021-32626

Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This can result with heap corruption and potentially remote co...

8.8CVSS0.16206EPSS
SaveExploits0References10
AlpineLinux
AlpineLinux
added 2021/10/04 5:30 p.m.61 views

CVE-2021-32626

Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This can result with heap corruption and potentially remote co...

8.8CVSS8.6AI score0.16206EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/10/04 5:30 p.m.38 views

CVE-2021-32626 Lua scripts can overflow the heap-based Lua stack in Redis

Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This can result with heap corruption and potentially remote co...

7.5CVSS9AI score0.16206EPSS
SaveExploits0References10
OpenVAS
OpenVAS
added 2021/10/04 12:00 a.m.34 views

Python 2.7.x < 2.7.15 Heap-Based Buffer Overflow Vulnerability Python Issue (bpo-31530) - Linux

Python is prone to a heap-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

3.6CVSS7AI score0.01186EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/10/02 12:00 a.m.9 views

CVE-2021-3835

Buffer overflow in usb device class. Zephyr versions = v2.6.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fm6v-8625-99jf...

8.8CVSS7.4AI score0.00743EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2021/09/30 1:39 p.m.35 views

Denial Of Service (DoS)

vim is vulnerable denial of service. The vulnerability exists due to a Heap-based Buffer Overflow...

7.8CVSS3.6AI score0.01728EPSS
SaveExploits1References13Affected Software6
Rows per page
Query Builder