Lucene search
+L

1543 matches found

OSV
OSV
added 2023/01/19 11:15 p.m.8 views

UBUNTU-CVE-2023-22745

tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, Tss2RCSetHandler and Tss2RCDecode both index into layerhandler with an 8 bit layer number, but the array...

6.4CVSS6AI score0.00515EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2023/01/18 12:00 a.m.14 views

Vulnerability of the PM_io parser function: <PMDEC>::read_hedge() -> set_prev() In the component Nef_2/PM_io parser.h, it is part of the CGAL computational geometry library. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the PMioparser function in the Nef2/PMio parser component’s source file Nef2/PMioparser.h is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures throu...

10CVSS7.7AI score0.02122EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/18 12:00 a.m.14 views

Vulnerability of SNC_io_parser<EW>::read_facet(): Allows attackers to access confidential data, compromise its integrity, and cause service failures. This vulnerability exists in the SNC_io_parser.h library from the Computational Geometry Algorithms library, which is part of the Nef_S2/SNC_io_parser project.

Vulnerability of SNCio parser ::readfacet:fh-boundaryentryobjects in the component SLoopof from the NefS2/SNCio parser.h library, a computational geometry algorithm library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential...

10CVSS7.6AI score0.02269EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/18 12:00 a.m.17 views

Vulnerability of the SNC_io parser function <EW>: read_facet(), fh->twin(). This component is part of the Nef_S2/SNC_io parser.h library. It belongs to the computational geometry algorithm libraries CGAL. It allows an intruder to access confidential data, compromise its integrity, and also cause service failures.

The vulnerability of the SNCioparser function: readfacet, fh-twin in the NefS2/SNCioparser.h component, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...

9.3CVSS7.7AI score0.0229EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/18 12:00 a.m.12 views

Vulnerability of SNC_io parser<EW>: read_volume(), ch->shell_entry_objects() in the Nef_S2/SNC_io parser.h component, from the CGAL computational geometry algorithm library. This allows an intruder to access confidential data, compromise its integrity, and cause service failures.

Vulnerability of SNCio parser: ::readvolume. ch-shellentryobjects. The component NefS2/SNCio parser.h is part of the computational geometry library CGAL. This vulnerability is related to unvalidated array indexing. Exploitation of this vulnerability allows an attacker to gain access to confidenti...

10CVSS7.7AI score0.02269EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/18 12:00 a.m.12 views

Vulnerability of SNC_io parser<EW>: read_vertex(); vh->shalfedges_begin(); component Nef_S2/SNC_io parser.h; libraries of computational geometry algorithms CGAL. This allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCioparser function is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file. This vulnerability is present in the...

10CVSS7.7AI score0.0226EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/18 12:00 a.m.25 views

Vulnerability of the SNC_io parser function <EW>: read_facet(), incident_volume(). Component: Nef_S2/SNC_io parser.h library, algorithm library for computational geometry CGAL. This allows an intruder to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCio parser function ::readfacet and fh-incidentvolume in the NefS2/SNCio parser component’s NefS2/SNCio parser.h file is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...

10CVSS7.7AI score0.02256EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/18 12:00 a.m.11 views

Vulnerability of the SNC_io parser function <EW>::read_edge(), eh->twin() in the Nef_S2/SNC_io parser.h component of the Computational Geometry Algorithms library. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SNCioparser function involves the use of unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file. This vulnerability is related ...

10CVSS7.7AI score0.02275EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/18 12:00 a.m.18 views

Vulnerability of SNC_io parser<EW>: read_vertex(); vh->sfaces_begin(); component Nef_S2/SNC_io parser.h; algorithms library from the Computational Geometry Library CGAL. This allows an intruder to access confidential data, compromise its integrity, and cause service failures.

Vulnerability of SNCio parser: ::readvertex vh-sfacesbegin in the NefS2/SNCio parser.h file. This vulnerability is related to unvalidated array indexing. Exploitation of this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS7.7AI score0.02275EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/18 12:00 a.m.11 views

Vulnerability of the SNC_io parser function <EW>::read_edge(), eh->center_vertex() in the Nef_S2/SNC_io parser.h file, part of the Computational Geometry Algorithms library CGAL. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCio parser function ::readedge and eh-centervertex in the NefS2/SNCio parser.h component is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS7.7AI score0.02275EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/18 12:00 a.m.11 views

Vulnerability of the SM_io parser function: Decorator_::read_vertex(), set_first_out_edge() – components from Nef_S2/SM_io parser.h; library of computational geometry algorithms CGAL. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SMio parser function in the decorator::readvertex and setfirstoutedge components of the NefS2/SMio parser library, part of the Computational Geometry Library CGAL, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to...

9.3CVSS7.7AI score0.0225EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/18 12:00 a.m.10 views

Vulnerability of the SNC_io parser function <EW>::read_edge() and eh->out_sedge() in the Nef_S2/SNC_io parser.h component. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SNCioparser function, namely readedge and eh-outsedge, within the NefS2/SNCioparser.h component, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

10CVSS7.7AI score0.02275EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/18 12:00 a.m.16 views

Vulnerability of SNC_io parser<EW>: read_vertex(); vh->shalfedges_last(); component Nef_S2/SNC_io parser.h; library of computational geometry algorithms CGAL. This allows an intruder to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SNCio parser function involves the use of unvalidated array indexing. Exploitation of this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially created file. This vulnerability ...

10CVSS7.7AI score0.02275EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/18 12:00 a.m.15 views

Vulnerability of SNC_io parser<EW>: read_vertex(); vh->sfaces_last(); component Nef_S2/SNC_io parser.h library of computational geometry algorithms CGAL, allowing a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of SNCioparser is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file. This vulnerability is associated with the...

9.3CVSS7.7AI score0.02286EPSS
SaveExploits1References8Affected Software3
Positive Technologies
Positive Technologies
added 2022/11/14 12:00 a.m.6 views

PT-2022-35671 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: The issue is related to the drm/msm/dpu component, specifically with the indexing of dpu kms-hw vbif using vbif idx. The actual impact and attack plausibility have not yet been proven...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/11/14 12:00 a.m.5 views

PT-2022-35537 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to the drm/msm/dpu component, specifically with the indexing of dpu kms-hw vbif using vbif idx. The actual impact and attack plausibility have not yet been proven...

7.2AI score
SaveExploits0References1
Prion
Prion
added 2022/11/04 11:15 p.m.23 views

Design/Logic Flaw

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, sending a malformed file through the Splunk-to-Splunk S2S or HTTP Event Collector HEC protocols to an indexer results in a blockage or denial-of-service preventing further indexing...

4CVSS6.4AI score0.00787EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2022/11/04 10:23 p.m.8 views

CVE-2022-43572 Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, sending a malformed file through the Splunk-to-Splunk S2S or HTTP Event Collector HEC protocols to an indexer results in a blockage or denial-of-service preventing further indexing...

7.5CVSS6.8AI score0.00787EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/11/04 10:23 p.m.39 views

CVE-2022-43572 Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, sending a malformed file through the Splunk-to-Splunk S2S or HTTP Event Collector HEC protocols to an indexer results in a blockage or denial-of-service preventing further indexing...

7.5CVSS7.6AI score0.00787EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/10/28 12:00 a.m.10 views

The vulnerability of the SQLite database management system’s API library allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the SQLite database management system’s API library is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code during the processing of a long sequence of formatted string data, processed b...

10CVSS7.6AI score0.21454EPSS
SaveExploits2References14Affected Software12
Rows per page
Query Builder