Lucene search
+L

292 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/09 12:00 a.m.•3 views

CVE-2020-9833: Improper Initialization

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.5. A local user may be able to read kernel memory...

5.5CVSS7.2AI score0.00285EPSS
SaveExploits0References2
CVE
CVE
•added 2020/04/01 5:54 p.m.•108 views

CVE-2020-3919

CVE-2020-3919 corresponds to a memory initialization issue in Apple IOHIDFamily that could allow a malicious application to execute arbitrary code with kernel privileges. Concrete details in connected documents show the vulnerability affecting Apple platforms and components across multiple OS lin...

9.3CVSS7.6AI score0.01427EPSS
SaveExploits0References4Affected Software5
OSV
OSV
•added 2020/02/27 9:15 p.m.•9 views

CVE-2020-3872

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to read restricted memory...

5.5CVSS6AI score0.00805EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2020/02/27 8:45 p.m.•35 views

CVE-2020-3872

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to read restricted memory...

5.5AI score0.00805EPSS
SaveExploits0References4
OSV
OSV
•added 2019/12/18 6:15 p.m.•8 views

CVE-2019-8540

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout...

5.5CVSS6.7AI score0.01593EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2019/12/18 5:33 p.m.•34 views

CVE-2019-8540

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout...

5.2AI score0.01593EPSS
SaveExploits1References4
OSV
OSV
•added 2019/04/03 6:29 p.m.•11 views

CVE-2018-4431

A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2...

5.5CVSS5.8AI score0.00739EPSS
SaveExploits1References4
Prion
Prion
•added 2019/04/03 6:29 p.m.•31 views

Memory corruption

A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1...

7.1CVSS4.4AI score0.01121EPSS
SaveExploits0References4Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/03 12:00 a.m.•4 views

CVE-2018-4431: Exposure of Sensitive Information to an Unauthorized Actor

A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2...

5.5CVSS5.7AI score0.00739EPSS
SaveExploits1References2
Prion
Prion
•added 2019/03/05 4:29 p.m.•21 views

Memory corruption

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3,macOS Mojave 10.14.3,tvOS 12.1.2,watchOS 5.1.3. A malicious application may be able to break out of its sandbox...

6.8CVSS7.1AI score0.01093EPSS
SaveExploits0References5Affected Software4
Prion
Prion
•added 2018/05/17 3:29 p.m.•28 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

4.3CVSS6.2AI score0.02503EPSS
SaveExploits0References2Affected Software2
OSV
OSV
•added 2017/11/15 3:29 a.m.•8 views

CVE-2017-11853

Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windo...

5.5CVSS5.8AI score0.10975EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2017/11/15 3:29 a.m.•8 views

CVE-2017-11849

Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windo...

5.5CVSS5.5AI score0.10975EPSS
SaveExploits0References4
OSV
OSV
•added 2017/02/02 7:17 p.m.•19 views

MGASA-2017-0037 Updated openafs packages fix security vulnerability

Due to incomplete initialization or clearing of reused memory, OpenAFS directory objects are likely to contain "dead" directory entry information. This extraneous information is not active - that is, it is logically invisible to the fileserver and client. However, the leaked information is...

5.3CVSS5.2AI score0.01685EPSS
SaveExploits0References9
OSV
OSV
•added 2016/05/23 10:59 a.m.•13 views

CVE-2016-4580

The x25negotiatefacilities function in net/x25/x25facilities.c in the Linux kernel before 4.5.5 does not properly initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory via an X.25 Call Request...

7.5CVSS8AI score
SaveExploits0References22
OSV
OSV
•added 2016/04/25 10:59 a.m.•16 views

CVE-2016-4076

epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly initialize memory for search patterns, which allows remote attackers to cause a denial of service application crash via a crafted packet...

5.9CVSS5.5AI score
SaveExploits0References4
OSV
OSV
•added 2016/04/25 10:59 a.m.•10 views

UBUNTU-CVE-2016-4076

epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly initialize memory for search patterns, which allows remote attackers to cause a denial of service application crash via a crafted packet...

5.9CVSS6.6AI score0.01745EPSS
SaveExploits0References5
OSV
OSV
•added 2015/11/02 8:21 p.m.•17 views

MGASA-2015-0424 Updated openafs packages fix security vulnerabilities

Updated openafs packages fix security vulnerabilities: When constructing an Rx acknowledgment ACK packet, Andrew-derived Rx implementations do not initialize three octets of data that are padding in the C language structure and were inadvertently included in the wire protocol CVE-2015-7762...

5CVSS6.2AI score0.02133EPSS
SaveExploits0References7
OSV
OSV
•added 2015/04/21 12:00 a.m.•14 views

UBUNTU-CVE-2015-2706

Race condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before 37.0.2 allows remote attackers to execute arbitrary code or cause a denial of service use-after-free via a crafted plugin that does not properly complete initialization...

6.8CVSS8.6AI score0.02568EPSS
SaveExploits0References4
OSV
OSV
•added 2015/03/12 2:59 p.m.•12 views

CVE-2015-2044

The emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly initialize data, which allow local HVM guest users to obtain sensitive information via vectors involving an unsupported access size...

8.7AI score
SaveExploits0References12
Rows per page
Query Builder