Lucene search
+L

11366 matches found

Positive Technologies
Positive Technologies
•added 2022/09/15 12:00 a.m.•26 views

PT-2024-11815

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue occurs during the driver initialization process in the Linux kernel, specifically in the drm/i915/gt module, where some engines may be fully set up while others are not, leadin...

5.5CVSS6.7AI score0.00253EPSS
SaveExploits0
Veracode
Veracode
•added 2022/09/14 5:46 p.m.•41 views

Denial Of Service (DoS)

vim is vulnerable to Denial Of Service DoS.The vulnerability exists due to lack of proper initialization of the mouse click in domouse function in mouse.c, which allows an attacker to crash the application by providing a malicious input...

5.5CVSS6.3AI score0.00862EPSS
SaveExploits1References8Affected Software1
osv_ghsa
osv_ghsa
•added 2022/09/14 12:00 a.m.•78 views

GHSA-FMQ7-GH8V-MJVC WildFly vulnerable to Insecure Default Initialization of Resource

A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain...

7.5CVSS7.5AI score0.00861EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2022/09/14 12:00 a.m.•38 views

(0Day) Ansys SpaceClaim X_B File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XB...

7.8CVSS6.3AI score0.00616EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/09/14 12:00 a.m.•11 views

PT-2025-38008

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to Bluetooth functionality. Specifically, a race condition can occur within the mgmt init hdev function due to the lack of serialization via hci...

7.8CVSS5.8AI score0.00108EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2022/09/14 12:00 a.m.•32 views

(0Day) Ansys SpaceClaim X_B File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XB...

7.8CVSS6.3AI score0.00616EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2022/09/11 7:50 p.m.•339 views

Exploit for Improper Initialization in Linux Linux_Kernel

CVE-2022-0847 Exploits Dirty Pipe O que é ? Divulga...

7.8CVSS7.2AI score0.92795EPSS
SaveExploits103
NVD
NVD
•added 2022/09/07 11:15 p.m.•41 views

CVE-2022-36086

linkedlistallocator is an allocator usable for nostd systems. Prior to version 0.10.2, the heap initialization methods were missing a minimum size check for the given heap size argument. This could lead to out-of-bound writes when a heap was initialized with a size smaller than 3 sizeof:: because...

9.8CVSS0.0088EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/09/07 10:50 p.m.•11 views

CVE-2022-36086 linked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend`

linkedlistallocator is an allocator usable for nostd systems. Prior to version 0.10.2, the heap initialization methods were missing a minimum size check for the given heap size argument. This could lead to out-of-bound writes when a heap was initialized with a size smaller than 3 sizeof:: because...

8.4CVSS9.7AI score0.0088EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/09/07 10:50 p.m.•50 views

CVE-2022-36086 linked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend`

linkedlistallocator is an allocator usable for nostd systems. Prior to version 0.10.2, the heap initialization methods were missing a minimum size check for the given heap size argument. This could lead to out-of-bound writes when a heap was initialized with a size smaller than 3 sizeof:: because...

8.4CVSS9.7AI score0.0088EPSS
SaveExploits1References2
Mend
Mend
•added 2022/09/07 10:50 p.m.•10 views

CVE-2022-36086

linkedlistallocator is an allocator usable for nostd systems. Prior to version 0.10.2, the heap initialization methods were missing a minimum size check for the given heap size argument. This could lead to out-of-bound writes when a heap was initialized with a size smaller than "3 sizeof::" becau...

9.8CVSS0.0088EPSS
SaveExploits1References8
CVE
CVE
•added 2022/09/07 10:50 p.m.•98 views

CVE-2022-36086

CVE-2022-36086 relates to the Rust crate linked_list_allocator (no_std). Prior to 0.10.2, heap initialization methods could perform out-of-bounds writes when the heap size was too small (less than 3 × size_of::) due to metadata writes, affecting Heap::new, Heap::init, Heap::init_from_slice, Locke...

9.8CVSS9.2AI score0.0088EPSS
SaveExploits1References2Affected Software1
osv_cve
osv_cve
•added 2022/09/07 10:50 p.m.•33 views

CVE-2022-36086 linked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend`

linkedlistallocator is an allocator usable for nostd systems. Prior to version 0.10.2, the heap initialization methods were missing a minimum size check for the given heap size argument. This could lead to out-of-bound writes when a heap was initialized with a size smaller than 3 sizeof:: because...

8.4CVSS8.9AI score0.0088EPSS
SaveExploits1References4
osv_rustsec
osv_rustsec
•added 2022/09/07 12:00 p.m.•83 views

RUSTSEC-2022-0063 Multiple vulnerabilities resulting in out-of-bounds writes

The heap initialization methods were missing a minimum size check for the given heap size argument. This could lead to out-of-bound writes when a heap was initialized with a size smaller than 3 sizeof:: because of metadata write operations. When calling Heap::extend with a size smaller than two...

8.4CVSS9.1AI score0.0088EPSS
SaveExploits1References3
GitLab Advisory Database
GitLab Advisory Database
•added 2022/09/06 12:00 a.m.•103 views

Improper Initialization

Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.35, read only calls between contracts can generate smart contracts results. For example, if contract A calls in read only mode contract B and the called function will make changes upon the contract's B...

9.8CVSS3.6AI score0.01273EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/06 12:00 a.m.•8 views

CVE-2022-36061: Improper Initialization

Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.35, read only calls between contracts can generate smart contracts results. For example, if contract A calls in read only mode contract B and the called function will make changes upon the contract's B...

9.8CVSS7.9AI score0.01273EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/08/31 7:15 p.m.•16 views

CVE-2022-37128

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

9.8CVSS7.3AI score0.21714EPSS
SaveExploits1References3
Prion
Prion
•added 2022/08/31 7:15 p.m.•33 views

Authentication flaw

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

7.5CVSS9.5AI score0.21714EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/31 12:00 a.m.•12 views

CVE-2022-37128: Improper Initialization

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

9.8CVSS8.2AI score0.21714EPSS
SaveExploits1References2
Ubuntu
Ubuntu
•added 2022/08/30 1:48 p.m.•97 views

USN-5572-2: Linux kernel (AWS) vulnerabilities

Roger Pau Monné discovered that the Xen virtual block driver in the Linux kernel did not properly initialize memory pages to be used for shared communication with the backend. A local attacker could use this to expose sensitive information guest kernel memory. CVE-2022-26365 Roger Pau Monné...

7.1CVSS6.4AI score0.00334EPSS
SaveExploits0
Rows per page
Query Builder