Lucene search
+L

191 matches found

OSV
OSV
•added 2023/03/20 9:15 p.m.•13 views

CVE-2022-43663

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

9.8CVSS6.2AI score0.14039EPSS
SaveExploits1References2
NVD
NVD
•added 2023/03/20 9:15 p.m.•55 views

CVE-2022-43663

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

9.8CVSS9AI score0.14039EPSS
SaveExploits1References2
Prion
Prion
•added 2023/03/20 9:15 p.m.•35 views

Design/Logic Flaw

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

7.5CVSS9.4AI score0.14039EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/03/20 8:16 p.m.•71 views

CVE-2022-43663

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

8.1CVSS9.7AI score0.14039EPSS
SaveExploits1References1
CVE
CVE
•added 2023/03/20 8:16 p.m.•84 views

CVE-2022-43663

Summary: CVE-2022-43663 is an integer conversion vulnerability in WellinTech KingHistorian 35.01.00.05, affecting the RecvPacket function of SORBAx64.dll and capable of causing a buffer overflow via a specially crafted network packet. Cisco Talos details the underlying issue in the RecvPacket han...

9.8CVSS9.4AI score0.14039EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/03/20 8:16 p.m.•18 views

CVE-2022-43663

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

8.1CVSS6.9AI score0.14039EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/03/20 12:00 a.m.•15 views

WellinTech KingHistorian 代码问题漏洞

WellinTech KingHistorian is a tool for data collection and analysis from WellinTech. A security vulnerability exists in WellinTech KingHistorian version 35.01.00.05, which stems from the presence of an integer conversion vulnerability that could be exploited by an attacker to cause a buffer...

9.8CVSS8.8AI score0.14039EPSS
SaveExploits1References4
Talos
Talos
•added 2023/03/20 12:00 a.m.•65 views

WellinTech KingHistorian SORBAx64.dll RecvPacket integer conversion vulnerability

Talos Vulnerability Report TALOS-2022-1674 WellinTech KingHistorian SORBAx64.dll RecvPacket integer conversion vulnerability March 20, 2023 CVE Number CVE-2022-43663 SUMMARY An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian...

9.8CVSS7.7AI score0.14039EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2023/02/15 4:45 a.m.•7 views

SUSE CVE-2017-9199

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:192:19...

9.8CVSS9.4AI score0.01928EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/10/18 12:00 a.m.•12 views

PT-2022-6861

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19 Oracle GraalVM Enterprise Edition versions 20.3.7, 21.3.3, 22.2.0 Description The issue is related to an error in integer value conversion in the Security component of Oracle...

5.3CVSS6.6AI score0.02667EPSS
SaveExploits0References311
Veracode
Veracode
•added 2022/10/12 3:55 a.m.•29 views

Arbitrary Code Execution

hermes-engine is vulnerable to arbitrary code execution. The vulnerability exists due to the integer conversion error in the library, which performs out-of-bounds operations and subsequently executes arbitrary code execution, resulting in an application crash...

9.8CVSS9.4AI score0.0099EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2022/10/11 2:15 a.m.•61 views

CVE-2022-40138

An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used to perform Out-Of-Bounds operations and subsequently execute arbitrary code. Note that this is only exploitable in cases where Hermes is used to execute...

9.8CVSS0.0099EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/10/11 2:15 a.m.•6 views

CVE-2022-40138

An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used to perform Out-Of-Bounds operations and subsequently execute arbitrary code. Note that this is only exploitable in cases where Hermes is used to execute...

9.8CVSS7.6AI score0.0099EPSS
SaveExploits0References3
Prion
Prion
•added 2022/10/11 2:15 a.m.•36 views

Design/Logic Flaw

An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used to perform Out-Of-Bounds operations and subsequently execute arbitrary code. Note that this is only exploitable in cases where Hermes is used to execute...

7.5CVSS9.7AI score0.0099EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/10/11 12:00 a.m.•81 views

CVE-2022-40138

CVE-2022-40138 affects Hermes, the JavaScript engine used by React Native. The issue is an integer conversion error in Hermes bytecode generation (before commit 6aa825e480d48127b480b08d13adf70033237097) that could allow out-of-bounds operations and arbitrary code execution when untrusted JavaScri...

9.8CVSS9.8AI score0.0099EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2022/10/11 12:00 a.m.•44 views

CVE-2022-40138

An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used to perform Out-Of-Bounds operations and subsequently execute arbitrary code. Note that this is only exploitable in cases where Hermes is used to execute...

7.6AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/10/10 12:00 a.m.•14 views

PT-2022-5008 · Facebook · Hermes

Name of the Vulnerable Software and Affected Versions: Hermes versions prior to commit 6aa825e480d48127b480b08d13adf70033237097 Description: The issue is related to an integer conversion error in Hermes bytecode generation. This error could be used to perform Out-Of-Bounds operations and...

9.8CVSS9.6AI score0.0099EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2022/09/28 12:00 a.m.•32 views

The vulnerability of the `cv::RBaseStream::setPos` function in the `modules/imgcodecs/src/bitstrm.cpp` file of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, allows a attacker to cause a service failure.

The vulnerability of the cv::RBaseStream::setPos function in the modules/imgcodecs/src/bitstrm.cpp file of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, relates to an improper conversion from a 64-bit integer to a 32-bit integer...

7.1CVSS6.3AI score0.01384EPSS
SaveExploits1References7Affected Software3
OSV
OSV
•added 2022/09/16 11:05 a.m.•17 views

OESA-2022-1921 python3 security update

Python combines remarkable power with very clear syntax. It has modules,classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C+...

7.5CVSS8.4AI score0.07178EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/09/05 12:00 a.m.•10 views

Python 代码问题漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. Python has a security vulnerability that can be exploited by an attacker to trigger a denial of service by...

7.5CVSS7.3AI score0.07178EPSS
SaveExploits0References64
Rows per page
Query Builder