Lucene search
+L

838 matches found

attackerkb
attackerkb
•added 2022/01/14 8:15 p.m.•15 views

CVE-2021-39633

In grehandleoffloads of ipgre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

5.5CVSS6.3AI score0.0018EPSS
SaveExploits0References2
OSV
OSV
•added 2022/01/14 8:15 p.m.•14 views

CVE-2021-39633

In grehandleoffloads of ipgre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

5.5CVSS5.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/01/01 12:00 a.m.•10 views

PT-2025-37492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the iommu/mediatek component where a crash can occur on interrupt service routine isr after a kernel execution kexec operation. This happens when the...

5.5CVSS6.8AI score0.00157EPSS
SaveExploits0References308
OpenVAS
OpenVAS
•added 2021/12/30 12:00 a.m.•27 views

Debian: Security Advisory (DLA-2868-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.3AI score0.01424EPSS
SaveExploits4References4
CNNVD
CNNVD
•added 2021/12/21 12:00 a.m.•19 views

Binaryen 缓冲区错误漏洞

Binaryen is a compiler and toolchain infrastructure library for WebAssembly written in C. A denial of service vulnerability exists in Binaryen 103, which stems from an invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet, and could be exploited by an attacker to cause a denial ...

5.5CVSS5.6AI score0.0078EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2021/12/17 12:00 a.m.•10 views

PT-2021-8142 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an incorrect structure access in the Linux kernel's net component, specifically in the prestera module. This can cause invalid memory access for certain events,...

7.8CVSS6.4AI score0.08793EPSS
SaveExploits7References1087
CloudLinux
CloudLinux
•added 2021/11/23 1:12 p.m.•69 views

Fix of CVE: CVE-2021-3903, CVE-2021-3875, CVE-2021-3872

CVE-2021-3872: fix illegal memory access if buffer name is very long - CVE-2021-3875: fix mlget error after search with range - CVE-2021-3903: fix invalid memory access when scrolling without a valid screen...

7.8CVSS7AI score0.01549EPSS
SaveExploits3References1
Mend
Mend
•added 2021/11/05 10:15 p.m.•2 views

CVE-2021-41221

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for the Cudnn operations in TensorFlow can be tricked into accessing invalid memory, via a heap buffer overflow. This occurs because the ranks of the input, inputh and inputc parameters are n...

8.5CVSS0.00221EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/05 12:00 a.m.•2 views

CVE-2021-41221: Buffer Copy without Checking Size of Input

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for the Cudnn operations in TensorFlow can be tricked into accessing invalid memory, via a heap buffer overflow. This occurs because the ranks of the input, inputh and inputc parameters are n...

7.8CVSS6.2AI score0.00221EPSS
SaveExploits1References3
FreeBSD
FreeBSD
•added 2021/10/19 12:00 a.m.•22 views

libcaca -- Multiple vulnerabilities

Sam Hocevar reports: Multiple memory leaks and invalid memory accesses: CVE-2018-20545: Illegal WRITE memory access at common-image.c CVE-2018-20546: Illegal READ memory access at caca/dither.c CVE-2018-20547: Illegal READ memory access at caca/dither.c CVE-2018-20548: Illegal WRITE memory access...

8.8CVSS6.7AI score0.02389EPSS
SaveExploits8References1
OpenVAS
OpenVAS
•added 2021/09/15 12:00 a.m.•39 views

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2021-2355)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.02628EPSS
SaveExploits5References2
Github Security Blog
Github Security Blog
•added 2021/08/25 9:00 p.m.•19 views

Assumed memory layout of std::net::SocketAddr

The socket2 crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

2.5AI score
SaveExploits0References3Affected Software1
OSV
OSV
•added 2021/08/25 8:52 p.m.•33 views

GHSA-RM4W-6696-R77P nb-connect invalidly assumes the memory layout of std::net::SocketAddr

The nb-connect crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about...

9.8CVSS9.4AI score0.01448EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2021/08/25 8:52 p.m.•39 views

nb-connect invalidly assumes the memory layout of std::net::SocketAddr

The nb-connect crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about...

9.8CVSS8.9AI score0.01448EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2021/08/25 8:52 p.m.•82 views

GHSA-FHV4-FX3V-77W6 quinn invalidly assumes the memory layout of std::net::SocketAddr

The quinn crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

7.5CVSS7.4AI score0.0125EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2021/08/25 8:52 p.m.•42 views

quinn invalidly assumes the memory layout of std::net::SocketAddr

The quinn crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

7.5CVSS7.3AI score0.0125EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
•added 2021/08/25 8:50 p.m.•42 views

mio invalidly assumes the memory layout of std::net::SocketAddr

The mio crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

5.5CVSS5.5AI score0.00391EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2021/08/25 8:50 p.m.•118 views

GHSA-PF3P-X6QJ-6J7Q mio invalidly assumes the memory layout of std::net::SocketAddr

The mio crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

5.5CVSS5.3AI score0.00391EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2021/08/25 12:00 a.m.•3 views

PT-2021-24444

Name of the Vulnerable Software and Affected Versions: socket2 affected versions not specified Description: The issue arises from the socket2 crate's assumption that std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. This...

5.8AI score
SaveExploits0References4
OSV
OSV
•added 2021/08/23 10:15 p.m.•19 views

CVE-2020-18773

An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service DOS via a crafted tif file...

6.5CVSS6.4AI score
SaveExploits0References2
Rows per page
Query Builder