Lucene search
+L

124 matches found

OSV
OSV
added 2023/06/07 8:6 a.m.36 views

CVE-2023-30575 Apache Guacamole: Incorrect calculation of Guacamole protocol element lengths

Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole protocol handshake, potentially allowing an attacker to inject Guacamole instructions during the handshake through specially-crafted data...

6.5CVSS7.1AI score0.00999EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:50 a.m.4 views

SUSE CVE-2011-3631

Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the required memory space to be used. A remote attacker could provide a specially-crafted directory tree and trick the local us...

8.8CVSS7.9AI score0.02693EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 4:23 a.m.5 views

SUSE CVE-2018-18225

In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed...

7.5CVSS7.6AI score0.02884EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/09/16 12:0 a.m.5 views

PT-2022-33454 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v5.19.1 Description: A potential security issue exists due to a lock length calculation error in the cifs component. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

7.3AI score
SaveExploits0References1
Prion
Prion
added 2022/06/17 8:15 p.m.17 views

Out-of-bounds

All versions of package fast-string-search are vulnerable to Out-of-bounds Read due to incorrect memory freeing and length calculation for any non-string input as the source. This allows the attacker to read previously allocated memory...

5CVSS5.2AI score0.01068EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/06/17 8:5 p.m.30 views

CVE-2022-25872 Out-of-bounds Read

All versions of package fast-string-search are vulnerable to Out-of-bounds Read due to incorrect memory freeing and length calculation for any non-string input as the source. This allows the attacker to read previously allocated memory...

5.3CVSS5.5AI score0.01068EPSS
SaveExploits1References2
Prion
Prion
added 2022/06/14 10:15 a.m.25 views

Buffer overflow

Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

7.8CVSS7.6AI score0.00568EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/01 5:15 a.m.32 views

Out-of-bounds

Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

7.2CVSS7.6AI score0.00182EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/04/01 4:40 a.m.36 views

CVE-2021-35106

Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

7.8CVSS7.8AI score0.00182EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/04/01 12:0 a.m.6 views

PT-2022-10425 · Qualcomm · Snapdragon Connectivity +7

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT...

7.8CVSS7.4AI score0.00182EPSS
SaveExploits0References4
Prion
Prion
added 2022/01/10 2:10 p.m.26 views

Design/Logic Flaw

The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality...

5CVSS7.6AI score0.00843EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/12/13 1:15 a.m.22 views

CVE-2021-44847

A stack-based buffer overflow in handlerequest function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 caused by an improper length calculation during the handling of received network packets allows remote attackers to crash the process or potentially execute arbitrary code via...

9.8CVSS8.1AI score
SaveExploits0References3
OSV
OSV
added 2021/06/30 11:15 a.m.6 views

CVE-2021-34385

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length could lead to a heap overflow...

6.7CVSS6.8AI score0.00207EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/06/30 10:24 a.m.37 views

CVE-2021-34385

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length could lead to a heap overflow...

6.3CVSS7.2AI score0.00207EPSS
SaveExploits0References1
Exploit DB
Exploit DB
added 2021/03/09 12:0 a.m.263 views

Golden FTP Server 4.70 - 'PASS' Buffer Overflow (2)

Golden FTP Server 4.70 - 'PASS' Buffer Overflow 2 Author: 1F98D Original Authors: Craig Freyman cd1zz and Gerardo Iglesias Galvan iglesiasgg Tested on Windows 10 x64 A buffer overflow exists in GoldenFTP during the authentication process. Note that the source ip address of the user performing the...

7.5CVSS8.4AI score0.67016EPSS
SaveExploits8
Cvelist
Cvelist
added 2021/03/03 4:44 p.m.34 views

CVE-2021-20233

A flaw was found in grub2 in versions prior to 2.06. Setparamprefix in the menu rendering code performs a length calculation on the assumption that expressing a quoted single quote will require 3 characters, while it actually requires 4 characters which allows an attacker to corrupt memory by one...

8.3AI score0.00605EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.10 views

Multiple Qualcomm Products Input Validation Error Vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. a way to miniaturize circuitry including primarily semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. An input validation error vulnerability exists in...

10CVSS7.3AI score0.0122EPSS
SaveExploits0References4
NVD
NVD
added 2019/07/25 5:15 p.m.28 views

CVE-2019-2307

Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150...

10CVSS9.5AI score0.01621EPSS
SaveExploits0References2
NVD
NVD
added 2019/04/29 4:29 p.m.27 views

CVE-2019-3560

An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and denial-of-service based on user input. This issue affected versions of fizz prior to v2019.03.04.00...

7.5CVSS7.5AI score0.0242EPSS
SaveExploits1References3
OSV
OSV
added 2019/04/29 4:29 p.m.27 views

CVE-2019-3560

An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and denial-of-service based on user input. This issue affected versions of fizz prior to v2019.03.04.00...

7.5CVSS6.9AI score
SaveExploits0References3
Rows per page
Query Builder