Lucene search
+L

244 matches found

Cvelist
Cvelist
added 2021/12/31 11:59 p.m.19 views

CVE-2021-45926

MDB Tools aka mdbtools 0.9.2 has a stack-based buffer overflow at 0x7ffd0c689be0 in mdbnumerictostring called from mdbxferbounddata and mdbattemptbind...

8.1AI score0.00431EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2021/12/31 11:59 p.m.31 views

CVE-2021-45926

Removed by vendor...

7.8CVSS7.6AI score0.00431EPSS
SaveExploits1
CVE
CVE
added 2021/12/31 11:59 p.m.56 views

CVE-2021-45927

MDB Tools (mdbtools) 0.9.2 has a stack-based buffer overflow in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt_bind). This CVE-2021-45927 is confirmed across multiple sources. The exposed component and function are stated; no exploit details are provided in the documents ...

7.8CVSS7.7AI score0.00431EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2021/12/31 11:59 p.m.18 views

CVE-2021-45927

MDB Tools aka mdbtools 0.9.2 has a stack-based buffer overflow at 0x7ffd6e029ee0 in mdbnumerictostring called from mdbxferbounddata and mdbattemptbind...

8.1AI score0.00431EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2021/12/31 11:59 p.m.50 views

CVE-2021-45927

Removed by vendor...

7.8CVSS7.6AI score0.00431EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2021/12/31 12:0 a.m.6 views

PT-2021-24317 · Mdb Tools · Mdb Tools

Name of the Vulnerable Software and Affected Versions: MDB Tools aka mdbtools version 0.9.2 Description: The issue is a stack-based buffer overflow in the mdb numeric to string function, which is called from mdb xfer bound data and mdb attempt bind. This overflow occurs at the memory address...

7.8CVSS7.6AI score0.00431EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2021/12/31 12:0 a.m.7 views

PT-2021-24316 · Mdb Tools · Mdb Tools

Name of the Vulnerable Software and Affected Versions: MDB Tools aka mdbtools version 0.9.2 Description: The issue is a stack-based buffer overflow in the mdb numeric to string function, which is called from mdb xfer bound data and mdb attempt bind. This overflow occurs at the memory address...

7.8CVSS7.6AI score0.00431EPSS
SaveExploits1References11
BDU FSTEC
BDU FSTEC
added 2021/08/26 12:0 a.m.7 views

The vulnerability of the mdb database in the interactive graphical SCADA system allows a intruder to trigger a service failure.

The vulnerability of the mdb database in the Interactive Graphical SCADA System IGSS is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS7.4AI score0.01279EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/02/05 8:15 p.m.3 views

CVE-2020-10375

An issue was discovered in New Media Smarty before 9.10. Passwords are stored in the database in an obfuscated format that can be easily reversed. The file data.mdb contains these obfuscated passwords in the second column. NOTE: this is unrelated to the popular Smarty template engine product...

5.5CVSS6.1AI score0.00307EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
added 2020/07/23 12:0 a.m.44 views

Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7CVSS3.7AI score0.2383EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/15 12:0 a.m.35 views

Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7CVSS3.7AI score0.11685EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/15 12:0 a.m.28 views

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7.8CVSS4AI score0.11685EPSS
SaveExploits0References1
OSV
OSV
added 2019/09/11 3:15 p.m.3 views

DEBIAN-CVE-2019-16224

An issue was discovered in py-lmdb 0.97. For certain values of mdflags, mdbnodeadd does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

9.8CVSS8.4AI score0.01765EPSS
SaveExploits1References1
PyPA
PyPA
added 2019/09/11 3:15 p.m.9 views

PYSEC-2019-239

An issue was discovered in py-lmdb 0.97. For certain values of mnflags, mdbcursorset triggers a memcpy with an invalid write operation within mdbxcursorinit1. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

9.8CVSS7AI score0.01963EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2019/09/11 3:15 p.m.5 views

UBUNTU-CVE-2019-16228

An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdbenvopen2 if mdbenvreadheader obtains a zero value for a certain size field. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

7.5CVSS5.8AI score0.01786EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2019/09/11 12:0 a.m.4 views

PT-2019-14588

Name of the Vulnerable Software and Affected Versions py-lmdb version 0.97 Description An issue was discovered in py-lmdb where for certain values of mp flags, mdb page touch does not properly set up mc-mc pgmc-top, leading to an invalid write operation. This issue occurs when accessing a data.md...

9.8CVSS7.1AI score0.01963EPSS
SaveExploits5References19
Zero Day Initiative
Zero Day Initiative
added 2019/09/10 12:0 a.m.24 views

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7CVSS4AI score0.11924EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/10 12:0 a.m.45 views

Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7CVSS3.7AI score0.11924EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/10 12:0 a.m.30 views

Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7CVSS3.7AI score0.12643EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/10 12:0 a.m.26 views

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7CVSS4AI score0.17239EPSS
SaveExploits0References1
Rows per page
Query Builder