Lucene search
+L

1768 matches found

Positive Technologies
Positive Technologies
added 2019/07/31 12:0 a.m.6 views

PT-2019-13517

Name of the Vulnerable Software and Affected Versions Das U-Boot versions prior to 2019.07 Description An issue was discovered in Das U-Boot. There is an unbounded memcpy with an unvalidated length at nfs readlink reply, in the "if" block after calculating the new path length. Recommendations For...

9.8CVSS5.4AI score0.0257EPSS
SaveExploits0References74
CNVD
CNVD
added 2019/07/23 12:0 a.m.29 views

SweetScape 010 Editor Arbitrary Memory Overwrite Vulnerability

010 Editor is a professional text editor and hexadecimal editor for quickly and easily editing the contents of any file on your computer. An arbitrary memory overwrite vulnerability exists in SweetScape 010 Editor 9.0.1. The vulnerability stems from improper validation of parameters in the intern...

5.8CVSS5.7AI score0.02143EPSS
SaveExploits1References1
OSV
OSV
added 2019/07/22 8:15 p.m.7 views

CVE-2019-12551

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the Memcpy function provided by the scripting engine allows an attacker to overwrite arbitrary memory, which could lead to code execution...

5.5CVSS6.2AI score0.02143EPSS
SaveExploits1References3
NVD
NVD
added 2019/07/22 8:15 p.m.18 views

CVE-2019-12551

In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the Memcpy function provided by the scripting engine allows an attacker to overwrite arbitrary memory, which could lead to code execution...

5.8CVSS5.7AI score0.02143EPSS
SaveExploits1References3
OSV
OSV
added 2019/07/11 7:15 p.m.5 views

ALPINE-CVE-2019-12525

An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is configured to use Digest authentication, it parses the header Proxy-Authorization. It searches for certain tokens such as domain, uri, and qop. Squid checks if this token's value starts with a quote and ends...

9.8CVSS6.9AI score0.24401EPSS
SaveExploits0References1
OSV
OSV
added 2019/07/11 12:0 a.m.8 views

UBUNTU-CVE-2019-12525

An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is configured to use Digest authentication, it parses the header Proxy-Authorization. It searches for certain tokens such as domain, uri, and qop. Squid checks if this token's value starts with a quote and ends...

9.8CVSS6.5AI score0.24401EPSS
SaveExploits0References5
NVD
NVD
added 2019/07/02 9:15 p.m.19 views

CVE-2017-11580

Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When connected to the "Blip" open wireless connection provided by the device, if a large string is sent as a part of the HTTP request in any part of the HTTP headers, the device coul...

6.5CVSS6.8AI score0.01431EPSS
SaveExploits1References3
Prion
Prion
added 2019/07/02 9:15 p.m.16 views

Memory corruption

Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When connected to the "Blip" open wireless connection provided by the device, if a large string is sent as a part of the HTTP request in any part of the HTTP headers, the device coul...

6.1CVSS6.7AI score0.01431EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2019/07/02 8:49 p.m.27 views

CVE-2017-11580

Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When connected to the "Blip" open wireless connection provided by the device, if a large string is sent as a part of the HTTP request in any part of the HTTP headers, the device coul...

6.8AI score0.01431EPSS
SaveExploits1References3
NVD
NVD
added 2019/06/17 10:15 p.m.19 views

CVE-2017-10724

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows...

8.8CVSS9.2AI score0.02569EPSS
SaveExploits1References3
NVD
NVD
added 2019/05/24 5:29 p.m.32 views

CVE-2018-11940

Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD 712 / SD 710 / SD...

10CVSS9.4AI score0.00945EPSS
SaveExploits0References1
CVE
CVE
added 2019/05/24 4:36 p.m.83 views

CVE-2018-11940

CVE-2018-11940 is a Qualcomm WLAN Host vulnerability caused by a lack of length validation before memcpy in the WLAN function, leading to out-of-bounds access in multiple Snapdragon platforms (Auto/Compute/Consumer IOT/Industrial IOT, Mobile) across listed SoCs. Connected sources confirm affected...

10CVSS9.3AI score0.00945EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2019/05/20 4:29 p.m.1 views

DEBIAN-CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

7.5CVSS7AI score0.0421EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2019/05/20 4:29 p.m.20 views

CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

7.5CVSS7.1AI score0.0421EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2019/05/14 12:29 p.m.25 views

CVE-2018-7437

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a memcpy call of the parseSST function...

8.8CVSS2.5AI score0.02091EPSS
SaveExploits1References1
OSV
OSV
added 2019/04/30 3:37 p.m.45 views

GHSA-QX2V-J445-G354 Improper Input Validation in Google TensorFlow

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS5.9AI score0.00513EPSS
SaveExploits0References8
PyPA
PyPA
added 2019/04/24 5:29 p.m.8 views

PYSEC-2019-225

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS6.8AI score0.00513EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2019/04/24 5:29 p.m.41 views

CVE-2018-7577

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS7.9AI score0.00513EPSS
SaveExploits0References1
Prion
Prion
added 2019/04/24 5:29 p.m.20 views

Code injection

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

5.8CVSS7.8AI score0.00513EPSS
SaveExploits0References1Affected Software2
OSV
OSV
added 2019/04/24 5:29 p.m.39 views

PYSEC-2019-207

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS5.9AI score0.00513EPSS
SaveExploits0References2
Rows per page
Query Builder