Lucene search
+L

2102 matches found

Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.2 views

PT-2025-1143 · Microsoft · Brokering File System +1

Name of the Vulnerable Software and Affected Versions: Microsoft Brokering File System affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Microsoft Brokering File System. It is associated with the possibility of using memory after i...

7.8CVSS9.4AI score0.00641EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.9 views

PT-2025-1166

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a remote code execution vulnerability in the SPNEGO Extended Negotiation NEGOEX security mechanism. It is associated with the use of memory after it has been freed,...

8.1CVSS10AI score0.0161EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:00 a.m.22 views

The vulnerability of the Redis database management system, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of the Redis database management system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code by injecting a specially crafted Lua script...

7CVSS7.3AI score0.08169EPSS
SaveExploits2References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/01/10 12:00 a.m.15 views

The vulnerability of the kunit_try_catch_run() function in the KUnit framework (lib/kunit/try-catch.c) in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kunittrycatchrun function in the KUnit framework lib/kunit/try-catch.c in the Linux kernel is related to the reallocation of memory after its deallocation due to concurrent access to resources race condition. Exploiting this vulnerability could allow an attacker to...

7CVSS6.4AI score0.00227EPSS
SaveExploits0References22Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/01/08 12:00 a.m.12 views

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in the use of memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00254EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/06 12:00 a.m.13 views

The vulnerability of the flush_work() function in the dm-cache component (drivers/md/dm-cache-target.c) of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the flushwork function in the dm-cache component drivers/md/dm-cache-target.c of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS6.5AI score0.00251EPSS
SaveExploits0References25Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/12/25 12:00 a.m.14 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the use of pointers after memory release, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of pointers after memory release during the processing of Doc objects in AcroForms. Exploiting this...

7.8CVSS7.6AI score0.00899EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/20 12:00 a.m.12 views

The vulnerability of the Translate component in Microsoft Edge and Google Chrome browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Translate component in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.5AI score0.04941EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/12/19 12:00 a.m.14 views

The vulnerability of the es_browser_get_variant() function in the universal monitoring system Zabbix allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the esbrowsergetvariant function in the universal monitoring system Zabbi is related to the use of memory after it is freed. Exploiting this vulnerability could allow a attacker to trigger a Denial-of-Service attack...

4.4CVSS5.5AI score0.00237EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/19 12:00 a.m.11 views

The vulnerability in the `src/libs/zbxembed/browser.c` script of the Zabbix monitoring system allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability in the src/libs/zbxembed/browser.c script of the Zabbix monitoring system relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to trigger a Denial-of-Service Attack DoS...

3.3CVSS5.4AI score0.00261EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/12/19 12:00 a.m.12 views

The vulnerability of the Gstreamer multimedia framework lies in its memory management after memory is freed, which allows a hacker to cause a service failure.

The vulnerability of the Gstreamer multimedia framework is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.1CVSS6.5AI score0.00918EPSS
SaveExploits0References13Affected Software8
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.10 views

The vulnerability in the implementation of the LDAP service protocol for Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in Microsoft Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.1CVSS8.1AI score0.01273EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.9 views

The vulnerability of the PrintWorkflowUserSvc service in Microsoft Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the PrintWorkflowUserSvc service in Microsoft Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS5.5AI score0.00438EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.13 views

The vulnerability of the Adobe Photoshop graphic editor lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.00521EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.12 views

The vulnerability of the Microsoft Access database management system, Microsoft Office applications, and 365 Enterprise Apps relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Access database management systems, Microsoft Office applications, and 365 Enterprise Apps is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS8.1AI score0.0105EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.17 views

The vulnerability of the Windows Message Queuing system allows a perpetrator to execute arbitrary code.

The vulnerability of Windows’ Message Queuing system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.1AI score0.20411EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.12 views

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of Remote Desktop Services RDS for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.2AI score0.10012EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.8 views

The vulnerability of Remote Desktop Services (RDS) for Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of Remote Desktop Services RDS for Microsoft Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.2AI score0.01192EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.14 views

The vulnerability in the implementation of the LDAP service protocol for Microsoft Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in Microsoft Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.8CVSS7.8AI score0.82992EPSS
SaveExploits7References3
BDU FSTEC
BDU FSTEC
added 2024/12/12 12:00 a.m.11 views

Vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Excel, related to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Excel relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.01124EPSS
SaveExploits0References2
Rows per page
Query Builder