Lucene search
K

537 matches found

BDU FSTEC
BDU FSTEC
added 2018/10/26 12:0 a.m.5 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer limit in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.8AI score0.19005EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/10/26 12:0 a.m.4 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created EMF file...

10CVSS7.8AI score0.0552EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2018/09/28 12:0 a.m.4 views

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine for Windows operating systems arises due to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created Excel file...

7.8CVSS8.6AI score0.2248EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2018/09/21 12:0 a.m.4 views

Vulnerability of Firefox, Firefox ESR, and Thunderbird’s email client, caused by overflowing memory buffers, allowing attackers to execute arbitrary code.

The vulnerabilities of the Firefox browser, Firefox ESR, and the Thunderbird email client are caused by a buffer overflow in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.03146EPSS
Exploits0References4Affected Software7
BDU FSTEC
BDU FSTEC
added 2018/09/14 12:0 a.m.3 views

The vulnerability of the IBM Security Access Manager access control system arises from an operation that goes beyond the buffer in memory, allowing a perpetrator to execute arbitrary code.

The vulnerability of the IBM Security Access Manager lies in the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

10CVSS6.3AI score0.09044EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/08/23 12:0 a.m.6 views

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer, related to the execution of operations beyond the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

7.6CVSS8.3AI score0.1425EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2018/08/23 12:0 a.m.4 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

7.6CVSS6.2AI score0.14443EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/08/23 12:0 a.m.5 views

Microsoft Edge browser’s vulnerability, related to the issue of executing operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page from a remote location...

7.6CVSS6.5AI score0.09549EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2018/07/27 12:0 a.m.6 views

The vulnerability of the software for interacting with servers via cURL arises from buffer overflows in memory, allowing an attacker to execute arbitrary code or cause a service failure.

The vulnerability of the software for interacting with servers via cURL arises due to the overflow of dynamic memory in the buffer when a FTP connection is closed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using long server...

9.8CVSS8.5AI score0.04862EPSS
Exploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2018/07/19 12:0 a.m.8 views

The vulnerability of the Windows Server operating system component in Mac OS X allows a hacker to execute arbitrary code with system privileges or cause a service failure.

The vulnerability of the Windows Server operating system component in Mac OS X is caused by an overflow in memory buffers. Exploiting this vulnerability can allow an attacker to execute arbitrary code with system privileges or cause a service failure using a specially created application...

7.8CVSS8AI score0.0569EPSS
Exploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/07/19 12:0 a.m.4 views

The vulnerability of the Hypervisor component of the Mac OS X operating system allows a hacker to execute arbitrary code with root privileges or cause a service failure.

The vulnerability of the Hypervisor component in the Mac OS X operating system arises due to an overflow in the memory buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code with root privileges or cause a service failure using a specially created application...

7.8CVSS8.2AI score0.02865EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/07/19 12:0 a.m.3 views

The vulnerability of the IOGraphics component in the Mac OS X operating system allows a hacker to execute arbitrary code with root privileges or cause a service failure.

The vulnerability of the IOGraphics component in the Mac OS X operating system is caused by an overflow in memory buffers. Exploiting this vulnerability can allow an attacker to execute arbitrary code with kernel privileges or cause a service failure using a specially created application...

7.8CVSS8.2AI score0.01207EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/06/22 12:0 a.m.3 views

The vulnerability of the Microsoft Office software arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office package arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted DOCX file...

9.3CVSS6.2AI score0.23069EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/05/31 12:0 a.m.5 views

The vulnerability of VBScript script handlers in Windows operating systems allows attackers to execute arbitrary code.

The vulnerability of VBScript script handlers in Windows operating systems arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or document...

9.3CVSS8.5AI score0.18925EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/05/25 12:0 a.m.5 views

The vulnerability of the Qualcomm operating system Android allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS5.8AI score0.01252EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2018/05/24 1:29 p.m.20 views

Heap overflow

curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This...

7.5CVSS9.4AI score0.04862EPSS
Exploits0References8Affected Software2
RedhatCVE
RedhatCVE
added 2018/05/16 7:50 a.m.32 views

CVE-2018-1000300

curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This...

9.8CVSS3.7AI score0.04862EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2018/05/16 12:0 a.m.35 views

CVE-2018-1000300

curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This...

9.8CVSS7.3AI score0.04862EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2018/04/19 12:0 a.m.7 views

The vulnerability of the Android operating system from the CAF repository, related to integer overflow, allows an attacker to trigger a memory buffer overflow.

The vulnerability of the Android operating system from the CAF repository is related to a numerical overflow issue. Exploiting this vulnerability allows an attacker to trigger a memory buffer overflow...

10CVSS5.9AI score0.00876EPSS
Exploits0References3
ICS
ICS
added 2018/04/12 12:0 a.m.741 views

Rockwell Automation FactoryTalk Activation Manager (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Rockwell Automation Equipment : Factory Talk Activation Manager Vulnerabilities : Cross-site Scripting, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. UPDATE...

10CVSS9.4AI score0.28677EPSS
Exploits7References4
Rows per page
Query Builder