Lucene search
K

2503 matches found

Talos
Talos
added 2023/09/25 12:0 a.m.38 views

Accusoft ImageGear pictwread heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2023-1760 Accusoft ImageGear pictwread heap-based buffer overflow vulnerability September 25, 2023 CVE Number CVE-2023-35002 SUMMARY A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted...

9.8CVSS9.4AI score0.00321EPSS
Exploits1
FreeBSD
FreeBSD
added 2023/09/22 12:0 a.m.57 views

x11/libXpm multiple vulnerabilities

The X.Org project reports: CVE-2023-43788: Out of bounds read in XpmCreateXpmImageFromBuffer An out-of-bounds read is located in ParseComment when reading from a memory buffer instead of a file, as it continued to look for the closing comment marker past the end of the buffer. CVE-2023-43789: Out...

5.5CVSS7AI score0.00033EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/09/22 12:0 a.m.2 views

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization product lifecycle management system allows a hacker to execute arbitrary code.

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization product lifecycle management system lies in the reading of data outside the buffer in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code...

7.8CVSS7.7AI score0.0012EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/21 12:0 a.m.2 views

The vulnerability of the read_file() function in the libeconf library for analyzing and managing configuration files allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the readfile function in the libeconf library for analyzing and managing configuration files is related to the situation where the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures or...

10CVSS8.1AI score
Exploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/09/15 12:0 a.m.1 views

The vulnerability of the item_subselect.cc component of the MariaDB database management system allows a hacker to cause service failures.

The vulnerability of the itemsubselect.cc component of the MariaDB database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7.8AI score0.00142EPSS
Exploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/09/14 12:0 a.m.2 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created EMF file...

7.8CVSS8.2AI score0.00813EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:0 a.m.1 views

The vulnerability of TP-Link Archer AX21 router’s microprogramming software lies in the ability to write beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of TP-Link Archer AX21 router’s microprogramming software is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.00171EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.1 views

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.8CVSS8.3AI score0.02203EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.1 views

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.8CVSS8.3AI score0.02203EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.2 views

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.8CVSS8.3AI score0.02203EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.3 views

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.8CVSS8.4AI score0.02203EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.2 views

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.8CVSS8.3AI score0.02203EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.2 views

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.8CVSS8.3AI score0.02203EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.1 views

The vulnerability of the Exiv2 metadata management library, related to reading beyond the buffer in memory, allows a attacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS6.7AI score0.00178EPSS
Exploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.1 views

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.8CVSS8.3AI score0.02203EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:0 a.m.2 views

The vulnerability of the tiffcrop utility (tools/tiffcrop.c:3516) in the libtiff library, which allows a hacker to cause a service failure.

The vulnerability of the tiffcrop utility tools/tiffcrop.c:3516 in the libtiff library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00026EPSS
Exploits1References17Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:0 a.m.1 views

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.8CVSS8.4AI score0.02203EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/08 12:0 a.m.1 views

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.8CVSS8.4AI score0.03496EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/08 12:0 a.m.1 views

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.8CVSS6.4AI score
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/09/08 12:0 a.m.2 views

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.8CVSS8.3AI score0.01729EPSS
Exploits0References4
Rows per page
Query Builder