Lucene search
K

2499 matches found

BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.1 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.3AI score0.00336EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.1 views

The vulnerability of the Native Client component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS6.4AI score0.05367EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.1 views

The vulnerability of the Native Client component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS6.4AI score0.03005EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.1 views

The vulnerability of the Native Client component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS6.4AI score0.05367EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/21 12:0 a.m.1 views

The vulnerability of component t7xx in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of component t7xx in the Linux operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00033EPSS
Exploits0References19Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/11/20 12:0 a.m.1 views

The vulnerability of the ncm component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ncm component in the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS7AI score0.00024EPSS
Exploits0References38Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/11/17 12:0 a.m.1 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in the fact that operations are performed outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.2AI score0.0073EPSS
Exploits0References2
NVD
NVD
added 2024/11/14 4:15 p.m.12 views

CVE-2024-10921

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to...

8.1CVSS0.00758EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.3 views

PT-2024-10125 · Rsync +10 · Rsync +10

The rsync daemon is affected by a flaw that can be triggered when comparing file checksums, allowing an attacker to manipulate the checksum length and cause a comparison between a checksum and uninitialized memory. This results in the leak of one byte of uninitialized stack data at a time. An...

9.8CVSS7.3AI score0.1902EPSS
Exploits8References207
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.1 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00201EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.2 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing data outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the writing of data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.1AI score0.0014EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.1 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from operations that go beyond buffer boundaries in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS5.8AI score0.0004EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.1 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00201EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2024/11/13 5:15 a.m.9 views

CVE-2024-8938

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call to tamper with memory area involved in memory...

9.2CVSS0.0018EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/13 4:20 a.m.5 views

CVE-2024-8938

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call to tamper with memory area involved in memory...

9.2CVSS7.7AI score0.0018EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/13 4:20 a.m.13 views

CVE-2024-8938

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call to tamper with memory area involved in memory...

9.2CVSS0.0018EPSS
Exploits0References1
CVE
CVE
added 2024/11/13 4:20 a.m.390 views

CVE-2024-8938

CVE-2024-8938 affects Schneider Electric Modicon M340, MC80, and Momentum Unity M1E hardware. The root cause is a memory buffer handling flaw (CWE-119) that can enable arbitrary code execution after a Man-In-The-Middle attack, by crafting a Modbus function to tamper with memory areas involved in ...

9.2CVSS7.9AI score0.0018EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/13 4:17 a.m.8 views

CVE-2024-8937

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful Man-In-The Middle attack followed by sending a crafted Modbus function call to tamper with memory area involved in the...

8.3CVSS7.9AI score0.00078EPSS
Exploits0References1
NVD
NVD
added 2024/11/12 3:15 p.m.12 views

CVE-2024-42442

APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of the intended System Management Mode...

8.8CVSS0.00352EPSS
Exploits0References1
OSV
OSV
added 2024/11/12 3:15 p.m.2 views

CVE-2024-42442

APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of the intended System Management Mode...

8.8CVSS6.3AI score0.00352EPSS
Exploits0References1
Rows per page
Query Builder