Lucene search
K

2500 matches found

Huawei
Huawei
added 2024/04/17 12:0 a.m.29 views

Security Advisory - Huawei PC Product Vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer

A Huawei PC product is vulnerable to improper restriction of operations within the bounds of a memory buffer. Successful exploitation of this vulnerability could compromise SMRAM memory, resulting in code execution in SMM.Vulnerability ID:HWPSIRT-2023-11450 This vulnerability has been assigned a...

7.8CVSS7.1AI score0.00038EPSS
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.1 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.

The vulnerability of the Secure Boot protocol for Windows operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...

8.3CVSS7.8AI score0.00636EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.1 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.

The vulnerability of the Secure Boot protocol for Windows operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...

7.1CVSS7.9AI score0.00636EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.1 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.

The vulnerability of the Secure Boot protocol for Windows operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...

7.1CVSS7.9AI score0.00636EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.1 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.

The vulnerability of the Secure Boot security loading protocol for Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions using a specially created .bcd file...

6.5CVSS8.1AI score0.00955EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/04/12 3:26 p.m.14 views

CVE-2024-30398 Junos OS: SRX4600 Series - A high amount of specific traffic causes packet drops and an eventual PFE crash

An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When a high amount of specific traffic is received on a...

8.7CVSS7.7AI score0.00197EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/04/11 12:0 a.m.18 views

Juniper Junos OS Vulnerability (JSA79176)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA79176 advisory. - An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an...

8.7CVSS5.6AI score0.00197EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/04/10 12:0 a.m.2 views

PT-2024-3102 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions 21.2 before 21.2R3-S7 Junos OS versions 21.4 before 21.4R3-S6 Junos OS versions 22.1 before 22.1R3-S5 Junos OS versions 22.2 before 22.2R3-S3 Junos OS versions 22.3 before 22.3R3-S2 Junos OS versions 22.4 before 22.4R3 Junos...

8.7CVSS6.8AI score0.00197EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.2 views

PT-2024-2778 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security-feature bypass vulnerability in the implementation of the Secure Boot protocol in Windows operating systems. It is caused by a buffer overflow in memory,...

7.8CVSS9.2AI score0.0046EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2024/04/09 12:0 a.m.1 views

The vulnerability of thejq programming language lies in its ability to write data beyond the buffer boundaries in memory, which allows attackers to trigger a service failure.

The vulnerability of the JQ programming language lies in the overflow of the stack buffer in distributions that use decNumber. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.00103EPSS
Exploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/04/04 12:0 a.m.1 views

The vulnerability of the programmatic tools and libraries used for working with OpenSC smart cards stems from improper restrictions on operations within memory buffers. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the programmatic tools and libraries used to work with OpenSC smart cards is related to memory errors during card registration using the pkcs15-init function. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility o...

6.8CVSS6.6AI score0.00295EPSS
Exploits0References12Affected Software6
Redos
Redos
added 2024/04/03 12:0 a.m.27 views

ROS-20240403-09

Vulnerability of the peekforas4capability function of the software tool for implementing network routing on Unix-like systems FRRouting is related to flaws in the use of the assert function. Unix-like systems FRRouting is related to flaws in using assert function. Exploitation The vulnerability...

7.5CVSS7.3AI score0.0424EPSS
Exploits3
BDU FSTEC
BDU FSTEC
added 2024/04/02 12:0 a.m.1 views

The vulnerability of the Arena Simulation software in simulating and automating discrete events lies in its ability to read data beyond the buffer in memory. This allows attackers to execute arbitrary code and compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Arena Simulation software for modeling and automating discrete events is related to reading data beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code and compromise the confidentiality, integrity, and accessibility of...

7.8CVSS6.2AI score0.00009EPSS
Exploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2024/03/28 4:14 a.m.2 views

SUSE CVE-2024-26646

In the Linux kernel, the following vulnerability has been resolved: thermal: intel: hfi: Add syscore callbacks for system-wide PM The kernel allocates a memory buffer and provides its location to the hardware, which uses it to update the HFI table. This allocation occurs during boot and remains...

4.9CVSS6.7AI score0.00018EPSS
Exploits0References10
Redos
Redos
added 2024/03/28 12:0 a.m.32 views

ROS-20240328-12

The vulnerability of the Sparseunipropstring function of the regcomp.c file of the Perl programming language interpreter is related to the operation exceeding the memory buffer boundaries. is related to an operation exceeding the buffer boundaries in memory. Exploitation of the vulnerability coul...

7.1AI score
Exploits0
OSV
OSV
added 2024/03/26 6:15 p.m.1 views

DEBIAN-CVE-2024-26646

In the Linux kernel, the following vulnerability has been resolved: thermal: intel: hfi: Add syscore callbacks for system-wide PM The kernel allocates a memory buffer and provides its location to the hardware, which uses it to update the HFI table. This allocation occurs during boot and remains...

5.5CVSS5.9AI score0.00018EPSS
Exploits0References1
OSV
OSV
added 2024/03/26 4:15 p.m.2 views

CVE-2024-21920

A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This could reveal sensitive information and even cause the application to crash, resulting in a denial-of-service condition. To trigger this, the...

7.1CVSS6AI score0.00014EPSS
Exploits0References1
NVD
NVD
added 2024/03/26 4:15 p.m.10 views

CVE-2024-21920

A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This could reveal sensitive information and even cause the application to crash, resulting in a denial-of-service condition. To trigger this, the...

7.1CVSS4.9AI score0.00014EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/26 3:48 p.m.22 views

CVE-2024-21920 Rockwell Automation Arena Simulation Vulnerable To Buffer Overflow

A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This could reveal sensitive information and even cause the application to crash, resulting in a denial-of-service condition. To trigger this, the...

4.4CVSS6.7AI score0.00014EPSS
Exploits0References1
CVE
CVE
added 2024/03/26 3:48 p.m.55 views

CVE-2024-21920

Rockwell Automation Arena Simulation (Arena Simulation Software) version 16.00 is affected by a memory boundary vulnerability in which an attacker could read beyond allocated memory and cause a crash or potential data disclosure after a user opens a malicious file. The vulnerability family spans ...

7.1CVSS6.3AI score0.00014EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder