Lucene search
+L

2581 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/05/17 6:46 a.m.8 views

Panasonic KW Watcher vulnerable to memory buffer error

Overview KW Watcher provided by Panasonic contains a vulnerability due to improper restriction of operations within the bounds of a memory buffer CWE-119, CVE-2024-4162. Michael Heinzl reported this vulnerability to Panasonic and coordinated. After the coordination was completed, Panasonic report...

4.4CVSS6.8AI score0.00172EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.7 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer during the processing of HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS8.1AI score0.00847EPSS
SaveExploits1References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.10 views

The vulnerability of the Win32k.sys component in Windows operating systems, which allows an attacker to increase their privileges and gain access to confidential data

The vulnerability of the Win32k.sys component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain access to confidential data...

7.8CVSS7.5AI score0.02551EPSS
SaveExploits2References3
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.9 views

The vulnerability of Adobe Illustrator’s graphic editor lies in the possibility of an operation exceeding the buffer boundaries in memory, which allows attackers to disclose protected information.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information by opening a specially created file...

5.5CVSS5.8AI score0.00245EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.8 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve an exploit where operations are performed outside the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Acrobat Reader 2020 are related to the execution of operations beyond the buffer in memory. Exploiting these vulnerabilities can allow attacke...

7.8CVSS8.1AI score0.0281EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.9 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve an exploit that allows an attacker to bypass memory buffers, thereby enabling them to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Acrobat Reader 2020 are related to the execution of operations beyond the buffer in memory. Exploiting these vulnerabilities can allow attacke...

5.5CVSS5.9AI score0.01767EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.44 views

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading beyond the buffer boundary in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created malicious file...

7.8CVSS6.2AI score0.00307EPSS
SaveExploits0References2Affected Software1
ICS
ICS
added 2024/05/14 12:0 a.m.58 views

Siemens PS/IGES Parasolid Translator Component

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

7.8CVSS8.3AI score0.0039EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
added 2024/05/13 12:0 a.m.7 views

The vulnerability of the Linux operating system’s kernel allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.1CVSS7.1AI score0.08555EPSS
SaveExploits0References45Affected Software13
CNNVD
CNNVD
added 2024/05/10 12:0 a.m.7 views

HDF Group HDF5 安全漏洞

HDF Group HDF5 is a suite of tools for managing and storing different types of data from the American company HDF Group. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A security vulnerability exists in HDF5 Library version 1.14.3...

8.8CVSS7.9AI score0.00944EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/05/07 12:0 a.m.21 views

The vulnerability of the flow processing daemon (flowd) in Juniper Networks’ Junos OS routers of the MX series allows a attacker to cause a service failure.

The vulnerability of the flow processing daemon on Juniper Networks’ Junos OS routers of the MX series is related to the operation of data out of the buffer in memory due to improperly implemented URL filtering based on templates. Exploiting this vulnerability can allow a remote attacker to cause...

7.8CVSS5.8AI score0.00694EPSS
SaveExploits0References2Affected Software1
Redos
Redos
added 2024/05/07 12:0 a.m.35 views

ROS-20240507-07

A vulnerability in the ProcRenderAddGlyphs function of the X Window System Xorg-server is related to the use of memory after it has been freed. Exploitation of the vulnerability could allow an attacker to execute arbitrary code using a specially crafted file Vulnerability of ProcXIPassiveGrabDevi...

7.8CVSS7.4AI score0.01843EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/05/03 12:0 a.m.7 views

The vulnerability of the microprogramming software in SIP phones of the Mitel series 6800, 6900, 6970, and 6900w allows a intruder to execute arbitrary commands.

The vulnerability of the microprogramming software of Mitel telephones of models 6800, 6900, 6970, and 6900w lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending...

9CVSS6.2AI score0.0025EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/30 12:0 a.m.11 views

The vulnerability of Adobe Illustrator’s graphic editor arises from the possibility of an operation beyond the buffer boundaries in memory, allowing a malicious actor to gain unauthorized access to protected information.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS5.8AI score0.00245EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/04/26 12:0 a.m.11 views

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page or file...

10CVSS7.3AI score0.01228EPSS
SaveExploits1References17Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/04/24 12:0 a.m.13 views

The vulnerability of the KEYENCE CORPORATION’s programming software for programmable logic controllers, as well as the data viewing and analysis software for controllers called KV REPLAY VIEWER, relates to writing beyond the buffer boundaries in memory. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the KEYENCE CORPORATION KV STUDIO programming software and the KV REPLAY VIEWER data viewing and analysis software lies in the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remote...

10CVSS7.9AI score0.00848EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/04/18 12:0 a.m.11 views

The vulnerability of the Daemon Routing Protocols (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause service interruptions.

The vulnerability of the Daemon Routing Protocols RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS5.7AI score0.00664EPSS
SaveExploits0References2Affected Software2
Huawei
Huawei
added 2024/04/17 12:0 a.m.33 views

Security Advisory - Huawei PC Product Vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer

A Huawei PC product is vulnerable to improper restriction of operations within the bounds of a memory buffer. Successful exploitation of this vulnerability could compromise SMRAM memory, resulting in code execution in SMM.Vulnerability ID:HWPSIRT-2023-11450 This vulnerability has been assigned a...

7.8CVSS7.1AI score0.0013EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.7 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.

The vulnerability of the Secure Boot protocol for Windows operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...

8.3CVSS7.8AI score0.01231EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.8 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.

The vulnerability of the Secure Boot protocol for Windows operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...

7.1CVSS7.9AI score0.01273EPSS
SaveExploits0References2
Rows per page
Query Builder