Lucene search
K

2503 matches found

BDU FSTEC
BDU FSTEC
added 2023/11/02 12:0 a.m.2 views

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to data writing beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially created PAR files...

7.8CVSS7.8AI score0.00059EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.2 views

The vulnerability of the chkResetVeriRegister() function in TP-LINK’s TL-WR886N router software allows a attacker to compromise the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the chkResetVeriRegister function in TP-LINK’s TL-WR886N router software lies in the fact that the operation is performed outside of the buffer in memory. Exploiting this vulnerability allows an attacker to influence the integrity, availability, and confidentiality of the...

10CVSS7.9AI score0.00282EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.1 views

The vulnerability of the getRegVeriRegister() function in TP-LINK’s router software TL-WR886N allows a attacker to compromise the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the getRegVeriRegister function in TP-LINK’s TL-WR886N router software lies in the fact that the operation is performed outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the integrity, availability, and confidentiality of the...

10CVSS8AI score0.00282EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.4 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, Adobe Acrobat Reader 2020, and Adobe Acrobat 2017 involve reading data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, Adobe Acrobat Reader 2020, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to reading data beyond the buffer in memory. Exploiting...

5.5CVSS6.7AI score0.00095EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.1 views

The vulnerability in Adobe Dimension’s 3D design software relates to reading beyond the buffer in memory, allowing an attacker to bypass the ASLR protection mechanism.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...

7.8CVSS5.7AI score0.0022EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/30 12:0 a.m.2 views

The vulnerability of the Adobe Photoshop graphic editor, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.8AI score0.03964EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/30 12:0 a.m.1 views

The vulnerability of Firefox browser, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the Firefox browser is related to the issue of operations going beyond the buffer boundaries in memory when processing HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.5CVSS8.3AI score0.00405EPSS
Exploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/10/30 12:0 a.m.1 views

The vulnerability of the Adobe Photoshop graphic editor, related to reading beyond the buffer in memory, allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS7.8AI score0.02348EPSS
Exploits0References2Affected Software2
NVD
NVD
added 2023/10/27 7:15 p.m.15 views

CVE-2023-27854

An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow. The threat-actor could then execute malicious code on the system...

7.8CVSS7.9AI score0.0003EPSS
Exploits0References1
Prion
Prion
added 2023/10/27 7:15 p.m.20 views

Buffer overflow

An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow. The threat-actor could then execute malicious code on the system...

4.4CVSS7.9AI score0.0003EPSS
Exploits0References1
CVE
CVE
added 2023/10/27 6:51 p.m.58 views

CVE-2023-27854

CVE-2023-27854 affects Rockwell Automation Arena (Arena) 16.20.x; vulnerability is a memory boundary issue (out-of-bounds read) and related uninitialized pointer, triggered by processing crafted files. Exploitation could allow arbitrary code execution with local access and user interaction requir...

7.8CVSS7.9AI score0.0003EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/27 6:51 p.m.19 views

CVE-2023-27854 Rockwell Automation Arena® Simulation Out of Bounds Read Vulnerability

An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow. The threat-actor could then execute malicious code on the system...

7.8CVSS8.1AI score0.0003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/10/27 6:51 p.m.19 views

CVE-2023-27854 Rockwell Automation Arena® Simulation Out of Bounds Read Vulnerability

An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow. The threat-actor could then execute malicious code on the system...

7.8CVSS8AI score0.0003EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/10/27 12:0 a.m.3 views

PT-2023-6581 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena affected versions not specified Description: The issue is related to a memory buffer overflow, allowing an attacker to execute arbitrary code in the context of the current user. This could affect the confidentiality,...

7.8CVSS7.4AI score0.0003EPSS
Exploits0References10
Veracode
Veracode
added 2023/10/26 10:32 a.m.17 views

Out-of-bounds Write

libstb.so is vulnerable to Out-of-bounds Write. The vulnerability is caused due to a function f-vendori = get8packetf;. The root cause is an integer overflow in setupmalloc function in file stb/stbvorbis.c in which a sufficiently large value in the variable sz overflows with sz+7 and the negative...

7.8CVSS7.4AI score0.0005EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/25 12:0 a.m.2 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve reading data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to...

5.5CVSS6.1AI score0.00176EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/24 12:0 a.m.3 views

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS8AI score0.00097EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/24 12:0 a.m.1 views

The vulnerability of the Substance 3D Stager software lies in its susceptibility to buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.9AI score0.00103EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/23 12:0 a.m.1 views

The vulnerability of the command-line interface (CLI) of Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause service interruptions.

The vulnerability of the command-line interface CLI of Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00058EPSS
Exploits0References3Affected Software2
NVD
NVD
added 2023/10/21 12:15 a.m.9 views

CVE-2023-45676

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in f-vendori = get8packetf;. The root cause is an integer overflow in setupmalloc. A sufficiently large value in the variable sz overflows with sz+7 in and the negative...

7.8CVSS7.8AI score0.0005EPSS
Exploits0References3
Rows per page
Query Builder