Lucene search
K

2506 matches found

BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.2 views

The vulnerability of the HyperLogLog algorithm in a resident database management system for NoSQL Redis lies in the fact that the output of the operation may exceed the buffer limits in memory. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis stems from a flaw in the HyperLogLog data structure. This flaw occurs when the SETRANGE command is executed, allowing up to 3 bytes of information to be written beyond the memory buffer...

9CVSS5.4AI score0.26048EPSS
Exploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.5 views

The vulnerability of the calculate_gain() function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to compromise data integrity, gain unauthorized access to protected information, and cause service failure.

The vulnerability of the calculategain function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to the escape from memory buffers. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

7.8CVSS5.5AI score0.02586EPSS
Exploits2References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.2 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2017/Adobe Acrobat Reader 2017 involve an exploit where operations are performed outside the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the execution of operations beyond the buffer in memory. Exploiting these vulnerabilities can allow a...

9.3CVSS6.4AI score0.1362EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2019/10/07 12:0 a.m.30 views

Siemens LOGO!8 PLC < 1.82.02 Improper Restriction within Memory Buffer or Session Fixation DoS (ICSA-19-162-03)

Binary data 720304.prm...

7.8CVSS7.3AI score0.01599EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2019/09/30 7:31 p.m.10 views

Buffer Overflow in centra

Denial of Service Impact Affected Centra versions will, when not in stream mode, buffer responses to requests into memory with no size limit. This issue affects anyone requesting content from untrusted sources. Patches Version 2.4.0 resolves the issue by limiting the size of buffered response bod...

3.8AI score
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/09/27 12:0 a.m.5 views

The vulnerability of the WebSocket component in Firefox browsers, which allows attackers to disclose protected information

The vulnerability of the WebSocket component in Firefox arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this mechanism...

6.4CVSS5.7AI score0.01702EPSS
Exploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/09/19 12:0 a.m.4 views

Exim mail server vulnerability related to an operation exceeding buffer boundaries in memory, allowing an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service

A vulnerability in the Exim mail server is related to errors in processing objects in memory. Exploitation of the vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause denial of service...

10CVSS5.5AI score0.35736EPSS
Exploits3References16Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/09/13 12:0 a.m.3 views

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to execute arbitrary code on the target system.

The vulnerability of the DHCP server service for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using specially crafted packets...

7.8CVSS6.5AI score0.06738EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/09/05 12:0 a.m.3 views

The vulnerability of the PAN-OS operating system, related to the operation of data out of the buffer in memory, allows attackers to cause memory corruption.

The vulnerability of the PAN-OS operating system is related to the operation of data out of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause memory corruption or service failures when the current client interactive session is re-executed...

9CVSS5.8AI score0.01036EPSS
Exploits0References6Affected Software1
ICS
ICS
added 2019/09/03 12:0 a.m.73 views

EZAutomation EZ PLC Editor

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: EZAutomation Equipment: EZ PLC Editor Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...

7.8CVSS7.8AI score0.01367EPSS
Exploits0References5
NVD
NVD
added 2019/08/30 9:15 a.m.29 views

CVE-2019-5612

In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r351265, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, the kernel driver for /dev/midistat implements a read handler that is not thread-safe. A multi-threaded program c...

7.8CVSS7.3AI score0.00909EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/08/30 12:0 a.m.3 views

The vulnerability of the Windows operating system arises from operations that go beyond buffer boundaries in memory, allowing attackers to trigger a system failure.

The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause a service failure through a specially created application...

5.8CVSS5.7AI score0.04415EPSS
Exploits0References2
NVD
NVD
added 2019/08/29 1:15 a.m.23 views

CVE-2017-14202

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...

7.8CVSS7.9AI score0.00566EPSS
Exploits0References3
Prion
Prion
added 2019/08/29 1:15 a.m.15 views

Design/Logic Flaw

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...

4.6CVSS7.9AI score0.00566EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2019/08/29 12:44 a.m.166 views

CVE-2017-14202

CVE-2017-14202 in Zephyr concerns the shell component where an improper restriction of operations within the bounds of a memory buffer can be triggered by a serial or telnet connection, causing a crash and potentially arbitrary code execution. Affected: Zephyr shell versions prior to 1.14.0 on al...

7.8CVSS7.9AI score0.00566EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2019/08/29 12:44 a.m.22 views

CVE-2017-14202 The shell implementation does not protect against buffer overruns resulting in unpredictable behavior.

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...

7.9AI score0.00566EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/08/20 12:0 a.m.3 views

The vulnerability of the buffer in the dev.c software for working with YubiKey security keys allows a perpetrator to execute arbitrary code.

The vulnerability of the buffer in the dev.c software for working with YubiKey security keys is related to the execution of operations beyond the boundaries of the memory buffer. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

6.8CVSS6.3AI score0.00499EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/08/16 12:0 a.m.5 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine arises from reading beyond the buffer boundary in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

9.3CVSS8.3AI score0.00698EPSS
Exploits0References8Affected Software4
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:0 a.m.48 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0070)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel packages installed that are affected by multiple vulnerabilities: - Integer overflow in the aiosetupsinglevector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibl...

10CVSS7.8AI score0.52189EPSS
Exploits28References37
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:0 a.m.34 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0074)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel-rt packages installed that are affected by multiple vulnerabilities: - Integer overflow in the aiosetupsinglevector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or...

10CVSS7.7AI score0.52189EPSS
Exploits28References36
Rows per page
Query Builder