Lucene search
K

2506 matches found

ICS
ICS
added 2019/07/30 6:0 a.m.237 views

Wind River VxWorks (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Wind River Equipment: VxWorks Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Integer Underflow, Improper Restriction of Operations within the Bounds of a Memory Buffer,...

9.8CVSS9.7AI score0.84177EPSS
Exploits7References10
BDU FSTEC
BDU FSTEC
added 2019/07/18 12:0 a.m.14 views

The vulnerability of the AuthIoDrv driver of the Secret Net Studio security system, which allows a hacker to cause a service failure.

The vulnerability of the AuthIoDrv driver of the Secret Net Studio information protection system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.6CVSS5.9AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/08 12:0 a.m.20 views

The vulnerability of the information protection system against unauthorized access is caused by an operation that goes beyond the buffer boundaries in memory, allowing a intruder to trigger a service failure.

The vulnerability of the information protection system against unauthorized access is due to an operation going beyond the buffer in memory file handling is not performed; the full path length exceeds 260 characters. Exploiting this vulnerability can allow a local attacker to cause a service...

3.6CVSS5.7AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/08 12:0 a.m.2 views

The vulnerability of Google Chrome’s browser, related to writing data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted HTML page...

8.8CVSS8.5AI score0.00726EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.2 views

The vulnerability of the built-in software in Intel NUC Kits relates to reading data beyond the buffer in memory. This allows attackers to access protected information, cause system failures, or gain increased privileges.

The vulnerability of the built-in software in the Intel NUC Kit arises from reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to access protected information, cause system failures, or increase their privileges...

7.5CVSS5.7AI score0.00392EPSS
Exploits0References3Affected Software40
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.3 views

The vulnerability of the built-in software in Intel NUC Kits is related to buffer overflows in memory, which allows attackers to access protected information, cause system failures, or gain increased privileges.

The vulnerability of the built-in software in the Intel NUC Kit is related to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to access protected information, cause system failures, or increase their privileges...

8.2CVSS5.9AI score0.00424EPSS
Exploits0References3Affected Software40
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.4 views

The vulnerability of the FFmpeg multimedia library, related to overflow in dynamic memory buffers, allows attackers to cause a service failure or execute arbitrary code.

The vulnerability of the FFmpeg multimedia library is related to overflow of the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code using a specially crafted file or stream...

8.8CVSS6AI score0.04244EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.2 views

The vulnerability of the KMD module in Intel Graphics Driver allows a hacker to trigger a service failure.

The vulnerability of the KMD module in the Intel Graphics Driver lies in reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

5CVSS5.7AI score0.00343EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.4 views

The vulnerability of the Intel Graphics Driver arises from an operation that goes beyond the buffer boundaries in memory, allowing a malicious actor to trigger a system failure.

The vulnerability of the Intel Graphics Driver is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

3.2CVSS5.7AI score0.00338EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.4 views

The vulnerability of Microsoft Word text editors, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Word relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

9.3CVSS6.3AI score0.04885EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.2 views

The vulnerability of the Jet Database Engine component of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the Jet Database Engine component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS6.2AI score0.1371EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.3 views

The vulnerability of the Jet Database Engine component of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the Jet Database Engine component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS6.2AI score0.2021EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.4 views

The vulnerability of the Jet Database Engine database management system in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Jet Database Engine database management system for Windows operating systems relates to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS6.1AI score0.2021EPSS
Exploits0References2
ICS
ICS
added 2019/06/11 12:0 a.m.113 views

Siemens LOGO!8 Devices

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: LOGO!8 devices Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Session Fixation 2. RISK EVALUATION Successful exploitation of these...

8.8CVSS8.5AI score0.01599EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2019/06/06 12:0 a.m.5 views

The vulnerability of Microsoft Edge and Internet Explorer relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge and Internet Explorer is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

7.6CVSS8.2AI score0.23102EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/24 12:0 a.m.3 views

The vulnerability of the igdkm64.sys driver, a graphics system driver for Intel Graphics Drivers, allows a hacker to cause a service failure.

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

3.2CVSS6.5AI score0.00321EPSS
Exploits0References4Affected Software1
Veracode
Veracode
added 2019/05/16 3:25 a.m.18 views

Remote Code Execution

Perl is vulnerable to remote code execution vulnerability. The vulnerability exists in the function Sregatom of the file regcomp.c of the component Regex Handler. An integer-overflow and a heap-based buffer-overflow vulnerability occur because it fails to properly bounds-check user-supplied input...

9.8CVSS9.7AI score0.0606EPSS
Exploits1References17Affected Software3
UbuntuCve
UbuntuCve
added 2019/05/08 5:29 p.m.35 views

CVE-2019-2053

In wnmparseneighborreportelem of wnmsta.c, there is a possible out-of-bounds read due to missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0...

5.5CVSS6.6AI score0.00171EPSS
Exploits0References2
OSV
OSV
added 2019/04/30 3:37 p.m.3 views

GHSA-Q492-F7GR-27RP Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file...

8.1CVSS7.3AI score0.00442EPSS
Exploits0References8
Github Security Blog
Github Security Blog
added 2019/04/30 3:37 p.m.36 views

Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file...

8.1CVSS2.7AI score0.00442EPSS
Exploits0References7Affected Software2
Rows per page
Query Builder