Lucene search
+L

3575 matches found

BDU FSTEC
BDU FSTEC
•added 2018/12/04 12:00 a.m.•20 views

Vulnerability of the Microsoft Graphics component in the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft Graphics component in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

10CVSS8.4AI score0.19059EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/03 12:00 a.m.•5 views

CVE-2018-7116: Improper Restriction of Operations within the Bounds of a Memory Buffer

HPE Intelligent Management Center IMC prior to IMC PLAT 7.3 E0605P06 is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This problem is resolved in IMC PLAT 7.3 E0605P06 or subsequent versions...

7.5CVSS7.4AI score0.10304EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/27 12:00 a.m.•6 views

CVE-2018-13376: Undefined Security Weakness

An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response...

7.5CVSS7.2AI score0.02119EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/27 12:00 a.m.•2 views

CVE-2018-19587: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Cesanta Mongoose 6.13, a SIGSEGV exists in the mongoose.c mgmqttaddsession function...

6.5CVSS6.9AI score0.00944EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/11/22 12:00 a.m.•2 views

PT-2018-2863

Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 5.2 through 5.6.3 Fortinet FortiOS versions 5.4.6 through 5.4.7 Description The issue is related to an uninitialized memory buffer leak in the web proxy's disclaimer response web pages. This could potentially cause...

7.8CVSS0.02119EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/14 12:00 a.m.•3 views

CVE-2018-8476: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployment Services TFTP Server Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows Server 2008, Windows Server 2012, Windows...

10CVSS8.7AI score0.64828EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2018/11/07 12:00 a.m.•15 views

The vulnerability of the Internet Explorer browser, related to the execution of operations beyond the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

7.6CVSS8.3AI score0.12788EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/05 12:00 a.m.•4 views

CVE-2018-17907: Improper Restriction of Operations within the Bounds of a Memory Buffer

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can force the application to read a value outside of an array...

4.3CVSS6AI score0.00891EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2018/10/26 12:00 a.m.•11 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer limit in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.8AI score0.19005EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2018/10/26 12:00 a.m.•11 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer limit in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.8AI score0.15925EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2018/10/26 12:00 a.m.•11 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created U3D file...

10CVSS7.8AI score0.13535EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2018/10/26 12:00 a.m.•11 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created EMF file...

10CVSS7.8AI score0.0552EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2018/10/22 8:53 p.m.•43 views

Improper Restriction of Operations within the Bounds of a Memory Buffer in akka-http-core

Akka HTTP versions = 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service...

7.5CVSS4.8AI score0.01103EPSS
SaveExploits0References3Affected Software2
ICS
ICS
•added 2018/10/17 12:00 a.m.•552 views

Omron CX-Supervisor (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.0 Vendor: Omron Equipment: CX-Supervisor Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Out-Of-Bounds Read, Use-After-Free, Incorrect Type Conversion or Cast 2. UPDATE INFORMATION This updated advisory is a follow-up to the...

7.8CVSS6.9AI score0.01627EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/15 12:00 a.m.•4 views

CVE-2018-18310: Improper Restriction of Operations within the Bounds of a Memory Buffer

An invalid memory address dereference was discovered in dwflsegmentreportmodule.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service application crash with a crafted ELF file, as demonstrated by considernotes...

5.5CVSS6.3AI score0.01407EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2018/10/11 12:00 a.m.•13 views

The vulnerability of the `sdcardfs_open` function in the Android operating system’s kernel allows a hacker to increase their privileges.

The vulnerability of the sdcardfsopen function in the Android operating system’s kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

8.4CVSS5.9AI score0.0019EPSS
SaveExploits0References2
OSV
OSV
•added 2018/10/10 8:29 p.m.•23 views

CVE-2018-12541

In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit 8192 bytes above which the WebSocket gets an HTTP response with the...

6.5CVSS6.8AI score
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/10 12:00 a.m.•3 views

CVE-2018-8423: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1,...

9.3CVSS8.2AI score0.32152EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/09 12:00 a.m.•6 views

CVE-2018-18193: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in libgig 4.1.0. There is operator new failure due to a big pWavePoolTable heap request in DLS::File::File in DLS.cpp...

8.8CVSS7.9AI score0.01185EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/09 12:00 a.m.•4 views

CVE-2018-18197: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in libgig 4.1.0. There is an operator new failure due to a big pSampleLoops heap request in DLS::Sampler::Sampler in DLS.cpp...

9.8CVSS8.3AI score0.01371EPSS
SaveExploits1References2
Rows per page
Query Builder