Lucene search
K

2506 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.4 views

The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of embedded software developed for Qualcomm chips lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow attackers to disclose protected information...

6.1CVSS5.7AI score0.00095EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.5 views

The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of embedded software developed for Qualcomm chips lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow attackers to disclose protected information...

7.8CVSS5.7AI score0.00097EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/12 12:0 a.m.5 views

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client on Android operating systems arises from operations that occur outside of the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client on Android operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.5CVSS5.8AI score0.00266EPSS
Exploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:0 a.m.4 views

The vulnerability of TOTOLINK N150RT router microprogramming software, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of TOTOLINK N150RT router microprogramming software lies in the fact that the operation values are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

9CVSS7.8AI score0.00811EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2025/05/01 12:55 p.m.11 views

CVE-2025-23159 media: venus: hfi: add a check to handle OOB in sfr region

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr-bufsize is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to...

0.00169EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2025/04/28 12:0 a.m.5 views

The vulnerability of the RPAC component in operating systems such as MacOS Sequoia, tvOS, visionOS, iOS, and iPadOS allows attackers to circumvent existing security restrictions.

The vulnerability of the RPAC component in macOS Sequoia, tvOS, visionOS, iOS, and iPadOS relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

6.8CVSS7.8AI score0.21255EPSS
Exploits6References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/24 12:0 a.m.5 views

The vulnerability of Tenda AC15 router’s microprogramming software, related to reading data outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the Tenda AC15 router’s microprogramming software is related to reading data outside the buffer in memory when processing the wepkey1 parameter. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

10CVSS8AI score0.00873EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.5 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the ability to write code beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.5AI score0.0026EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.4 views

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in the ability to write code beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in the writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created DOE file...

7.8CVSS6.2AI score0.00249EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/04/16 2:12 p.m.14 views

CVE-2025-22049 LoongArch: Increase ARCH_DMA_MINALIGN up to 16

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Increase ARCHDMAMINALIGN up to 16 ARCHDMAMINALIGN is 1 by default, but some LoongArch-specific devices such as APBDMA require 16 bytes alignment. When the data buffer length is too small, the hardware may make an error...

0.00166EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/04/16 12:0 a.m.8 views

Rockwell Automation Arena < 16.20.09 Multiple Vulnerabilities

The version of Rockwell Automation Arena installed on the remote Windows host is prior to 16.20.09. It is, therefore, affected by a multiple vulnerabilities - A local code execution vulnerability exists in the affected products due to an uninitialized pointer. The flaw is result of improper...

8.5CVSS7.3AI score0.00253EPSS
Exploits0References12
BDU FSTEC
BDU FSTEC
added 2025/04/15 12:0 a.m.7 views

The vulnerability of the tdhttpd service in the microprogramming software for Tenda AX1806 allows a hacker to cause a service failure.

The vulnerability of the tdhttpd service in the microprogramming-based router software of Tenda AX1806 relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

7.8CVSS5.9AI score0.0059EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.2 views

The vulnerability of the OpenSearch software package, related to reading data beyond the buffer in memory, allows a intruder to gain unauthorized access to protected information.

Vulnerability of the OpenSearch software package, related to reading data beyond the buffer in memory. Exploitation of this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

6.8CVSS6AI score0.00512EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.9 views

The vulnerability of the Linux operating system’s kernel Wi-Fi component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel Wi-Fi component relates to the operation of data out of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00288EPSS
Exploits0References18Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.3 views

The vulnerability of the jfs component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the jfs component in the Linux operating system’s kernel involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6.9AI score0.0023EPSS
Exploits0References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.5 views

The vulnerability of the Network File System (NFS) of the PowerScale OneFS operating system, which allows a hacker to compromise the integrity of the protected information.

The vulnerability of the Network File System NFS of the PowerScale OneFS operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected information...

3.1CVSS5.9AI score0.00215EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.5 views

Microsoft Edge browser’s vulnerability, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS6.3AI score0.00507EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/11 12:0 a.m.3 views

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.8AI score0.00669EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/04/10 4:19 p.m.18 views

CVE-2025-3285

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute...

8.5CVSS7.3AI score0.00249EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/04/10 4:17 p.m.20 views

CVE-2025-3288

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute...

8.5CVSS7.3AI score0.00249EPSS
Exploits0References3
Rows per page
Query Builder