Lucene search
K

2506 matches found

Cvelist
Cvelist
added 2024/08/22 12:0 a.m.13 views

CVE-2024-45169

An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service DoS attacks and possibly remote code execution...

0.01384EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/08/22 12:0 a.m.14 views

CVE-2024-45166

An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service DoS attacks and possibly remote code execution...

7.8AI score0.01046EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/08/22 12:0 a.m.17 views

CVE-2024-45169

An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service DoS attacks and possibly remote code execution...

8.1AI score0.01384EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/08/22 12:0 a.m.5 views

UCI IDOL 2 安全漏洞

UCI IDOL 2 IDOL2,uciIDOL is a management system from UCI Inc. to optimize the company's business processes as well as increase productivity. A security vulnerability exists in UCI IDOL 2 version 2.12 and prior versions that stems from improper input validation, improper deserialization, and...

9.8CVSS7.9AI score0.01384EPSS
Exploits1References6
CNNVD
CNNVD
added 2024/08/22 12:0 a.m.4 views

UCI IDOL 2 安全漏洞

UCI IDOL 2 IDOL2,uciIDOL is a management system from UCI Inc. to optimize the company's business processes as well as increase productivity. A security vulnerability exists in UCI IDOL 2 version 2.12 and prior versions that stems from improper input validation, improper deserialization, and...

9.8CVSS7.9AI score0.01205EPSS
Exploits1References7
CVE
CVE
added 2024/08/22 12:0 a.m.55 views

CVE-2024-45169

CVE-2024-45169 affects UCI IDOL 2 (IDOL2/uciIDOL) up to version 2.12. The issue stems from improper input validation, improper deserialization, and restricting operations within memory buffer bounds, enabling Denial-of-Service and potentially remote code execution via the \xB0\x00\x3c byte sequen...

9.8CVSS7.9AI score0.01384EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2024/08/22 12:0 a.m.48 views

CVE-2024-45166

UCI IDOL 2 (IDOL2/uciIDOL) up to version 2.12 is affected by a vulnerability caused by improper input validation, improper deserialization, and improper restriction of memory buffer operations. The issue can lead to Denial-of-Service and possibly remote code execution, with an access violation an...

9.8CVSS7.8AI score0.01046EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2024/08/22 12:0 a.m.14 views

CVE-2024-45166

An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service DoS attacks and possibly remote code execution...

0.01046EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/08/22 12:0 a.m.5 views

PT-2024-7532 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to a memory buffer overflow in the AcTranslators.exe executable file of Autodesk AutoCAD. This can be exploited by using a specially crafted STEP file,...

7.8CVSS8.5AI score0.00207EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.5 views

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.8AI score0.00693EPSS
Exploits0References2
Redos
Redos
added 2024/08/14 12:0 a.m.28 views

ROS-20240814-05

A vulnerability in the "Save As" function of Mozilla Firefox, Firefox ESR and Thunderbird email client on Windows operating systems is related to insufficient input data validation. Thunderbird email client of Windows operating systems is related to insufficient input data validation. Exploitatio...

8.1CVSS8.6AI score0.0107EPSS
Exploits3
Redos
Redos
added 2024/08/14 12:0 a.m.23 views

ROS-20240814-01

Vulnerability of the nftablesnewtable function of Linux kernel operating systems is related to the operation exceeding the buffer boundaries in memory. Exploitation of the vulnerability may allow an intruder to gain unauthorized access to protected information...

7.8CVSS7.1AI score0.00312EPSS
Exploits0
NVD
NVD
added 2024/08/13 5:15 p.m.19 views

CVE-2022-23817

Insufficient checking of memory buffer in AMD Secure Processor ASP Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation...

7.3CVSS0.00182EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/08/13 4:51 p.m.35 views

CVE-2022-23817

Insufficient checking of memory buffer in AMD Secure Processor ASP Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation...

7.3CVSS0.00182EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/08/13 4:51 p.m.22 views

CVE-2022-23817

Insufficient checking of memory buffer in AMD Secure Processor ASP Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation...

7.3CVSS5.9AI score0.00182EPSS
Exploits0References4
CVE
CVE
added 2024/08/13 4:51 p.m.51 views

CVE-2022-23817

CVE-2022-23817 concerns insufficient memory-buffer checking in the AMD Secure Processor’s ASP Secure OS, enabling a local attacker with a malicious Trusted Application to read/write into the kernel virtual address space and potentially escalate privileges. Connected documents (AMD security bullet...

7.3CVSS5.9AI score0.00182EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/08/13 12:0 a.m.3 views

PT-2024-6182 · Microsoft · Windows Resilient File System +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Resilient File System ReFS. It is caused by a buffer overflow in memory, allowing a...

7.8CVSS7AI score0.00681EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2024/08/13 12:0 a.m.4 views

PT-2024-11524

Name of the Vulnerable Software and Affected Versions ASP Secure OS affected versions not specified Description The issue is related to insufficient checking of memory buffer in ASP Secure OS, which may allow an attacker with a malicious Trusted Application TA to read or write to the ASP Secure O...

7.3CVSS5.9AI score0.00182EPSS
Exploits0References12
Positive Technologies
Positive Technologies
added 2024/08/13 12:0 a.m.4 views

PT-2024-5709 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in memory, which can lead to the disclosure of protected information. This can be exploited by attackers to obtain sensitive information and affect...

5.5CVSS6.5AI score0.00631EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/08/09 12:0 a.m.4 views

The vulnerability of the Kernel Streaming WOW Thunk Service Driver (Drivers\ksthunk.sys) on Windows operating systems, which allows a hacker to escalate their privileges.

The vulnerability of the Kernel Streaming WOW Thunk Service Driver Drivers\ksthunk.sys on Windows operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS5.9AI score0.10503EPSS
Exploits0References2
Rows per page
Query Builder