Lucene search
+L

1140 matches found

Zero Day Initiative
Zero Day Initiative
•added 2022/01/06 12:00 a.m.•36 views

OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

3.3CVSS4.7AI score0.00248EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/01/04 12:00 a.m.•7 views

PT-2022-15979

Name of the Vulnerable Software and Affected Versions wolfSSL versions 5.x prior to 5.1.1 Description The issue affects connections without AEAD that use AES-CBC or DES3 with TLS versions 1.1 or 1.2 or DTLS versions 1.1 or 1.2. This occurs due to misplaced memory initialization in the BuildMessag...

9.1CVSS0.01379EPSS
SaveExploits0References12
Zero Day Initiative
Zero Day Initiative
•added 2021/12/21 12:00 a.m.•39 views

Adobe Premiere Rush MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Premiere Rush. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS4.1AI score0.01352EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/21 12:00 a.m.•43 views

Adobe Premiere Rush MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Premiere Rush. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS4.1AI score0.01774EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/20 9:15 p.m.•29 views

Design/Logic Flaw

Adobe Premiere Rush versions 1.5.16 and earlier allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose arbitrary data on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

4.3CVSS3.8AI score0.01352EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2021/12/20 9:15 p.m.•34 views

Design/Logic Flaw

Adobe Premiere Rush versions 1.5.16 and earlier allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose sensitive information on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

4.3CVSS5.2AI score0.01774EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/12/20 8:08 p.m.•47 views

CVE-2021-43746 Adobe Premiere Rush MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

Adobe Premiere Rush versions 1.5.16 and earlier allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose sensitive information on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

5.5CVSS6.1AI score0.01774EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/20 12:00 a.m.•5 views

CVE-2021-43746: Access of Uninitialized Pointer

Adobe Premiere Rush versions 1.5.16 and earlier allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose sensitive information on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

5.5CVSS7AI score0.01774EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/14 12:00 a.m.•14 views

PT-2021-5685 · Adobe · Premiere Rush

Name of the Vulnerable Software and Affected Versions: Adobe Premiere Rush versions 1.5.16 and earlier Description: The issue is related to the parsing of MP4 files and results from the lack of proper initialization of memory prior to accessing it. This allows remote attackers to disclose arbitra...

7.1CVSS6.8AI score0.01352EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/12/06 12:00 a.m.•20 views

Qualcomm’s various products have vulnerabilities related to chip resource management.

Qualcomm APQ8009 and others are products of Qualcomm Incorporated Qualcomm, U.S.A. The Qualcomm APQ8009 is a central processing unit CPU product.The Qualcomm APQ8096AU is a central processing unit.The Qualcomm APQ8009W is a central processing unit. A resource management error vulnerability exists...

8.4CVSS7.3AI score0.00154EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•28 views

Mozilla Firefox Security Advisory (MFSA2013-96) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

4.3CVSS5.8AI score0.02088EPSS
SaveExploits0References3
NVD
NVD
•added 2021/10/25 5:15 p.m.•65 views

CVE-2021-34855

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.1.3 49160. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

6.5CVSS0.00267EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/10/25 5:15 p.m.•24 views

CVE-2021-34855

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.1.3 49160. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

6.5CVSS6.2AI score0.00267EPSS
SaveExploits0References2
Prion
Prion
•added 2021/10/25 5:15 p.m.•30 views

Design/Logic Flaw

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.1.3 49160. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

2.1CVSS6.3AI score0.00267EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/10/25 5:15 p.m.•10 views

CVE-2021-34855

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.1.3 49160. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

6.5CVSS6AI score0.00267EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/10/25 5:10 p.m.•63 views

CVE-2021-34855

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.1.3 49160. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

6.5CVSS6.5AI score0.00267EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2021/09/22 12:24 a.m.•149 views

USN-5073-3: Linux kernel (Raspberry Pi) vulnerabilities

Norbert Slusarek discovered that the CAN broadcast manger bcm protocol implementation in the Linux kernel did not properly initialize memory in some situations. A local attacker could use this to expose sensitive information kernel memory. CVE-2021-34693 Murray McAllister discovered that the...

7.8CVSS7AI score0.00687EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2021/09/17 12:00 a.m.•16 views

Linux kernel Memory Initialization Error

The vulnerability of the Linux operating system’s kernel is related to memory initialization errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

6.5CVSS6.6AI score0.01245EPSS
SaveExploits0References30Affected Software3
osv_cve
osv_cve
•added 2021/09/08 3:15 p.m.•8 views

CVE-2021-1860

A memory initialization issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to disclose kernel memory...

6.5CVSS5.7AI score0.01521EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2021/09/08 3:15 p.m.•8 views

CVE-2021-1857

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processi...

6.5CVSS6.5AI score0.01224EPSS
SaveExploits0References8
Rows per page
Query Builder