Lucene search
+L

1435 matches found

RedhatCVE
RedhatCVE
added 2022/02/11 1:49 p.m.69 views

CVE-2022-23772

A flaw was found in the big package of the math library in golang. The Rat.SetString could cause an overflow, and if left unhandled, it could lead to excessive memory use. This issue could allow a remote attacker to impact the availability of the system...

7.8CVSS4.4AI score0.0283EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/02/10 12:0 a.m.7 views

Google Golang 输入验证错误漏洞

Google Golang is a statically strongly typed, compiled language from Google, Inc. A memory consumption overflow vulnerability exists in Google Golang, which stems from a design or implementation impropriety in the code development process of a web-based system or product. An attacker could exploi...

7.8CVSS8.4AI score0.0283EPSS
SaveExploits0References28
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:0 a.m.13 views

The vulnerability of objects in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing programs allows a perpetrator to execute arbitrary code.

The vulnerability of objects in the Foxit Reader text viewer and Foxit PhantomPDF PDF editing programs relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious web...

10CVSS8AI score0.00349EPSS
SaveExploits0References6Affected Software2
PyPA
PyPA
added 2022/02/03 12:15 p.m.8 views

PYSEC-2022-57

Tensorflow is an Open Source Machine Learning Framework. The implementation of StringNGrams can be used to trigger a denial of service attack by causing an out of memory condition after an integer overflow. We are missing a validation on padwitdh and that result in computing a negative value for...

6.5CVSS6.8AI score0.00821EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.11 views

Mageia: Security Advisory (MGASA-2017-0215)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.0331EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.22 views

Mageia: Security Advisory (MGASA-2016-0383)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.6AI score0.01881EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/01/28 12:0 a.m.13 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in a buffer overflow in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially crafted PDF file...

7.8CVSS8AI score0.058EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/01/21 3:15 p.m.3 views

DEBIAN-CVE-2020-19861

When a zone file in ldns 1.7.1 is parsed, the function ldnsnsec3saltdata is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldnsrdfsizesaltrdf byte data can be copied, causing heap overflow information leakage...

7.5CVSS8.2AI score0.01493EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2022/01/21 7:46 a.m.25 views

CVE-2021-45940

A flaw was found in libbpf. The vulnerability occurs due to incorrect handling of memory in the bpfobjectopen function and leads to a heap-buffer-overflow. This flaw allows an attacker to execute unauthorized code or commands, read memory, or modify memory...

6.5CVSS5.8AI score0.01132EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.12 views

The vulnerability of the Demon 1905 microprogramming system’s MediaTek MT7603E, MT7610, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, and MT7915 microchips allows attackers to enhance their privileges.

The vulnerability of the MediaTek M7603, M7610, M7613, M7615, M7620, M7622, M7628, M7629, and M7915 microprogrammed software chips lies in the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges...

8.5CVSS7.9AI score0.0127EPSS
SaveExploits0References2Affected Software9
Tenable Nessus
Tenable Nessus
added 2022/01/12 12:0 a.m.45 views

RHEL 7 : kernel-rt (RHSA-2022:0065)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0065 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

6.7CVSS7.2AI score0.00473EPSS
SaveExploits0References9
OSV
OSV
added 2022/01/10 2:10 p.m.5 views

CVE-2021-39996

There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow...

9.8CVSS6.1AI score0.00843EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/10 2:10 p.m.28 views

CVE-2021-39996

There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow...

9.8CVSS0.00843EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:10 p.m.5 views

CVE-2021-39996

There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow...

9.8CVSS7.6AI score0.00843EPSS
SaveExploits0References3
Prion
Prion
added 2022/01/10 2:10 p.m.27 views

Heap overflow

There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow...

7.5CVSS9.6AI score0.00843EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
added 2022/01/07 10:39 p.m.30 views

CVE-2021-39996

There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may cause memory overflow...

9.8AI score0.00843EPSS
SaveExploits0References2
OSV
OSV
added 2022/01/01 5:15 a.m.9 views

AZL-33585 CVE-2021-44716 affecting package git-lfs for versions less than 3.1.4-17

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...

7.5CVSS6.6AI score0.03958EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/12/26 12:0 a.m.38 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2021-2805)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.3AI score0.00409EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/12/25 12:0 a.m.52 views

EulerOS 2.0 SP8 : kernel (EulerOS-SA-2021-2805)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - preallocelemsandfreelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication...

7.8CVSS6.5AI score0.00409EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.12 views

The vulnerability of the QTS and QuTS operating systems, related to buffer overflows in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of the QTS and QuTS operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data...

10CVSS6AI score
SaveExploits0References2
Rows per page
Query Builder