Lucene search
+L

390 matches found

BDU FSTEC
BDU FSTEC
added 2024/01/22 12:0 a.m.11 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...

10CVSS8.6AI score0.03769EPSS
Exploits1References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:0 a.m.6 views

The vulnerability of the DeviceFocusEvent and XIQueryPointer functions in the X Window System X.Org Server implementation allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the DeviceFocusEvent and XIQueryPointer functions in the X Window System X.Org Server implementation is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its...

7.8CVSS6.7AI score0.02106EPSS
Exploits0References13Affected Software8
BDU FSTEC
BDU FSTEC
added 2023/12/15 12:0 a.m.11 views

The vulnerability of Adobe Dimension’s 3D design software relates to operations that occur beyond buffer boundaries in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Dimension’s 3D design software relates to the execution of operations beyond the buffer boundaries in memory when processing USD format files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by creating a speciall...

5.5CVSS5.9AI score0.00424EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2023/12/13 12:0 a.m.3 views

xorg-server buffer error vulnerability

xorg-x11-server is an X Window System display server from the X.org Foundation. A security vulnerability exists in xorg-server versions prior to 21.1.10, xwayland versions prior to 23.2.3, which stems from a memory read/write overrun that may be caused by querying or changing an XKB button...

7.8CVSS7.9AI score0.01587EPSS
Exploits0References37
BDU FSTEC
BDU FSTEC
added 2023/12/01 12:0 a.m.11 views

The vulnerability of the microprogrammed software of ZyXEL VPN, USG FLEX, and ATP lies in the fact that operation outputs go beyond the buffer in memory, allowing a intruder to cause a service failure.

The vulnerability of the microprogrammed network devices ZyXEL VPN, USG FLEX, and ATP lies in the fact that the operation values escape outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure by executing a command to flush system logs...

5.5CVSS6.1AI score0.00221EPSS
Exploits0References3Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/11/18 12:0 a.m.9 views

The vulnerability of the Microsoft DWM Core Library on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Microsoft DWM Core Library on Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS8.2AI score0.11977EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/11/02 12:0 a.m.7 views

The vulnerability of the microprogrammed logic controller LS ELECTRIC XBC-DN32U arises from an operation that goes beyond the buffer boundaries in memory, allowing a intruder to cause a service failure.

The vulnerability of the microprogrammed software of the programmable logic controller LS ELECTRIC XBC-DN32U arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

7.8CVSS7.4AI score0.00663EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.7 views

The vulnerability of the web page rendering module in WebKit operating systems for iOS, tvOS, iPadOS, MacOS, and watchOS allows attackers to execute arbitrary code.

The vulnerability of the web page rendering module in WebKit operating systems for iOS, tvOS, iPadOS, MacOS, and watchOS is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.03609EPSS
Exploits0References12Affected Software12
Snyk
Snyk
added 2023/10/24 3:0 p.m.19 views

Missing Cryptographic Step

Overview openssl is a package that wraps the OpenSSL library. Affected versions of this package are vulnerable to Missing Cryptographic Step when the EVPEncryptInitex2, EVPDecryptInitex2 or EVPCipherInitex2 functions are used. An attacker can cause truncation or overreading of key and...

7.5CVSS6.9AI score0.03332EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/21 12:0 a.m.14 views

The vulnerability of the ms_lib_process_bootblock() function in the drivers/usb/storage/ene_ub6250.c file of the ene_usb6250 driver for the ENE SD/MS embedded system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mslibprocessbootblock function in the drivers/usb/storage/eneub6250.c file of the eneusb6250 driver for the ENE SD/MS embedded system in the Linux operating system is related to access to memory beyond the allocated buffer. Exploiting this vulnerability could allow a...

5.5CVSS6.1AI score0.00282EPSS
Exploits0References22Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/21 12:0 a.m.10 views

The vulnerability of the fill_kobj_path() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fillkobjpath function in the Linux operating system’s kernel is related to memory writing beyond the bounds of the allocated buffer in the lib/kobject.c module. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

6.4CVSS6.5AI score0.00284EPSS
Exploits0References29Affected Software3
RedHat Linux
RedHat Linux
added 2023/10/19 1:19 p.m.4 views

php: 1-byte array overrun in common path resolve code

A vulnerability was found in PHP. This security issue occurs because the core path resolution function allocates a buffer one byte small. Resolving paths with lengths close to the system MAXPATHLEN setting may lead to the byte after the allocated buffer being overwritten with a NULL value, which...

8.1CVSS7.5AI score0.01288EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2023/10/15 12:0 a.m.8 views

The vulnerability of the Neural Engine component in operating systems such as watchOS, iPadOS, and iOS allows attackers to gain increased privileges.

The vulnerability of the Neural Engine component in operating systems such as watchOS, iPadOS, and iOS lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.6AI score0.00211EPSS
Exploits0References6Affected Software3
OSV
OSV
added 2023/10/14 9:15 p.m.2 views

DEBIAN-CVE-2023-45862

An issue was discovered in drivers/usb/storage/eneub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation...

5.5CVSS6.1AI score0.00282EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:0 a.m.6 views

The vulnerability of the formSetMacFilterCfg function in the microprogramming software for Tenda AC10U allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetMacFilterCfg function in the Tenda AC10U router software relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

10CVSS8.2AI score0.0091EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/02 12:0 a.m.11 views

The vulnerability of WLAN micro-programming software from MediaTek allows attackers to enhance their privileges.

The vulnerability of the WLAN microprogramming software solution from MediaTek arises from the execution of operations beyond the buffer boundaries in memory, due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.8CVSS7AI score0.00089EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/09/25 12:0 a.m.8 views

The vulnerability of the tiffcrop utility in the LibTIFF library, which allows a hacker to cause a service failure.

The vulnerability of the tiffcrop utility in the LibTIFF library is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS7.1AI score0.00346EPSS
Exploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:0 a.m.7 views

The vulnerability of the library for processing files and network operations, hutool-json, is related to writing beyond the buffer boundaries in memory. This allows a malicious actor to cause a service failure.

The vulnerability of the hutool-json library for file processing and network operations is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7.4AI score0.00762EPSS
Exploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:0 a.m.7 views

The vulnerability of the tiffcrop utility (tools/tiffcrop.c:3502) in the libtiff library, which allows a hacker to cause a service failure.

The vulnerability of the tiffcrop utility tools/tiffcrop.c:3502 in the libtiff library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00435EPSS
Exploits1References17Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:0 a.m.9 views

The vulnerability in the `org.json.JSONTokener.nextValue::JSONTokener.java` component of the file and network operations handling library hutool-json, which allows a attacker to cause a service failure.

The vulnerability in the org.json.JSONTokener.nextValue::JSONTokener.java component of the file and network operations library hutool-json is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7AI score0.00943EPSS
Exploits1References5Affected Software2
Rows per page
Query Builder