Lucene search
+L

2244 matches found

BDU FSTEC
BDU FSTEC
added 2021/03/25 12:0 a.m.7 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Arbitrary code can be executed in the context of the current user using a specially crafte...

8.8CVSS7.4AI score0.02956EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:0 a.m.9 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Arbitrary code can be executed in the context of the current user using a specially crafte...

8.8CVSS7.4AI score0.02956EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/03/23 12:0 a.m.4 views

Memory Out-of-Bounds Access Vulnerability in WebAccess/HMI Designer (CNVD-2021-24532)

WebAccess/HMI Designer is an integrated human-machine interface development tool. A memory out-of-bounds access vulnerability exists in WebAccess/HMI Designer, which can be exploited by an attacker to cause a denial of service...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2021/03/23 12:0 a.m.4 views

Memory Out-of-Bounds Access Vulnerability in WebAccess/HMI Designer

WebAccess/HMI Designer is an integrated human-machine interface development tool. A memory out-of-bounds access vulnerability exists in WebAccess/HMI Designer, which can be exploited by an attacker to cause a denial of service...

6.9AI score
SaveExploits0
OSV
OSV
added 2021/03/22 8:15 p.m.2 views

CVE-2021-22321

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include...

5.3CVSS6.1AI score
SaveExploits0References1
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.7 views

多款Huawei产品资源管理错误漏洞

Huawei S2700, etc. are products of Huawei, China.S2700 is an enterprise switch.USG9500 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a...

5.3CVSS5.7AI score0.00715EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/22 12:0 a.m.8 views

The vulnerability of the image conversion module from TIFF to RGBA format in the LibTIFF library allows a hacker to induce a service failure.

The vulnerability of the TIFF-to-RGBA tiff2rgba conversion module in the LibTIFF library is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially created TI...

7.1CVSS7.1AI score0.01574EPSS
SaveExploits0References9Affected Software3
CNNVD
CNNVD
added 2021/03/10 12:0 a.m.6 views

Katy Voor HHVM 缓冲区错误漏洞

Katy Voor HHVM is an open source application by Katy Voor. Provides an open source virtual machine designed to execute programs written in Hack. A security vulnerability exists in HHVM that allows memory to be read before memory buffers. The following products and versions are affected: HHVM...

7.5CVSS7.4AI score0.01218EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/03/09 12:0 a.m.9 views

PT-2021-3889

Name of the Vulnerable Software and Affected Versions PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 affected versions not specified Description The issue is related to a buffer overflow in the memory, which could allow a remote attacker to cause the device to...

7.8CVSS7.4AI score0.01185EPSS
SaveExploits0References10
Cvelist
Cvelist
added 2021/03/03 4:40 p.m.48 views

CVE-2020-27779

A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker to remove address ranges from memory creating an opportunity to circumvent SecureBoot protections after proper triage about grub's memory layout. The highest...

7.8AI score0.0039EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/02/25 12:0 a.m.5 views

Denial of Service Vulnerability in GX Works2 (CNVD-2021-16895)

GX Works2 is a PLC programming software. A memory out-of-bounds access vulnerability exists in GX Works2. An attacker could exploit this vulnerability to cause the program to crash...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2021/02/25 12:0 a.m.4 views

Memory Out-of-Bounds Access Vulnerability in GX Works2

GX Works2 is a PLC programming software. A memory out-of-bounds access vulnerability exists in GX Works2. An attacker could exploit this vulnerability to cause the program to crash...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2021/02/24 12:0 a.m.48 views

Rust Information Disclosure Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. An information disclosure vulnerability exists in versions of Rust prior to 0.1.3, which can be exploited to obtain sensitive information via a memory location that is never initialized by IoReader :: read...

7.5CVSS5.9AI score0.01557EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2021/02/19 12:0 a.m.6 views

The vulnerability of the DevTools set of tools in the Google Chrome web browser allows a hacker to escape from the isolated software environment.

The vulnerability of the DevTools set of tools in the Google Chrome web browser is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to exit from a isolated software environment...

7.3CVSS7AI score0.0051EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/02/19 12:0 a.m.8 views

The vulnerability of the Payments component in the Google Chrome web browser allows a hacker to execute arbitrary code.

The vulnerability of the Payments component in the Google Chrome web browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.3CVSS8.1AI score0.01139EPSS
SaveExploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/02/11 12:0 a.m.8 views

The vulnerability of Adobe Premiere Pro’s nonlinear video editing software, related to reading beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Premiere Pro’s nonlinear video editing software is related to reading data beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.1CVSS5.7AI score0.02677EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/11 12:0 a.m.6 views

The vulnerability of Adobe Premiere Rush’s video editing software, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Premiere Rush’s video editing software relates to reading data beyond the buffer limit in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

9.3CVSS7.8AI score0.06167EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2021/02/10 8:15 p.m.15 views

CVE-2020-13548

In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting...

8.8CVSS0.65804EPSS
SaveExploits1References1
Prion
Prion
added 2021/02/10 9:15 a.m.20 views

Information disclosure

Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions. To...

4.3CVSS4.9AI score0.00616EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/02/10 9:10 a.m.16 views

CVE-2021-23878 Clear text storage of sensitive Information in ENS

Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions. To...

7.3CVSS7.5AI score0.00616EPSS
SaveExploits0References1
Rows per page
Query Builder