Lucene search
+L

2317 matches found

CNVD
CNVD
added 2020/01/17 12:00 a.m.11 views

Foxit Reader Memory Misreference Vulnerability (CNVD-2020-04097)

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

8.8CVSS7.6AI score0.02422EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/01/16 12:00 a.m.16 views

Microsoft Excel Code Execution Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel that stems from the software's failure to properly handle memory objects. The vulnerability can be exploited to execute arbitrary code in the context of...

9.3CVSS7.6AI score0.17284EPSS
SaveExploits0References1
OSV
OSV
added 2020/01/14 11:15 p.m.5 views

CVE-2020-0613

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627,...

7.8CVSS7.1AI score0.00849EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/01/07 12:00 a.m.77 views

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4228-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4228-1 advisory. It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for the Linux kernel. A physically proximate attacker could use...

10CVSS7.5AI score0.16908EPSS
SaveExploits0References9
CVE
CVE
added 2019/12/29 7:59 p.m.173 views

CVE-2019-20063

CVE-2019-20063 affects libmysofa prior to version 0.8, caused by an uninitialized use of memory in hdf/dataobject.c, demonstrated by mysofa2json. Several advisories confirm the issue and list it among CVEs fixed by updating to libmysofa 0.9.1 (openSUSE SU-2021-444/OSV entries; openSUSE backports)...

8.8CVSS8.9AI score0.01453EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2019/12/18 5:33 p.m.103 views

CVE-2019-8598

CVE-2019-8598 is an input-validation issue identified in Apple platforms. The supplied documents show the vulnerability affecting Apple iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, and iCloud for Windows 7.12, with the impact described as a malicious applic...

5.5CVSS5.6AI score0.10254EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:00 a.m.11 views

The vulnerability of TeamViewer’s software for remote control of computers lies in the fact that the operation data can escape beyond the buffer in memory, allowing a hacker to cause a service failure.

The vulnerability of TeamViewer’s software for remote control is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

5CVSS6AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:00 a.m.10 views

The vulnerability of the Coalesced_MMIO function in the Linux operating system allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the CoalescedMMIO function in Linux operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and accessibility...

8.8CVSS7.1AI score0.00763EPSS
SaveExploits0References61Affected Software8
CNVD
CNVD
added 2019/12/16 12:00 a.m.8 views

Memory out-of-bounds read vulnerability in Adobe Acrobat and Reader (CNVD-2020-04330)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader memory out-of-bounds read vulnerability, attackers can use the...

7.5CVSS6.6AI score0.03561EPSS
SaveExploits0
CNVD
CNVD
added 2019/12/16 12:00 a.m.11 views

Memory out-of-bounds read vulnerability in Adobe Acrobat and Reader (CNVD-2020-04332)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader memory out-of-bounds read vulnerability, attackers can use the...

7.5CVSS6.6AI score0.03586EPSS
SaveExploits0
CNVD
CNVD
added 2019/12/16 12:00 a.m.15 views

Memory out-of-bounds read vulnerability in Adobe Acrobat and Reader (CNVD-2020-04321)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader memory out-of-bounds read vulnerability, attackers can use the...

7.5CVSS6.6AI score0.02893EPSS
SaveExploits0
CNVD
CNVD
added 2019/12/16 12:00 a.m.10 views

Adobe Acrobat and Reader suffer from a memory out-of-bounds read vulnerability (CNVD-2020-04324)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader memory out-of-bounds read vulnerability, remote attackers can us...

9.8CVSS6.7AI score0.03795EPSS
SaveExploits0
CNVD
CNVD
added 2019/12/16 12:00 a.m.8 views

Memory out-of-bounds read vulnerability in Adobe Acrobat and Reader (CNVD-2020-04329)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader memory out-of-bounds read vulnerability, attackers can use the...

7.5CVSS6.6AI score0.03592EPSS
SaveExploits0
NVD
NVD
added 2019/12/10 10:15 p.m.30 views

CVE-2019-1461

A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Microsoft Word Denial of Service Vulnerability'...

7.1CVSS6.4AI score0.04643EPSS
SaveExploits0References1
Prion
Prion
added 2019/12/10 10:15 p.m.24 views

Information disclosure

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1400...

2.1CVSS5AI score0.02158EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2019/12/10 10:15 p.m.27 views

Remote code execution

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'...

7.6CVSS7.9AI score0.08354EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2019/12/10 12:00 a.m.29 views

CVE-2019-14861

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the poorly named dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default...

5.3CVSS6.4AI score0.023EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.10 views

The vulnerability of the WebBluetooth component in Google Chrome allows a malicious actor to initiate the installation of a malicious Chrome extension and gain unauthorized access to protected information.

The vulnerability of the WebBluetooth component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to initiate the installation of malicious Chrome extensions and gain unauthorized access to protected information...

6.1CVSS6.9AI score0.00242EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.13 views

The vulnerability of the HTMLImportsController function in the Blink web page rendering mechanism of Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the HTMLImportsController function in the Blink web page rendering mechanism of Google Chrome relates to the use of memory after it is released. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

10CVSS8.2AI score0.01741EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:00 a.m.17 views

The vulnerability of the ReadSUNImage function (coders/sun.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to trigger a service failure.

The vulnerability of the ReadSUNImage function coders/sun.c in the cross-platform library for working with graphics, GraphicsMagick, arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a system failure...

7.8CVSS6.5AI score0.02477EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder