Lucene search
+L

2255 matches found

BDU FSTEC
BDU FSTEC
added 2025/01/20 12:0 a.m.7 views

The vulnerability of the Brokering File System (BFS) in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Brokering File System BFS in Windows operating systems lies in the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.7AI score0.00629EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/01/17 12:0 a.m.10 views

The vulnerability of the Windows operating system’s Telephony Service allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system’s Telephony Service is related to overflowing buffers in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.01388EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/01/17 12:0 a.m.10 views

The vulnerability of the rsyncd utility for transferring and synchronizing Rsync files allows a attacker to bypass ASLR protection and gain unauthorized access to protected information.

The vulnerability of the rsyncd utility for transferring and synchronizing Rsync files is related to the issue of the operation exceeding the buffer boundaries due to incorrect comparison of file checksums. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection and...

7.8CVSS7.4AI score0.08655EPSS
SaveExploits2References22Affected Software12
BDU FSTEC
BDU FSTEC
added 2025/01/16 12:0 a.m.7 views

The vulnerability of the Telephony Service in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Telephony Service in Microsoft Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.01242EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/16 12:0 a.m.7 views

The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development tools is related to buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development environment is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

7.6CVSS8AI score0.01794EPSS
SaveExploits0References3Affected Software5
NVD
NVD
added 2025/01/14 6:15 p.m.7 views

CVE-2025-21323

Windows Kernel Memory Information Disclosure Vulnerability...

5.5CVSS0.00833EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/01/14 8:0 a.m.7 views

Windows Kernel Memory Information Disclosure Vulnerability

...

5.5CVSS7.1AI score0.00912EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/14 12:0 a.m.5 views

PT-2025-1106 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to a remote code execution vulnerability in Visual Studio. It involves a memory reading vulnerability that allows an out-of-bounds memory read. Exploitation of th...

10CVSS9.8AI score0.0155EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.5 views

Microsoft Windows Kernel 日志信息泄露漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A log information disclosure vulnerability exists in Microsoft Windows Kernel Memory. An attacker could exploit this vulnerability to obtain sensitive information. The following products and...

5.5CVSS8.2AI score0.00912EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2025/01/14 12:0 a.m.4 views

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2025-1058)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS4.8AI score0.05842EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:0 a.m.6 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the use of memory after it is freed, allowing an attacker to trigger a service failure.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created web page...

7.8CVSS6.6AI score0.00811EPSS
SaveExploits0References24Affected Software11
CNVD
CNVD
added 2025/01/13 12:0 a.m.44 views

Huawei HarmonyOS HUKS Module Incorrect Memory Address Protection Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An incorrect memory address protection vulnerability exists in the Huawei HarmonyOS HUKS module, which can be exploited by an attacker to cause availability ...

7.5CVSS6.7AI score0.00196EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.7 views

Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A memory misreference vulnerability exists in Juniper Networks Junos OS Evolved, which arises from a failure to free kernel memory when processing certain malformed IPv6 packets, and can be exploited by an...

8.7CVSS6.6AI score0.00597EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/08 12:0 a.m.10 views

The vulnerability of the DWFX software file used for viewing 3D models and project documents in Autodesk Navisworks Freedom; the software for modeling and analyzing 3D models in Autodesk Navisworks Simulate; and the software for analyzing, coordinating, and verifying 3D models and project data in Autodesk Navisworks Manage. This allows a malicious individual to cause service interruptions or execute arbitrary code.

The vulnerability of the DWFX software file used for viewing 3D models and project documents in Autodesk Navisworks Freedom, as well as the software for modeling, analyzing, and coordinating 3D models and project data in Autodesk Navisworks Manage, is related to a buffer overflow in the dynamic...

7.8CVSS7.9AI score0.00329EPSS
SaveExploits0References4Affected Software3
CNNVD
CNNVD
added 2025/01/03 12:0 a.m.10 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an out-of-bounds write vulnerability, which stems from a lack of boundary checking in the DevmemValidateFlags function of the devicememserver.c file, which can be exploited by an attacker to caus...

7.8CVSS7AI score0.00079EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/24 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of an out-of-bounds read...

7.1CVSS6.9AI score0.01351EPSS
SaveExploits0References9
NVD
NVD
added 2024/12/19 12:15 a.m.53 views

CVE-2022-44516

Acrobat Reader DC version 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

5.5CVSS0.00261EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/18 11:28 p.m.27 views

CVE-2022-44517 Acrobat Reader | Out-of-bounds Read (CWE-125)

Acrobat Reader DC version 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

5.5CVSS0.00261EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/18 11:28 p.m.10 views

CVE-2022-44516 Acrobat Reader | Out-of-bounds Read (CWE-125)

Acrobat Reader DC version 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

5.5CVSS6.1AI score0.00261EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/18 11:23 p.m.18 views

CVE-2022-44515 Acrobat Reader | Out-of-bounds Read (CWE-125)

Acrobat Reader DC version 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

5.5CVSS6.1AI score0.00261EPSS
SaveExploits0References1
Rows per page
Query Builder