Lucene search
+L

2282 matches found

BDU FSTEC
BDU FSTEC
added 2022/02/16 12:00 a.m.10 views

The vulnerability in the implementation of the virtio_net_receive_rcu function (hw/net/virtio-net.c) of the QEMU hardware emulation software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the virtionetreceivercu function implementation in the QEMU hardware emulation software hw/net/virtio-net.c is related to the use of memory after it is freed. Exploiting this vulnerability can allow a attacker to execute arbitrary code or cause system failures...

7.5CVSS7.1AI score0.00522EPSS
SaveExploits0References8Affected Software6
CVE
CVE
added 2022/02/11 12:00 a.m.163 views

CVE-2022-0382

CVE-2022-0382 is a Linux kernel issue in the TIPC protocol subsystem caused by uninitialized memory when a user sends a TIPC datagram to one or more destinations. It enables a local attacker to read kernel memory (limited to about 7 bytes; read is not controllable). Affected are Linux kernel vers...

5.5CVSS4.8AI score0.00385EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:00 a.m.13 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory usage after it is released. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this...

9.3CVSS7.6AI score0.04709EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:00 a.m.10 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this...

7.8CVSS7.6AI score0.20906EPSS
SaveExploits0References5
NVD
NVD
added 2022/02/01 1:15 p.m.28 views

CVE-2021-43848

h2o is an open source http server. In code prior to the 8c0eca3 commit h2o may attempt to access uninitialized memory. When receiving QUIC frames in certain order, HTTP/3 server-side implementation of h2o can be misguided to treat uninitialized memory as HTTP/3 frames that have been received. Whe...

7.4CVSS0.02667EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:00 a.m.14 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this...

7.8CVSS7.6AI score0.11546EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/02/01 12:00 a.m.10 views

iText 安全漏洞

iText is an open source library for creating and manipulating PDF files in Java. It is written by Bruno Lowagie, Paulo Soares and others. iText has a security vulnerability that originates from the iText v7.1.17 component readStreamBytesRaw contains an out-of-memory error that can be exploited by...

6.5CVSS6.4AI score0.01612EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2022/01/28 12:00 a.m.10 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory. This allows attackers to exploit their privileges and gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected information...

4.3CVSS6.3AI score0.00303EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/28 12:00 a.m.11 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing attackers to exploit their privileges and gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected information...

4.3CVSS6.3AI score0.00303EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/28 12:00 a.m.13 views

The vulnerability of Adobe Audition for Windows and macOS, related to reading data beyond the buffer in memory, allows attackers to escalate their privileges and gain unauthorized access to protected information.

The vulnerability of Adobe Audition for Windows and macOS relates to reading data beyond the buffer limit in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain unauthorized access to protected information through a specially created MP4 file...

4.3CVSS6AI score0.01802EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/26 12:00 a.m.13 views

The vulnerability of the professional video editing software Adobe Premiere Pro, related to the use of memory after it is released, allows attackers to enhance their privileges and gain unauthorized access to protected information.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the use of memory after it is released. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected information through a specially created MOV fil...

4.3CVSS5.5AI score0.003EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/26 12:00 a.m.14 views

The vulnerability of NETGEAR Wi-Fi router software models such as R6400, R7000, R7900, R7900P, R7960P, R8000, R8000P, RAX200, RS400, R6400v2, R7000P, RAX80, R6700v3, R6900P, and RAX75 stems from the fact that data is written beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of NETGEAR Wi-Fi router software models such as R6400, R7000, R7900, R7900P, R7960P, R8000, R8000P, RAX200, RS400, R6400v2, R7000P, RAX80, R6700v3, R6900P, and RAX75 lies in the fact that data is written beyond the buffer in memory. Exploiting this vulnerability can allow an...

5.2CVSS7.9AI score0.00921EPSS
SaveExploits0References3Affected Software15
BDU FSTEC
BDU FSTEC
added 2022/01/26 12:00 a.m.12 views

The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Adobe Bridge file manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially created file...

4.3CVSS5.5AI score0.01779EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/01/20 10:15 p.m.7 views

CVE-2021-46328

Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component libcstartmain...

7.8CVSS7.1AI score0.00771EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2022/01/20 12:00 a.m.10 views

The vulnerability of the Payments component in the Google Chrome web browser, related to memory usage after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Payments component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially...

9.3CVSS7.6AI score0.00916EPSS
SaveExploits1References10Affected Software5
OSV
OSV
added 2022/01/19 1:15 a.m.11 views

CVE-2022-22177

A release of illegal memory vulnerability in the snmpd daemon of Juniper Networks Junos OS, Junos OS Evolved allows an attacker to halt the snmpd daemon causing a sustained Denial of Service DoS to the service until it is manually restarted. This issue impacts any version of SNMP – v1,v2, v3 This...

7.5CVSS7.1AI score0.00958EPSS
SaveExploits0References2
CVE
CVE
added 2022/01/19 12:21 a.m.83 views

CVE-2022-22177

CVE-2022-22177 affects Juniper Networks Junos OS and Junos OS Evolved. The issue is an illegal memory vulnerability in the snmpd daemon that can be triggered by crafted SNMP input, causing the snmpd process to segfault or halt and resulting in a sustained Denial of Service until manual restart. A...

7.5CVSS6.2AI score0.00958EPSS
SaveExploits0References2Affected Software2
Prion
Prion
added 2022/01/14 8:15 p.m.22 views

Design/Logic Flaw

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to application denial-of-service. Exploitation of this issue requires user interaction in that a...

4.3CVSS6AI score0.02168EPSS
SaveExploits0References1Affected Software4
ATTACKERKB
ATTACKERKB
added 2022/01/12 5:00 p.m.12 views

CVE-2022-22177

A release of illegal memory vulnerability in the snmpd daemon of Juniper Networks Junos OS, Junos OS Evolved allows an attacker to halt the snmpd daemon causing a sustained Denial of Service DoS to the service until it is manually restarted. This issue impacts any version of SNMP – v1,v2, v3 This...

7.5CVSS7.1AI score0.00958EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:00 a.m.8 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system using a specially created file...

7.8CVSS8.1AI score0.02404EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder