Lucene search
+L

2282 matches found

Cvelist
Cvelist
added 2021/10/28 12:27 p.m.32 views

CVE-2021-37002

There is a Memory out-of-bounds access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious code to be executed...

9.6AI score0.00765EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/10/20 12:00 a.m.11 views

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to the execution of operations outside the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program lies in the fact that the operation is executed outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.8AI score0.00751EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/20 12:00 a.m.11 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory management issues after memory is freed. These vulnerabilities allow attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these...

3.3CVSS6.5AI score0.03898EPSS
SaveExploits0References2
CVE
CVE
added 2021/10/19 1:11 p.m.75 views

CVE-2021-30845

CVE-2021-30845 in macOS Big Sur 11.6 relates to an out-of-bounds read that could allow a local user to read kernel memory. The Apple security content notes this as a kernel/SMB‑related issue resolved by improved bounds checking, with Big Sur 11.6 mitigating the vulnerability. Connected Apple advi...

5.5CVSS5.4AI score0.00257EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2021/10/15 11:04 a.m.10 views

OESA-2021-1379 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource exhaustion and DoS.CVE-2021-3669 CVE-2021-3764 CVE-2021-3744...

7.8CVSS6.9AI score0.01736EPSS
SaveExploits6References9
OSV
OSV
added 2021/10/08 10:15 p.m.7 views

CVE-2021-37976

Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS8.5AI score
SaveExploits0References7
NVD
NVD
added 2021/10/08 10:15 p.m.18 views

CVE-2021-37976

Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS0.19748EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2021/10/08 9:50 p.m.13 views

CVE-2021-37976

Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.6AI score0.19748EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2021/10/08 4:44 p.m.36 views

CVE-2021-32029

A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality...

7.5AI score0.01504EPSS
SaveExploits0References3
OSV
OSV
added 2021/10/06 6:15 p.m.10 views

CVE-2021-25468

A possible guessing and confirming a byte memory vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows attackers to read arbitrary memory address...

4.4CVSS5.9AI score0.00111EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/06 6:15 p.m.28 views

CVE-2021-25468

A possible guessing and confirming a byte memory vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows attackers to read arbitrary memory address...

4.4CVSS0.00111EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/06 5:07 p.m.50 views

CVE-2021-25468

CVE-2021-25468 concerns a memory-access vulnerability in Samsung Widevine Trustlet. Multiple sources indicate that Widevine trustlet versions prior to SMR Oct-2021 Release 1 are affected and that an attacker with local access could read arbitrary memory addresses due to a boundary/memory check is...

4.4CVSS4.7AI score0.00111EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/06 5:07 p.m.33 views

CVE-2021-25468

A possible guessing and confirming a byte memory vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows attackers to read arbitrary memory address...

4.4CVSS5AI score0.00111EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/10/06 12:00 a.m.9 views

PT-2021-16658 · Google · Widevine Trustlet

Name of the Vulnerable Software and Affected Versions: Widevine trustlet versions prior to SMR Oct-2021 Release 1 Description: A possible guessing and confirming a byte memory vulnerability allows attackers to read arbitrary memory addresses. Recommendations: For versions prior to SMR Oct-2021...

4.4CVSS4.7AI score0.00111EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/10/06 12:00 a.m.4 views

PT-2021-5994 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to gain unauthorized access to protected information. This can potentially impact the system's security...

5.5CVSS9.7AI score0.02894EPSS
SaveExploits1References11
Prion
Prion
added 2021/10/04 6:15 p.m.38 views

Authentication flaw

Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol RESP request, Redis allocates memory according to user-specified values which determine the number of elements in the multi-bulk header and size of each element in the bulk header. ...

5CVSS7.9AI score0.16904EPSS
SaveExploits0References10Affected Software4
CNNVD
CNNVD
added 2021/09/30 12:00 a.m.12 views

Corel Presentations 2020 缓冲区错误漏洞

Corel WordPerfect 2020 is a commercial word processing tool from Corel, a Canadian company of Corel Digital Technology Corel. A buffer error vulnerability in UAX200.dll in Corel Presentations 2020 20.0.0.200 can be exploited by an unauthenticated attacker to gain unauthorized access to system...

5.5CVSS6AI score0.01501EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:00 a.m.8 views

The vulnerability of Adobe Premiere Elements’ video editing software arises from the possibility of writing operations beyond the buffer limits in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Adobe Premiere Elements software-related video editing programs lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...

10CVSS8AI score0.01753EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:00 a.m.10 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in the ability to write code beyond the buffer boundaries in memory. This allows a malicious actor, operating remotely, to execute arbitrary code within the context of the current user.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code in the context of the current user...

8.8CVSS7.8AI score0.0292EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/09/23 12:00 a.m.9 views

Apache OpenOffice 安全漏洞

Apache OpenOffice is an open source office software suite from the U.S. Apache Apache Foundation. The suite contains text documents , spreadsheets , presentations , drawings , databases and so on. A security vulnerability exists in Apache OpenOffice that originates when a networked system or...

7.8CVSS7.6AI score0.50563EPSS
SaveExploits0References7
Rows per page
Query Builder