Lucene search
+L

2451 matches found

BDU FSTEC
BDU FSTEC
•added 2020/07/07 12:00 a.m.•12 views

The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Adobe Bridge file manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.5CVSS6.7AI score0.03951EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
•added 2020/07/02 12:00 a.m.•12 views

Huawei Mate 30 UAF Vulnerability

Huawei Mate 30 is a smartphone from the Chinese company Huawei Huawei. A security vulnerability exists in previous versions of Huawei Mate 30 10.1.0.150 C00E136R5P3, which stems from the system using freed memory. The vulnerability can be exploited by an attacker to execute code with the help of ...

7.8CVSS7.2AI score0.00833EPSS
SaveExploits0References1
OSV
OSV
•added 2020/07/01 11:15 a.m.•7 views

DEBIAN-CVE-2020-15476

In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpisearchoracle in lib/protocols/oracle.c...

7.5CVSS7.5AI score0.02113EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2020/06/26 12:00 a.m.•12 views

The vulnerability of the statem/statem.cc component in the OpenSSL library allows a attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the statem/statem.cc component in the OpenSSL library is related to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity through...

10CVSS8.3AI score0.70223EPSS
SaveExploits0References4Affected Software2
NVD
NVD
•added 2020/06/09 8:15 p.m.•19 views

CVE-2020-1291

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'...

7.8CVSS0.03027EPSS
SaveExploits0References1
NVD
NVD
•added 2020/06/09 8:15 p.m.•36 views

CVE-2020-1209

An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'...

7.8CVSS0.0332EPSS
SaveExploits1References1
NVD
NVD
•added 2020/06/09 8:15 p.m.•43 views

CVE-2020-1215

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260...

7.6CVSS0.08022EPSS
SaveExploits1References1
Prion
Prion
•added 2020/06/09 8:15 p.m.•15 views

Information disclosure

An information disclosure vulnerability exists when a Windows service improperly handles objects in memory, aka 'Windows Service Information Disclosure Vulnerability'...

2.1CVSS5.3AI score0.01296EPSS
SaveExploits0References1Affected Software2
Prion
Prion
•added 2020/06/09 8:15 p.m.•39 views

Remote code execution

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1216, CVE-2020-1230, CVE-2020-1260...

7.6CVSS7.9AI score0.08022EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/06/09 7:43 p.m.•56 views

CVE-2020-1260

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1213, CVE-2020-1214, CVE-2020-1215, CVE-2020-1216, CVE-2020-1230...

8.5AI score0.07175EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/06/05 12:00 a.m.•8 views

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities involve the use of memory after it has been freed, allowing an attacker to execute arbitrary code.

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities are related to the use of memory after it is freed. Exploitation of these vulnerabilities could...

9.3CVSS7.8AI score0.01995EPSS
SaveExploits0References10Affected Software10
OSV
OSV
•added 2020/05/29 7:15 p.m.•33 views

CVE-2020-11039

In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled nearly arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0...

6.8CVSS6.6AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/05/29 12:00 a.m.•32 views

The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system remotely...

10CVSS7.8AI score0.02815EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2020/05/21 11:15 p.m.•19 views

CVE-2020-1067

A remote code execution vulnerability exists in the way that Windows handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with elevated permissions on a target system. To exploit the vulnerability, an attacker who has a domain user accou...

9CVSS9.5AI score0.02521EPSS
SaveExploits0References2
Prion
Prion
•added 2020/05/21 11:15 p.m.•16 views

Remote code execution

A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution Vulnerability'...

9CVSS9.3AI score0.02521EPSS
SaveExploits0References1Affected Software5
Prion
Prion
•added 2020/05/21 11:15 p.m.•24 views

Privilege escalation

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1114...

4.6CVSS7.8AI score0.00944EPSS
SaveExploits0References1Affected Software2
OSV
OSV
•added 2020/05/21 4:15 a.m.•16 views

CVE-2020-6473

Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS8.4AI score
SaveExploits0References9
CNVD
CNVD
•added 2020/05/21 12:00 a.m.•10 views

libexif code issue vulnerability

libexif is a library of functions written in the C language. It is mainly used to read and write EXIF meta-information from graphics files. A code issue vulnerability exists in versions prior to libexif 0.6.22 that stems from the use of uninitialized memory during EXIF Makernote processing. An...

8.2CVSS8.9AI score0.01934EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/05/19 12:00 a.m.•9 views

The vulnerability of the Linux operating system’s kernel, related to writing beyond buffer boundaries in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system’s kernel is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS6.8AI score0.00707EPSS
SaveExploits1References25Affected Software2
Prion
Prion
•added 2020/05/12 4:15 p.m.•34 views

Design/Logic Flaw

In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component...

6.8CVSS8.6AI score0.01232EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder