Lucene search
+L

2451 matches found

BDU FSTEC
BDU FSTEC
•added 2025/04/28 12:00 a.m.•21 views

The vulnerability of the ___do_page_fault() function in the arch/powerpc/mm/fault.c module of the PowerPC platform support for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dopagefault function in the arch/powerpc/mm/fault.c module of the PowerPC platform support for the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

7.8CVSS6.9AI score0.00225EPSS
SaveExploits0References24Affected Software7
BDU FSTEC
BDU FSTEC
•added 2025/04/28 12:00 a.m.•23 views

The vulnerability of Windows operating systems relates to the use of memory after it is freed, allowing an attacker to increase their privileges.

Vulnerabilities of Windows operating systems are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow attackers to increase their privileges...

7.8CVSS7.6AI score0.00474EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/04/28 12:00 a.m.•18 views

Microsoft Edge browser’s vulnerability, related to the use of memory after its release, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

8.7CVSS8AI score0.00791EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/25 12:00 a.m.•23 views

The vulnerability in the interface for connecting peripheral devices via USB browsers like Google Chrome and Microsoft Edge allows a hacker to induce a service failure.

The vulnerability of the interface for connecting peripheral devices in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

10CVSS7.6AI score0.00306EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
•added 2025/04/24 12:00 a.m.•23 views

The vulnerability of the NArchive::NZip::CInArchive::FindCd function of the p7zip archive tool can potentially affect the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the NArchive::NZip::CInArchive::FindCd function in the p7zip archive tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

7.8CVSS7.4AI score0.00323EPSS
SaveExploits1References4Affected Software3
OSV
OSV
•added 2025/04/16 2:21 p.m.•13 views

USN-7440-1 imagemagick regression

USN-6200-2 fixed a vulnerability in ImageMagick. It was discovered that the fix for CVE-2023-34151 was incomplete. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that ImageMagick incorrectly handled memory under certain circumstance...

5.5CVSS6.8AI score0.00955EPSS
SaveExploits1References3
Amazon
Amazon
•added 2025/04/16 12:00 a.m.•11 views

Important: docker

Issue Overview: An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. CVE-2025-22868 SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or no...

7.5CVSS6.9AI score0.00939EPSS
SaveExploits0
CNVD
CNVD
•added 2025/04/14 12:00 a.m.•27 views

HDF5 H5FS__sinfo_serialize_sect_cb function buffer overflow vulnerability

HDF5 Hierarchical Data Format version 5 is an open source library and file format for storing and organizing large amounts of data. A buffer overflow vulnerability exists in the HDF5 H5FSsinfoserializesectcb function. The vulnerability stems from the function failing to properly check buffer...

4.8CVSS7.5AI score0.00273EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2025/04/14 12:00 a.m.•23 views

Vulnerability of the pps_gpio_probe() function in the drivers/pps/clients/pps-gpio.c module – This driver for Linux kernel’s PPS client support allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the pps gpioprobe function in the drivers/pps/clients/pps-gpio.c module – The Linux kernel’s PPS client driver has a vulnerability related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

7.8CVSS7AI score0.00261EPSS
SaveExploits0References20Affected Software7
BDU FSTEC
BDU FSTEC
•added 2025/04/14 12:00 a.m.•19 views

The vulnerability of the smb component in the Linux operating system’s kernel allows a hacker to increase their privileges.

The vulnerability of the smb component in the Linux operating system’s kernel relates to the use of memory after it is freed in the SMB2negotiate function. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS6.7AI score0.00481EPSS
SaveExploits0References11Affected Software6
Positive Technologies
Positive Technologies
•added 2025/04/13 12:00 a.m.•16 views

PT-2025-16176 · Undefined · Undefined

Security audit of PHP https://t.co/Tl4FK62NVP 2 high, 6 medium, 9 low severity, and 10 informative issues. 4 CVEs, 3 of them public and fixed last year, 1 not yet fully public: CVE-2024-8928: Memory-related vulnerability in PHP's filter handling, leading to segmentation faults...

7.5AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/04/12 12:30 a.m.•62 views

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.9AI score0.00939EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2025/04/12 12:30 a.m.•60 views

GHSA-HCG3-Q754-CR77 golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS7.5AI score0.00939EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2025/04/12 12:00 a.m.•22 views

The vulnerability of the Adobe XMP-Toolkit-SDK software, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to circumvent the ASLR protection mechanism and gain unauthorized access to protected information.

The vulnerability of the Adobe XMP-Toolkit-SDK lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism and gain unauthorized access to protected information...

5.5CVSS5.8AI score0.00245EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/12 12:00 a.m.•172 views

The vulnerability of the Adobe XMP-Toolkit-SDK software, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to circumvent the ASLR protection mechanism and gain unauthorized access to protected information.

The vulnerability of the Adobe XMP-Toolkit-SDK lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism and gain unauthorized access to protected information...

5.5CVSS5.8AI score0.00247EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/11 12:00 a.m.•15 views

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to writing beyond buffer boundaries in memory, allowing a malicious actor to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools lies in the issue of writing beyond buffer boundaries in memory when processing DFT format files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS7.8AI score0.02607EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
•added 2025/04/10 6:11 p.m.•31 views

CVE-2025-27732

Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7CVSS6.7AI score0.00341EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/04/10 12:00 a.m.•15 views

The vulnerability of the Shell command shell in Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the Shell command shell in Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00816EPSS
SaveExploits0References2
OSV
OSV
•added 2025/04/09 11:41 p.m.•22 views

USN-7346-3 opensc vulnerabilities

USN-7346-1 fixed vulnerabilities in OpenSC. The update introduced a regression which broke smartcard based authentication. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSC did not correctly handle certain memory operations...

7.1CVSS7.4AI score0.02782EPSS
SaveExploits0References13
Microsoft CVE
Microsoft CVE
•added 2025/04/09 7:00 a.m.•7 views

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

...

5.5CVSS5.7AI score0.00614EPSS
SaveExploits1
Rows per page
Query Builder