Lucene search
K

2503 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.2 views

The vulnerability of the `_php_stream_scandir` function in the PHP programming language allows a hacker to execute arbitrary code.

The vulnerability of the phpstreamscandir function in the PHP programming language is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS8.4AI score0.32676EPSS
Exploits1References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.2 views

The vulnerability of Adobe Illustrator’s graphic editor arises from an operation that goes beyond buffer boundaries in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Illustrator’s graphic editor arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to protected information through a specially crafted PDF file...

5.5CVSS6.1AI score0.02079EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.2 views

The vulnerability of Adobe Illustrator’s graphic editor lies in the ability to read data beyond the buffer in memory, which allows attackers to cause a service failure.

The vulnerability of the Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

3.3CVSS5.9AI score0.00721EPSS
Exploits0References3Affected Software2
ICS
ICS
added 2022/04/21 12:0 a.m.221 views

Hitachi Energy MicroSCADA Pro/X SYS600

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: MicroSCADA Pro/X SYS600 Vulnerabilities: Observable Discrepancy, HTTP Request Smuggling, Classic Buffer Overflow, Improper Certificate Validation, Improper Restriction of...

9.3CVSS8.7AI score0.11865EPSS
Exploits5References5
BDU FSTEC
BDU FSTEC
added 2022/04/18 12:0 a.m.2 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.3CVSS5.5AI score0.00853EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/18 12:0 a.m.2 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.3CVSS5.5AI score0.01112EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/18 12:0 a.m.1 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 involve reading data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in the reading of data beyond the buffer in memory. Exploiting thi...

3.3CVSS6.8AI score0.01591EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.3 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of the Adobe Framemaker desktop publishing system relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

5CVSS5.9AI score0.0143EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:0 a.m.1 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected memory information in the context of the current user, using a...

5.5CVSS6.8AI score0.00677EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/12 12:0 a.m.1 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.4AI score0.00677EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:0 a.m.1 views

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to execute arbitrary code.

Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable when operations occur outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.5CVSS7.1AI score0.11434EPSS
Exploits0References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:0 a.m.1 views

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to execute arbitrary code.

Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable due to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

6.5CVSS7.4AI score0.11434EPSS
Exploits0References7Affected Software1
RedhatCVE
RedhatCVE
added 2022/04/07 9:54 a.m.53 views

CVE-2022-24795

A flaw was found in the YAJL library in the way it reallocates a memory buffer to store more data. A very large input causes the value used to calculate the buffer size to overflow, resulting in a heap-based buffer overflow. Mitigation Avoid passing large inputs to the YAJL library...

7.5CVSS2.9AI score0.01863EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.3 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.1CVSS6.8AI score0.00677EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.2 views

The vulnerability of the afra_box_read function in the MP4Box component of the GPAC multimedia platform allows a hacker to gain access to confidential data.

The vulnerability of the afraboxread function in the MP4Box component of the GPAC multimedia platform involves the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data through a specially created file...

7.1CVSS7.2AI score0.00095EPSS
Exploits1References6Affected Software3
Cvelist
Cvelist
added 2022/04/04 7:45 p.m.17 views

CVE-2021-32994 Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer

Softing OPC UA C++ SDK Software Development Kit versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locatio...

7.5CVSS7.6AI score0.00122EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/04/04 7:45 p.m.5 views

CVE-2021-32994 Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer

Softing OPC UA C++ SDK Software Development Kit versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locatio...

7.5CVSS6.8AI score0.00122EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/04/01 10:17 p.m.15 views

CVE-2022-25959 Rockwell Automation Studio 5000 Logix Designer Improper Restriction of Operations within the Bounds of a Memory Buffer

Omron CX-Position versions 2.5.3 and prior is vulnerable to memory corruption while processing a specific project file, which may allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00205EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/03/31 12:0 a.m.2 views

The vulnerability of the zlib library, related to the execution of operations beyond buffer boundaries in memory, allows attackers to cause a service failure.

The vulnerability of the zlib library lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted data to the application...

8.5CVSS7AI score0.00089EPSS
Exploits1References35Affected Software15
ICS
ICS
added 2022/03/31 12:0 a.m.79 views

Hitachi Energy e-mesh EMS

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: e-mesh EMS Vulnerabilities: Improper Restriction of Operations Within the Bounds of a Memory Buffer, Use After Free, Uncontrolled Resource Consumption 2. RISK EVALUATION...

9.3CVSS8AI score0.89427EPSS
Exploits2References5
Rows per page
Query Builder