Lucene search
K

2499 matches found

BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.2 views

The vulnerability of the Microsoft Outlook email client, related to the execution of operations outside the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

10CVSS8.5AI score0.29479EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.2 views

The vulnerability of the Qualcomm Video component of the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of Qualcomm Video component in the Android operating system is caused by an overflow in the memory buffer. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

8.6CVSS7.6AI score0.00098EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/04 12:0 a.m.2 views

Vulnerability of the Microsoft Graphics component in the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft Graphics component in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

10CVSS8.4AI score0.29479EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2018/11/07 12:0 a.m.3 views

The vulnerability of the Internet Explorer browser, related to the execution of operations beyond the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

7.6CVSS8.3AI score0.28809EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/10/26 12:0 a.m.2 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created EMF file...

10CVSS7.8AI score0.02133EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2018/10/26 12:0 a.m.2 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer limit in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.8AI score0.06313EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/10/26 12:0 a.m.2 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer limit in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

10CVSS7.8AI score0.04691EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2018/10/26 12:0 a.m.3 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created U3D file...

10CVSS7.8AI score0.06191EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2018/10/22 8:53 p.m.26 views

Improper Restriction of Operations within the Bounds of a Memory Buffer in akka-http-core

Akka HTTP versions = 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service...

7.5CVSS4.8AI score0.00389EPSS
Exploits0References3Affected Software2
ICS
ICS
added 2018/10/17 12:0 a.m.523 views

Omron CX-Supervisor (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.0 Vendor: Omron Equipment: CX-Supervisor Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Out-Of-Bounds Read, Use-After-Free, Incorrect Type Conversion or Cast 2. UPDATE INFORMATION This updated advisory is a follow-up to the...

7.8CVSS6.9AI score0.00193EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2018/10/11 12:0 a.m.2 views

The vulnerability of the `sdcardfs_open` function in the Android operating system’s kernel allows a hacker to increase their privileges.

The vulnerability of the sdcardfsopen function in the Android operating system’s kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

8.4CVSS5.9AI score0.00021EPSS
Exploits0References2
OSV
OSV
added 2018/10/10 8:29 p.m.15 views

CVE-2018-12541

In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit 8192 bytes above which the WebSocket gets an HTTP response with the...

6.5CVSS6.8AI score
Exploits0References16
ICS
ICS
added 2018/10/02 12:0 p.m.19 views

Philips iSite/IntelliSpace PACS Vulnerabilities (Update A)

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: Philips Equipment: iSite and IntelliSpace PACS Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Code/Source Code...

9.2AI score
Exploits0References49
BDU FSTEC
BDU FSTEC
added 2018/09/28 12:0 a.m.2 views

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine for Windows operating systems arises due to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created Excel file...

7.8CVSS8.6AI score0.30595EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2018/09/21 12:0 a.m.3 views

Vulnerability of Firefox, Firefox ESR, and Thunderbird’s email client, caused by overflowing memory buffers, allowing attackers to execute arbitrary code.

The vulnerabilities of the Firefox browser, Firefox ESR, and the Thunderbird email client are caused by a buffer overflow in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.02953EPSS
Exploits0References4Affected Software7
BDU FSTEC
BDU FSTEC
added 2018/09/14 12:0 a.m.2 views

The vulnerability of the IBM Security Access Manager access control system arises from an operation that goes beyond the buffer in memory, allowing a perpetrator to execute arbitrary code.

The vulnerability of the IBM Security Access Manager lies in the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

10CVSS6.3AI score0.27493EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/09/07 12:0 a.m.2 views

The vulnerability of web-based services of microprogramming software for programmable logic controllers from Schneider Electric—Modicon Premium, Modicon Quantum, and Modicon M340—allows a intruder to trigger a service failure.

The vulnerability of web-based services for microprogramming software-controlled Schneider Electric Modicon Premium, Modicon Quantum, and Modicon M340 devices lies in the fact that the operation data is stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor...

7.8CVSS5.7AI score0.00821EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2018/08/23 12:0 a.m.2 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

10CVSS6.2AI score0.22992EPSS
Exploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/08/23 12:0 a.m.2 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

7.6CVSS6.2AI score0.22992EPSS
Exploits8References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/08/23 12:0 a.m.2 views

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer, related to the execution of operations beyond the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

7.6CVSS8.3AI score0.19181EPSS
Exploits8References3Affected Software2
Rows per page
Query Builder