Lucene search
+L

5501 matches found

SUSE CVE
SUSE CVE
added 2023/10/05 1:52 a.m.8 views

SUSE CVE-2023-43785

A vulnerability was found in libX11 due to a boundary condition within the XkbReadKeySyms function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system...

4.4CVSS7.8AI score0.00633EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2023/10/04 12:0 a.m.47 views

GLSA-202310-03 : glibc: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202310-03 glibc: Multiple vulnerabilities - An issue was discovered in the GNU C Library glibc 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and...

7.8CVSS7.3AI score0.81422EPSS
SaveExploits32References8
Positive Technologies
Positive Technologies
added 2023/10/03 12:0 a.m.4 views

PT-2023-6178 · Libxpm +10 · Libxpm +10

Name of the Vulnerable Software and Affected Versions: libXpm affected versions not specified Description: The issue is related to a boundary condition within the XpmCreateXpmImageFromBuffer function of the libXpm library, which can lead to an out-of-bounds read error. This allows a local attacke...

9.8CVSS6.9AI score0.07528EPSS
SaveExploits3References127
Positive Technologies
Positive Technologies
added 2023/10/03 12:0 a.m.2 views

PT-2023-6218 · Libxpm +10 · Libxpm +10

Name of the Vulnerable Software and Affected Versions: libXpm affected versions not specified Description: The issue is related to a boundary condition in libXpm, which can cause an out-of-bounds read error. This can allow a local user to read contents of memory on the system, potentially leading...

9.8CVSS6.9AI score0.07528EPSS
SaveExploits3References112
OSV
OSV
added 2023/10/03 12:0 a.m.7 views

UBUNTU-CVE-2023-43785

A vulnerability was found in libX11 due to a boundary condition within the XkbReadKeySyms function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system...

6.5CVSS7.1AI score0.00633EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/09/28 12:0 a.m.21 views

PT-2024-13298

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.11 Linux kernel versions through 6.8.0 Description The issue allows a physically proximate attacker to read kernel memory by mounting a filesystem and then leveraging local access to trigger an out-of-bounds...

7.1CVSS6.3AI score0.00195EPSS
SaveExploits0
OSV
OSV
added 2023/09/27 3:19 p.m.7 views

CVE-2023-40436

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14. An attacker may be able to cause unexpected system termination or read kernel memory...

9.1CVSS5.8AI score0.0101EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/09/26 12:0 a.m.8 views

Apple macOS Security Breach

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14, which originates from an attacker who may be able to cause the system to unexpectedly terminate or read kernel memory...

9.1CVSS6.4AI score0.0101EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/09/26 12:0 a.m.9 views

PT-2023-27453 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue was addressed with improved bounds checks. An attacker may be able to cause unexpected system termination or read kernel memory. Recommendations: For versions prior to 14, update to macOS Sono...

9.1CVSS6AI score0.0101EPSS
SaveExploits0References7
Amazon
Amazon
added 2023/09/25 12:0 a.m.4 views

Important: postgresql

Issue Overview: A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption. CVE-2021-23222 A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the defau...

8.8CVSS7.6AI score0.12462EPSS
SaveExploits0
Amazon
Amazon
added 2023/09/25 12:0 a.m.6 views

Important: postgresql

Issue Overview: A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption. CVE-2021-23222 A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the defau...

8.8CVSS7.6AI score0.12462EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2023/09/19 1:11 a.m.11 views

openssl: X.400 address type confusion in X.509 GeneralName

A type confusion vulnerability was found in OpenSSL when OpenSSL X.400 addresses processing inside an X.509 GeneralName. When CRL checking is enabled for example, the application sets the X509VFLAGCRLCHECK flag, this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call,...

7.4CVSS6.8AI score0.59501EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/09/19 12:0 a.m.7 views

The vulnerability of the `parse_module` function in the GNU Binutils development environment, which involves reading beyond the buffer boundaries in memory, allows an attacker to trigger a service failure or cause other adverse effects.

The vulnerability of the parsemodule function in the GNU Binutils development environment is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure or exert other adverse effects...

7.8CVSS6AI score0.00434EPSS
SaveExploits1References7Affected Software5
Positive Technologies
Positive Technologies
added 2023/09/18 12:0 a.m.7 views

PT-2023-6798 · Libx11 +10 · Libx11 +10

Name of the Vulnerable Software and Affected Versions: libX11 affected versions not specified Description: A vulnerability in the libX11 library is related to a boundary condition within the XkbReadKeySyms function, allowing a local user to trigger an out-of-bounds read error and read the content...

7.8CVSS6.4AI score0.01656EPSS
SaveExploits1References112
Microsoft CVE
Microsoft CVE
added 2023/09/09 7:0 a.m.10 views

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.

...

9.8CVSS8.2AI score0.00954EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/09/07 2:35 a.m.7 views

SUSE CVE-2023-4761

Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: High...

8.1CVSS8.7AI score0.01287EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.41 views

Oracle Linux 7 : GStreamer (ELSA-2017-2060)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2060 advisory. clutter-gst2 2.0.18-1 - Update to 2.0.18 - Remove obsolete patches - Use license macro for COPYING - Resolves: 1386833 gnome-video-effects 0.4.3-1 -...

7.5CVSS6.7AI score0.04717EPSS
SaveExploits0References16
OSV
OSV
added 2023/09/05 10:15 p.m.1 views

DEBIAN-CVE-2023-4761

Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: High...

8.1CVSS7.8AI score0.01287EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2023/09/05 10:15 p.m.22 views

CVE-2023-4761

Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: High...

8.1CVSS7.2AI score0.01287EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2023/09/05 7:15 a.m.5 views

CVE-2023-41910

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDPTLVADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdpdecode in daemon/protocols/cdp.c...

9.8CVSS5.8AI score0.00954EPSS
SaveExploits0References5
Rows per page
Query Builder