Lucene search
K

2301 matches found

NVD
NVD
added 2019/04/08 4:29 p.m.15 views

CVE-2014-5435

An arbitrary memory write vulnerability exists in the dualonsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, that could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers...

9.8CVSS9.8AI score0.01435EPSS
Exploits0References1
Cvelist
Cvelist
added 2019/04/08 3:25 p.m.14 views

CVE-2014-5435

An arbitrary memory write vulnerability exists in the dualonsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, that could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers...

9.8AI score0.01435EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2019/03/29 1:49 p.m.26 views

CVE-2018-12182

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

6.7CVSS4.4AI score0.00095EPSS
Exploits0References3
CNVD
CNVD
added 2019/03/29 12:0 a.m.1 views

EDK2 Memory Write Vulnerability

EDK2 is a set of cross-platform firmware development environment based on UEFI and PI specifications. A security vulnerability exists in EDK2's SMM service that stems from the program's failure to adequately perform memory write checks. A local attacker could exploit the vulnerability to elevate...

6.7CVSS6.4AI score0.00095EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2019/03/28 2:52 p.m.3 views

Mozilla: Ionmonkey type confusion with __proto__ mutations

Incorrect handling of proto mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulnerability affects Firefox 66.0.1, Firefox ESR 60.6.1, and Thunderbird 60.6.1...

8.8CVSS7.4AI score0.46675EPSS
Exploits4References5
RedHat Linux
RedHat Linux
added 2019/03/28 2:52 p.m.4 views

Mozilla: Ionmonkey type confusion with __proto__ mutations

Incorrect handling of proto mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulnerability affects Firefox 66.0.1, Firefox ESR 60.6.1, and Thunderbird 60.6.1...

8.8CVSS7.4AI score0.46675EPSS
Exploits4References5
RedHat Linux
RedHat Linux
added 2019/03/28 2:52 p.m.1 views

mozilla: Integer overflow in Skia

Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...

6.5CVSS7.4AI score0.00373EPSS
Exploits0References4
OSV
OSV
added 2019/03/27 8:29 p.m.1 views

CVE-2018-12182

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

6.7CVSS5.8AI score
Exploits0References4
NVD
NVD
added 2019/03/27 8:29 p.m.16 views

CVE-2018-12182

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

6.7CVSS7AI score0.00095EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2019/03/27 8:29 p.m.30 views

CVE-2018-12182

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

6.7CVSS6.8AI score0.00095EPSS
Exploits0References3
Prion
Prion
added 2019/03/27 8:29 p.m.19 views

Information disclosure

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

4.6CVSS6.6AI score0.00095EPSS
Exploits0References4
OSV
OSV
added 2019/03/27 8:29 p.m.0 views

UBUNTU-CVE-2018-12182

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

6.7CVSS6.9AI score0.00095EPSS
Exploits0References4
Cvelist
Cvelist
added 2019/03/27 7:18 p.m.21 views

CVE-2018-12182

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

7.7AI score0.00095EPSS
Exploits0References4
CVE
CVE
added 2019/03/27 7:18 p.m.69 views

CVE-2018-12182

CVE-2018-12182 affects the EDK II firmware/EDK II SMM subsystem across multiple vendor advisories. The root cause is an insufficient memory write check in the SMM service, which an authenticated local attacker could exploit to escalate privileges, disclose information, or cause denial of service....

6.7CVSS7.5AI score0.00095EPSS
Exploits0References4Affected Software1
Debian CVE
Debian CVE
added 2019/03/27 7:18 p.m.32 views

CVE-2018-12182

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

6.7CVSS6.8AI score0.00095EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2019/03/27 8:11 a.m.3 views

Mozilla: Ionmonkey type confusion with __proto__ mutations

Incorrect handling of proto mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulnerability affects Firefox 66.0.1, Firefox ESR 60.6.1, and Thunderbird 60.6.1...

8.8CVSS7.4AI score0.46675EPSS
Exploits4References5
Positive Technologies
Positive Technologies
added 2019/03/27 12:0 a.m.2 views

PT-2019-8876 · Intel +2 · Edk Ii +2

Name of the Vulnerable Software and Affected Versions: EDK II affected versions not specified Description: The issue is related to an insufficient memory write check in the SMM service, which may allow an authenticated user to potentially enable escalation of privilege, information disclosure,...

9.8CVSS6.8AI score0.0028EPSS
Exploits0References32
NVD
NVD
added 2019/03/25 6:29 p.m.15 views

CVE-2019-3863

A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing...

8.8CVSS8AI score0.08613EPSS
Exploits0References16
OSV
OSV
added 2019/03/25 6:29 p.m.1 views

DEBIAN-CVE-2019-3863

A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing...

8.8CVSS7.3AI score0.08613EPSS
Exploits0References1
OSV
OSV
added 2019/03/25 6:29 p.m.20 views

CVE-2019-3863

A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing...

8.8CVSS7.3AI score0.08613EPSS
Exploits0References16
Rows per page
Query Builder