Lucene search
+L

720 matches found

CNNVD
CNNVD
added 2022/05/11 12:00 a.m.11 views

Intel BIOS firmware缓冲区错误漏洞

Intel BIOS firmware is a set of programs from the U.S. company Intel that are solidified onto a ROM chip on the motherboard inside a computer. A security vulnerability exists in the Intel BIOS firmware that arises from the use of out-of-range pointer offsets. An attacker could exploit the...

7.8CVSS7.4AI score0.00275EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/05/02 12:00 a.m.14 views

relan exFAT 安全漏洞

relan exFAT is the project's attempt to provide a fully functional exFAT file system implementation for Unix-like systems. A security vulnerability exists in relan exFAT version 1.3.0, which originates from obtaining sensitive information data from deleted files in the filesystem in certain...

4.7CVSS5.1AI score0.00303EPSS
SaveExploits1References2
NVD
NVD
added 2022/04/18 5:15 p.m.26 views

CVE-2020-13495

An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an arbitrary out-of-bounds memory access that could lead to the disclosure of sensitive information. This vulnerability could be used to bypa...

5.5CVSS0.00694EPSS
SaveExploits1References1
OSV
OSV
added 2022/04/18 5:15 p.m.8 views

CVE-2020-13495

An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an arbitrary out-of-bounds memory access that could lead to the disclosure of sensitive information. This vulnerability could be used to bypa...

5.5CVSS6.7AI score
SaveExploits0References1
OSV
OSV
added 2022/03/24 5:15 p.m.15 views

CLSA-2022-1648142109 Fix CVE(s): CVE-2020-27762, CVE-2020-27770, CVE-2020-27760, CVE-2020-25665, CVE-2020-19667, CVE-2020-25674, CVE-2017-13144, CVE-2020-25676, CVE-2020-25664, CVE-2020-27753, CVE-2020-27750

SECURITY UPDATE: Crash if image dimensions are too large - debian/patches/CVE-2017-13144-.patch: Fix memory leak in MPC image format - CVE-2017-13144 SECURITY UPDATE: Stack-based buffer overflow - debian/patches/CVE-2020-19667.patch: Zero-out memory before use - CVE-2020-19667 SECURITY UPDATE:...

7.8CVSS6.9AI score0.02011EPSS
SaveExploits8References1
CNVD
CNVD
added 2022/02/22 12:00 a.m.36 views

An unspecified vulnerability exists in vim (CNVD-2022-13206)

Vim is a UNIX-based editor. vim versions prior to 8.2.4418 contain a security vulnerability that stems from the use of out-of-range pointer offsets in vim. No details of the vulnerability are currently available...

8.4CVSS3.7AI score0.01708EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/02/20 12:00 a.m.5 views

vim 安全漏洞

Vim is a UNIX-based editor. vim versions prior to 8.2.4418 contain a security vulnerability that stems from the use of out-of-range pointer offsets in vim. No details of the vulnerability are currently available...

8.4CVSS5.5AI score0.01708EPSS
SaveExploits1References20
CNVD
CNVD
added 2022/02/18 12:00 a.m.83 views

Unspecified vulnerability exists in mruby (CNVD-2022-12747)

mruby is a lightweight implementation of the Ruby language. mruby 3.2 previously had a security vulnerability that stemmed from the use of out-of-range pointer offsets. No detailed vulnerability details are currently available...

8.4CVSS2.2AI score0.00914EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/02/16 12:00 a.m.8 views

mruby 缓冲区错误漏洞

mruby is a lightweight implementation of the Ruby language. mruby 3.2 previously had a security vulnerability that stemmed from the use of out-of-range pointer offsets. No detailed vulnerability details are currently available...

8.4CVSS5.5AI score0.00914EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/02/15 12:00 a.m.10 views

PT-2022-7498 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the CDC-NCM component in the Linux kernel, where a broken device may provide an extreme offset and a reasonable length for a fragment, causing an integer overfl...

8.8CVSS6.8AI score0.01915EPSS
SaveExploits16References1917
OSV
OSV
added 2022/01/14 8:15 p.m.3 views

DEBIAN-CVE-2021-45764

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shiftchunkoffsets.isra...

5.5CVSS6.7AI score0.00718EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/01/14 8:15 p.m.6 views

CVE-2021-45764

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shiftchunkoffsets.isra...

5.5CVSS5.8AI score0.00718EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/14 8:15 p.m.7 views

UBUNTU-CVE-2021-45764

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shiftchunkoffsets.isra...

5.5CVSS7.2AI score0.00718EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/01/14 12:00 a.m.10 views

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. GPAC has a security vulnerability that stems from the discovery, via the function shiftchunkoffsets.isra, that GPAC v1.1.0 contains an invalid memory address dereference. No detailed vulnerability details are currently available...

5.5CVSS5.5AI score0.00718EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/01/14 12:00 a.m.8 views

PT-2022-12394 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.1.0 Description: An issue was discovered in GPAC, where an invalid memory address dereference occurs via the function shift chunk offsets.isra. Recommendations: For GPAC version 1.1.0, at the moment, there is no information abo...

9.8CVSS7.3AI score0.04615EPSS
SaveExploits98References238
ATTACKERKB
ATTACKERKB
added 2022/01/06 8:15 p.m.17 views

CVE-2021-46039

A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shiftchunkoffsets.part function, which causes a Denial of Service context-dependent...

5.5CVSS6.7AI score0.0063EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/01/06 12:00 a.m.13 views

PT-2022-12521 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Pointer Dereference issue exists via the finplace shift moov meta offsets function, which causes a Denial of Service. Recommendations: For GPAC version 1.0.1, consider disabling the finplace shift moov meta...

9.8CVSS7.5AI score0.04615EPSS
SaveExploits98References240
OpenVAS
OpenVAS
added 2021/12/15 12:00 a.m.13 views

SUSE: Security Advisory (SUSE-SU-2021:4063-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OSV
OSV
added 2021/12/14 12:58 p.m.3 views

OPENSUSE-SU-2021:4063-1 Security update for icu.691

This update for icu.691 fixes the following issues: - Renamed package from icu 69.1 for SUSE:SLE-15-SP3:Update. jscSLE-17893 - Fix undefined behaviour in 'ComplexUnitsConverter::applyRounder' - Update to release 69.1 - For Norwegian, 'no' is back to being the canonical code, with 'nb' treated as...

7.3AI score
SaveExploits0References8
OPENSUSE Linux
OPENSUSE Linux
added 2021/12/14 12:00 a.m.102 views

Security update for icu.691 (important)

openSUSE Security Update: Security update for icu.691 Announcement ID: openSUSE-SU-2021:4063-1 Rating: important References: 1158955 1159131 1161007 1162882 1167603 1182252 1182645 SLE-17893 Affected Products: openSUSE Leap 15.3 An update that contains security fixes and contains one feature can...

7.5AI score
SaveExploits0
Rows per page
Query Builder