Lucene search
+L

5572 matches found

BDU FSTEC
BDU FSTEC
added 2024/07/23 12:00 a.m.15 views

The vulnerability of the microprogramming software for AutomationDirect P3-550E lies in the possibility of writing beyond the buffer boundaries in memory, allowing a intruder to cause malfunctions during maintenance.

The vulnerability of the microprogrammed software in AutomationDirect P3-550E controllers is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause malfunctions in the system remotely...

8.5CVSS5.6AI score0.00785EPSS
SaveExploits1References5Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/07/22 12:00 a.m.14 views

The vulnerability of the User Mode Driver for DirectX 11 in AMD Radeon microcomputer graphics software allows a hacker to execute arbitrary code.

The vulnerability of the User Mode Driver for DirectX 11 in AMD Radeon graphics processors is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

5.3CVSS6.3AI score0.00187EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/07/19 12:00 a.m.12 views

The vulnerability of the pre-processing processor Simcenter Femap, related to writing beyond buffer boundaries, allows a hacker to execute arbitrary code.

The vulnerability of the pre-processing processor Simcenter Femap is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a attacker to execute arbitrary code using a specially created IGS format malicious file...

7.8CVSS7.8AI score0.00173EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/17 12:00 a.m.13 views

The vulnerability of the ImageIO component in operating systems iPadOS, iOS, and macOS allows a hacker to execute arbitrary code.

The vulnerability of the ImageIO component in operating systems such as iPadOS, iOS, macOS, and visionOS is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00383EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/07/17 12:00 a.m.9 views

The vulnerability of the JT Open Toolkit (JTTK) and PLM XML SDK development tools arises from the possibility of an operation exceeding the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the JT Open Toolkit JTTK and PLM XML SDK development tools is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious XML file...

7.8CVSS8AI score0.0017EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/07/17 12:00 a.m.16 views

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

10CVSS5.9AI score0.0248EPSS
SaveExploits0References2
NVD
NVD
added 2024/07/12 1:15 p.m.25 views

CVE-2024-40970

In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descsallocated to be 9. Since axidescput handles the hwdesc...

7.8CVSS0.00303EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2024/07/12 12:32 p.m.40 views

CVE-2024-40970 Avoid hw_desc array overrun in dw-axi-dmac

In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descsallocated to be 9. Since axidescput handles the hwdesc...

7.8CVSS0.00303EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/07/12 12:32 p.m.30 views

CVE-2024-40970 Avoid hw_desc array overrun in dw-axi-dmac

In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descsallocated to be 9. Since axidescput handles the hwdesc...

6.7AI score0.00303EPSS
SaveExploits0References5
CVE
CVE
added 2024/07/12 12:32 p.m.128 views

CVE-2024-40970

The CVE-2024-40970 issue affects the Linux kernel’s dw-axi-dmac component. It describes a hw_desc array overrun when many descriptors are chained (e.g., nr_buffers=3 with 3 segments per descriptor, leading to 9 hw_descs). Root cause is improper handling in axi_desc_put() relative to allocated hw_...

7.8CVSS7.1AI score0.00303EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2024/07/12 11:07 a.m.8 views

OESA-2024-1817 xorg-x11-server-xwayland security update

Xwayland is an X server for running X clients under Wayland. %package devel Summary: Development package Requires: pkgconfig %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland. %prep %autosetup -n...

7.8CVSS7.7AI score0.00626EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/07/12 12:00 a.m.13 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to circumvent existing security restrictions.

The vulnerability of the Secure Boot protocol for Windows operating systems lies in the fact that operations may go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

8.3CVSS5.6AI score0.00878EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/07/10 12:00 a.m.11 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer in memory. This allows an attacker to execute arbitrary code or cause a service failure.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions using the tag...

10CVSS7.9AI score0.00807EPSS
SaveExploits0References18Affected Software10
BDU FSTEC
BDU FSTEC
added 2024/07/05 12:00 a.m.18 views

Vulnerability of QTS and QuTS operating systems, as well as QNAP network devices, related to the operation of operations beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of QTS and QuTS operating systems, as well as QNAP network devices, is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.4CVSS6.6AI score0.00689EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/07/03 12:00 a.m.12 views

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially created PAR files...

7.8CVSS6.4AI score0.00235EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/06/28 12:00 a.m.14 views

The vulnerability of the microprogramming software of the Nighthawk WiFi 6 Router (RAX30) allows a hacker to execute arbitrary code.

The vulnerability of the finddil function in the microprogramming software for Nighthawk WiFi 6 Routers RAX30 is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

8.8CVSS8.5AI score0.0134EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2024/06/28 12:00 a.m.16 views

PT-2024-33813

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises from dml2 core shared mode support and dml core mode support accessing the third element of dummy boolean, which has a size of 2. This results in an OVERRUN when...

5.5CVSS5.5AI score0.00206EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/06/27 12:00 a.m.13 views

The vulnerability of the IOAESAccelerator component in the UDF file system of the Mac OS allows a hacker to increase their privileges.

The vulnerability of the IOAESAccelerator component in the UDF file system of the Mac OS operating system is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

10CVSS7.9AI score0.00327EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2024/06/25 12:00 a.m.10 views

PT-2024-4397 · Moxa · Oncell G3470A-Lte Series

Name of the Vulnerable Software and Affected Versions: OnCell G3470A-LTE Series firmware versions v1.7.7 and prior Description: The issue is related to missing bounds checking on buffer operations, which could allow an attacker to write past the boundaries of allocated buffer regions in memory,...

8.2CVSS7.5AI score0.00393EPSS
SaveExploits0References5
OSV
OSV
added 2024/06/20 3:52 p.m.12 views

CLSA-2024-1718898745 vorbis-tools: Fix of CVE-2023-43361

CVE-2023-43361: fix out-of-buffer operations...

7.8CVSS7.1AI score0.00448EPSS
SaveExploits1References1
Rows per page
Query Builder