Lucene search
+L

5596 matches found

Positive Technologies
Positive Technologies
added 2022/07/08 12:00 a.m.9 views

PT-2022-24287 · Systemd +9 · Systemd +9

Name of the Vulnerable Software and Affected Versions: Systemd affected versions not specified Description: An off-by-one Error issue was discovered in the format timespan function of time-util.c. An attacker could supply specific values for time and accuracy that lead to a buffer overrun in form...

7.8CVSS6.4AI score0.08792EPSS
SaveExploits8References81
OSV
OSV
added 2022/07/07 8:29 a.m.12 views

CLSA-2022-1657182572 Fixed CVEs in vim: CVE-2022-2124, CVE-2022-2129, CVE-2022-2125, CVE-2022-2126, CVE-2022-1720

CVE-2022-2125: add checking for NUL to avoid running over the end of line - CVE-2022-1720: do not include the NUL in the length to avoid reading past end of line with "gf" in Visual block mode - CVE-2022-2124: add checking for NUL to avoid running over the end of line - CVE-2022-2129: disallow...

7.8CVSS6.9AI score0.02177EPSS
SaveExploits5References1
OSV
OSV
added 2022/07/07 8:22 a.m.16 views

CLSA-2022-1657182150 Fix CVE(s): CVE-2022-2129, CVE-2022-2124, CVE-2022-2125, CVE-2022-2126, CVE-2022-1720

SECURITY UPDATE: Reading past end of line with "gf" in Visual block mode - debian/patches/CVE-2022-1720.patch: Do not include the NUL in the length - CVE-2022-1720 SECURITY UPDATE: Searching for quotes may go over the end of the line - debian/patches/CVE-2022-2124.patch: Check for running into th...

7.8CVSS7.3AI score0.02177EPSS
SaveExploits5References1
OpenVAS
OpenVAS
added 2022/07/07 12:00 a.m.20 views

openSUSE: Security Advisory for liblouis (SUSE-SU-2022:2298-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS6.7AI score0.01463EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2022/07/07 12:00 a.m.14 views

SUSE: Security Advisory (SUSE-SU-2022:2298-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.6AI score0.01463EPSS
SaveExploits2References2
OSV
OSV
added 2022/07/06 11:35 a.m.9 views

SUSE-SU-2022:2298-1 Security update for liblouis

This update for liblouis fixes the following issues: - CVE-2022-26981: fix buffer overrun in compilePassOpcode bsc1197085. - CVE-2022-31783: prevent an invalid memory write in compileRule bsc1200120...

7.8CVSS6.5AI score0.01463EPSS
SaveExploits2References5
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:00 a.m.12 views

The vulnerability of the monitoring software for Fujifilm’s PLK devices, V-Server and V-Server Lite, arises from the possibility of writing operations outside of the buffer in memory. This allows a malicious actor to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of the monitoring software for Fujifilm’s PLC models, V-Server and V-Server Lite, lies in the fact that the write operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or execute...

7.8CVSS7.9AI score0.00919EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:00 a.m.11 views

The vulnerability of the httpd module of the microprogramming system used in Tenda AC18 routers allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the httpd microprogramming system for the Tenda AC18 router is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information by using...

10CVSS8AI score0.0138EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:00 a.m.19 views

The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially create...

10CVSS8.8AI score0.78913EPSS
SaveExploits8References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:00 a.m.10 views

The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially create...

9.3CVSS6.8AI score0.86927EPSS
SaveExploits4References17Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:00 a.m.11 views

The vulnerability of the Local Discovery Server (LDS) software from Siemens, related to the execution of operations outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the Local Discovery Server LDS software from Siemens is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted messages...

7.8CVSS7.6AI score0.02563EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:00 a.m.13 views

The vulnerability of the thread_call() function in the Squirrel programming language allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the threadcall function in the Squirrel programming language is related to the execution of operations outside of memory buffers. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code using a specially created malware fi...

10CVSS8.4AI score0.01202EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:00 a.m.10 views

The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the Flash Player software is related to the execution of operations beyond the buffer in memory when processing SWF content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure using a specially created malware file...

9.3CVSS8.3AI score0.70384EPSS
SaveExploits11References11Affected Software3
OpenVAS
OpenVAS
added 2022/07/05 12:00 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2022:2252-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.6AI score0.01463EPSS
SaveExploits2References6
OpenVAS
OpenVAS
added 2022/07/05 12:00 a.m.24 views

openSUSE: Security Advisory for liblouis (SUSE-SU-2022:2252-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS6.7AI score0.01463EPSS
SaveExploits2References2
OSV
OSV
added 2022/07/04 10:05 a.m.10 views

SUSE-SU-2022:2252-1 Security update for liblouis

This update for liblouis fixes the following issues: - CVE-2022-26981: fix buffer overrun in compilePassOpcode bsc1197085. - CVE-2022-31783: prevent an invalid memory write in compileRule bsc1200120...

7.8CVSS6.5AI score0.01463EPSS
SaveExploits2References6
BDU FSTEC
BDU FSTEC
added 2022/07/04 12:00 a.m.19 views

The vulnerability of the read_multi_rsp function (gatt_sr.cc) in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the readmultirsp function gattsr.cc in Android operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

10CVSS8AI score0.08687EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/04 12:00 a.m.10 views

The vulnerability of the Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort functions in the MariaDB database management system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Exectimetracker::getloops/Filesorttracker::reportuse/filesort functions in the MariaDB database management system is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability could allow a malicious actor to compromise the...

7.5CVSS7.8AI score0.02024EPSS
SaveExploits1References7Affected Software4
Tenable Nessus
Tenable Nessus
added 2022/07/01 12:00 a.m.53 views

RHEL 8 : ruby:2.6 (RHSA-2022:5338)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5338 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks...

7.5CVSS7.2AI score0.0437EPSS
SaveExploits0References6
Oracle linux
Oracle linux
added 2022/07/01 12:00 a.m.50 views

ruby:2.6 security, bug fix, and enhancement update

ruby 2.6.10-109 - Upgrade to Ruby 2.6.10. Resolves: rhbz2088415 - Fix buffer overrun in String-to-Float conversion. Resolves: CVE-2022-28739 - Fix FTBFS due to an incompatible load directive. - Fix a fiddle import test on an optimized glibc on Power 9...

7.5CVSS2.3AI score0.0437EPSS
SaveExploits0
Rows per page
Query Builder