Lucene search
+L

5649 matches found

BDU FSTEC
BDU FSTEC
added 2020/12/28 12:00 a.m.14 views

The vulnerability of Microsoft Excel’s spreadsheet editor involves an operation where data is written beyond the buffer boundaries in memory. This allows attackers to access protected information, execute arbitrary code, or cause a system failure.

The vulnerability of Microsoft Excel spreadsheet editors is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access protected information, execute arbitrary code, or cause a system failure...

7.8CVSS8AI score0.03461EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/12/24 12:00 a.m.8 views

The vulnerability in the implementation of the nsDirIndexParser::ParseData method (netwerk\streamconv\converters\nsDirIndexParser.cpp) affects browsers such as Firefox, Firefox ESR, and the email client Thunderbird. This vulnerability allows an attacker to access protected information.

The vulnerability of the nsDirIndexParser::ParseData method netwerk\streamconv\converters\nsDirIndexParser.cpp in browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could...

7.8CVSS7.8AI score0.0692EPSS
SaveExploits0References17Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:00 a.m.16 views

The vulnerability in the implementation of the mta_io function (mta_session.c) of the mail daemon OpenSMTPD allows a hacker to execute arbitrary code.

The vulnerability in the implementation of the mtaio function mtasession.c in the mail daemon OpenSMTPD is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.8AI score0.889EPSS
SaveExploits10References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:00 a.m.13 views

The vulnerability of the Pillow image processing library, related to writing data beyond the buffer boundary in memory during the conversion from SGI images to RLE format, allows a hacker to trigger a service denial.

The vulnerability of the Pillow image processing library is related to the writing of data beyond the buffer boundary in memory during the conversion of SGI images to RLE format. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

10CVSS6.7AI score0.04212EPSS
SaveExploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:00 a.m.41 views

The vulnerability of the Junos operating system arises from an operation that goes beyond the buffer boundaries in memory, allowing a attacker to trigger an emergency shutdown of the kernel’s memory dump process.

The vulnerability of the Junos operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause a failure in the kernel’s memory dump process due to receiving an incorrect DHCPv6 packet...

7.8CVSS7.4AI score0.01276EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:00 a.m.12 views

The vulnerability of the syntactic analysis procedure for JSON microprogramming systems used in Huawei USG6000V network interfaces allows a attacker to trigger a service failure.

The vulnerability of the JSON syntax analysis process in Huawei USG6000V network interface controllers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7.6AI score0.00928EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:00 a.m.10 views

The vulnerability of the PCX P library for image processing in Pillow allows a hacker to trigger a service failure.

The vulnerability of the PCX P library for image processing in Pillow relates to the issue of the operation exceeding the buffer boundaries in memory during the encoding of PCX images. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

9.8CVSS6.7AI score0.0369EPSS
SaveExploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:00 a.m.18 views

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude lies in the recording beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the cloud-based application for video digitization, annotation, and Adobe Prelude format conversion involves writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current use...

10CVSS7.9AI score0.03966EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2020/12/15 2:55 p.m.39 views

CVE-2020-8940 Unchecked buffer overrun in enc_untrusted_recvmsg

An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to encuntrustedrecvmsg using an attacker controlled result parameter. The parameter size is unchecked allowing the attacker to read memory locations outside of the intended buffer size...

5.3CVSS5.6AI score0.00135EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2020/12/14 12:00 a.m.13 views

GNOME Glib Input Validation Error Vulnerability

GNOME GLib is a multi-platform toolkit for creating graphical user interfaces, and is the underlying core library that underlies GTK+ and GNOME projects. An input validation error vulnerability exists in GNOME GLib versions prior to 2.65.3, which stems from an integer overflow, which could result...

7.8CVSS7.1AI score0.00574EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2020/12/11 12:00 a.m.11 views

The vulnerability of the base component of the Google Chrome web browser, which allows a hacker to execute arbitrary code.

The vulnerability of the base component of the Google Chrome web browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.00856EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/12/08 12:00 a.m.11 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

9.3CVSS8AI score0.02713EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/08 12:00 a.m.12 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

9.3CVSS8AI score0.02713EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/08 12:00 a.m.14 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

9.3CVSS8AI score0.11294EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/08 12:00 a.m.14 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

9.3CVSS8AI score0.03108EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2020/12/02 12:00 a.m.30 views

MongoDB 3.6 < 3.6.20, 4.0 < 4.0.20, 4.2 < 4.2.9, 4.4 < 4.4.1 Read Overrun Vulnerability - Windows

MongoDB is prone to a read overrun vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb"; if descriptio...

6.5CVSS6.4AI score0.0143EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/12/02 12:00 a.m.25 views

MongoDB 3.6 < 3.6.20, 4.0 < 4.0.20, 4.2 < 4.2.9, 4.4 < 4.4.1 Read Overrun Vulnerability - Linux

MongoDB is prone to a read overrun vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb"; if descriptio...

6.5CVSS6.4AI score0.0143EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/12/01 12:00 a.m.9 views

The vulnerability of the DCH-compatible Thunderbolt driver, related to the execution of operations beyond the buffer in memory, allows attackers to exploit their privileges.

The vulnerability of the DCH-compatible Thunderbolt driver is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

8.4CVSS7.5AI score0.00323EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:00 a.m.12 views

The vulnerability of the MSRawImage Store Raw2Image method in the Raw Image Extension plugin allows a hacker to execute arbitrary code.

The vulnerability of the MSRawImage Store Raw2Image plugin’s Raw Image Extension lies in the fact that it involves writing beyond the buffer memory boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created file...

7.8CVSS6.7AI score0.03682EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:00 a.m.10 views

The vulnerability of the Network File System (NFS) of Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Network File System NFS on Windows operating systems relates to operations that occur outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.5AI score0.01308EPSS
SaveExploits0References2
Rows per page
Query Builder