Lucene search
+L

5840 matches found

CNNVD
CNNVD
added 2020/12/14 12:00 a.m.13 views

GNOME Glib Input Validation Error Vulnerability

GNOME GLib is a multi-platform toolkit for creating graphical user interfaces, and is the underlying core library that underlies GTK+ and GNOME projects. An input validation error vulnerability exists in GNOME GLib versions prior to 2.65.3, which stems from an integer overflow, which could result...

7.8CVSS7.1AI score0.00574EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2020/12/11 12:00 a.m.11 views

The vulnerability of the base component of the Google Chrome web browser, which allows a hacker to execute arbitrary code.

The vulnerability of the base component of the Google Chrome web browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.00856EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/12/08 12:00 a.m.11 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

9.3CVSS8AI score0.02713EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/08 12:00 a.m.12 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

9.3CVSS8AI score0.02713EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/08 12:00 a.m.14 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

9.3CVSS8AI score0.11294EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/08 12:00 a.m.14 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

9.3CVSS8AI score0.03108EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2020/12/02 12:00 a.m.30 views

MongoDB 3.6 < 3.6.20, 4.0 < 4.0.20, 4.2 < 4.2.9, 4.4 < 4.4.1 Read Overrun Vulnerability - Windows

MongoDB is prone to a read overrun vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb"; if descriptio...

6.5CVSS6.4AI score0.0143EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/12/02 12:00 a.m.25 views

MongoDB 3.6 < 3.6.20, 4.0 < 4.0.20, 4.2 < 4.2.9, 4.4 < 4.4.1 Read Overrun Vulnerability - Linux

MongoDB is prone to a read overrun vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb"; if descriptio...

6.5CVSS6.4AI score0.0143EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/12/01 12:00 a.m.9 views

The vulnerability of the DCH-compatible Thunderbolt driver, related to the execution of operations beyond the buffer in memory, allows attackers to exploit their privileges.

The vulnerability of the DCH-compatible Thunderbolt driver is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

8.4CVSS7.5AI score0.00323EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:00 a.m.12 views

The vulnerability of the MSRawImage Store Raw2Image method in the Raw Image Extension plugin allows a hacker to execute arbitrary code.

The vulnerability of the MSRawImage Store Raw2Image plugin’s Raw Image Extension lies in the fact that it involves writing beyond the buffer memory boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created file...

7.8CVSS6.7AI score0.03682EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:00 a.m.9 views

The vulnerability of the IPv6 protocol implementation under Intel Active Management Technology and Intel Standard Manageability allows attackers to enhance their privileges.

The vulnerability of the IPv6 protocol implementation in Intel Active Management Technology and Intel Standard Manageability lies in the writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

9.7CVSS7.9AI score0.01686EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:00 a.m.10 views

The vulnerability of the Network File System (NFS) of Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Network File System NFS on Windows operating systems relates to operations that occur outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.5AI score0.01308EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:00 a.m.12 views

The vulnerability of the Crossbeam-channel library’s parallel programming tools allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Crossbeam-channel library for parallel programming lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...

10CVSS8.1AI score0.02701EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:00 a.m.13 views

The vulnerability of the Microsoft Windows Codecs Library, a system library for processing media content, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Windows Codecs Library, a component of the Windows operating system, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.0388EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:00 a.m.13 views

The vulnerability of the Windows Backup Service allows a hacker to exploit their privileges.

The vulnerability of the Windows Backup Service’s backup function is related to the operation of the process beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.4AI score0.00908EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/11/24 12:00 a.m.15 views

The vulnerability of the parse_user_name() function in the libpam library of the Pluggable Authentication Module of the Solaris operating system allows a perpetrator to gain full control over the application.

The vulnerability of the parseusername function in the libpam library, a plugin for the Pluggable Authentication Module of the Solaris operating system, is related to an operation that goes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor, operating remotel...

10CVSS7.9AI score0.80157EPSS
SaveExploits12References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/24 12:00 a.m.12 views

The vulnerability of the plugin for viewing RAW images relates to the issue of data being written beyond the buffer boundaries, allowing an attacker to execute arbitrary code.

The vulnerability of the plugin for viewing RAW images is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.02908EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/24 12:00 a.m.9 views

The vulnerability of the Intel Wireless Bluetooth driver relates to the occurrence of operations outside the buffer in memory, allowing attackers to increase their privileges.

The vulnerability of the Intel Wireless Bluetooth driver is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

9.6CVSS8AI score0.00982EPSS
SaveExploits0References4Affected Software12
RedhatCVE
RedhatCVE
added 2020/11/23 8:51 p.m.33 views

CVE-2020-7928

A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and...

6.5CVSS6.5AI score0.0143EPSS
SaveExploits0References3
OSV
OSV
added 2020/11/23 5:15 p.m.24 views

CVE-2020-7928

A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and...

6.5CVSS6.4AI score
SaveExploits0References1
Rows per page
Query Builder