Lucene search
+L

5864 matches found

BDU FSTEC
BDU FSTEC
•added 2019/11/25 12:00 a.m.•10 views

The vulnerability of the plugins\codec\libflacplugin.dll library in the VideoLAN VLC media player allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the plugins\codec\libflacplugin.dll library in the VideoLAN VLC media player is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure using a specially...

7.8CVSS8.1AI score0.03446EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/11/25 12:00 a.m.•13 views

The vulnerability of the mp4ff_read_stco function (common/mp4ff/mp4atom.c) in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to trigger a service denial.

The vulnerability of the mp4ffreadstco function common/mp4ff/mp4atom.c in the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure using a...

5.5CVSS6.9AI score0.00891EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/11/19 12:00 a.m.•18 views

The vulnerability of the ReadPNMImage function (coders/pnm.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to cause a service failure.

The vulnerability of the ReadPNMImage function coders/pnm.c in the cross-platform library for working with graphics, GraphicsMagick, arises due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a system failure...

7.8CVSS7AI score0.02379EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/11/19 12:00 a.m.•11 views

The vulnerability of functions mode4and5 in the hardware/display/cirrus_vga.c file of the QEMU hardware emulation software allows a hacker to induce a service failure.

The vulnerability of functions mode4and5 in the QEMU hardware emulation software hw/display/cirrusvga.c is related to writing beyond the memory buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a system failure...

6CVSS6.9AI score0.00463EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
•added 2019/11/18 12:00 a.m.•14 views

The vulnerability of the GetStyleTokens function (coders/svg.c:311:12) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to trigger a service failure.

The vulnerability of the GetStyleTokens function coders/svg.c:311:12 in the cross-platform library for working with graphics, GraphicsMagick, arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service...

7.8CVSS7.2AI score0.02274EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
•added 2019/11/18 12:00 a.m.•13 views

The vulnerability of the GetStyleTokens function (coders/svg.c:314:12) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to trigger a service failure.

The vulnerability of the GetStyleTokens function coders/svg.c:314:12 in the cross-platform library for working with graphics, GraphicsMagick, arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service...

7.8CVSS7.2AI score0.0185EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
•added 2019/11/11 12:00 a.m.•12 views

The vulnerability of TP-Link TL-WR840N router’s microprogramming software arises from an operation that goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device.

The vulnerability of TP-Link TL-WR840N router’s microprogramming software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause a service failure through fragmented packets...

7.8CVSS7.5AI score0.01858EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2019/11/06 4:43 p.m.•13 views

chromium-browser: Buffer overrun in Blink

Out of bounds memory access in the gamepad API in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.4AI score0.01183EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2019/11/06 9:40 a.m.•16 views

php: underflow in env_path_info in fpm_main.c

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution...

9.8CVSS7.7AI score0.9978EPSS
SaveExploits57References6
BDU FSTEC
BDU FSTEC
•added 2019/11/06 12:00 a.m.•11 views

The vulnerability of the SSH_MSG_CHANNEL_REQUEST command in the libssh2 library allows a hacker to execute arbitrary code.

The vulnerability of the SSHMSGCHANNELREQUEST command in the libssh2 library is related to writing data beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by connecting to an SSH server...

9.3CVSS7.8AI score0.06131EPSS
SaveExploits0References18Affected Software4
OPENSUSE Linux
OPENSUSE Linux
•added 2019/11/06 12:00 a.m.•151 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2447-1 Rating: important References: 1143492 1144625 1145242 1146219 1149143 1150425 1151229 1153660 1154806 1155643 Cross-References: CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-1366...

9.6CVSS7AI score0.4914EPSS
SaveExploits5References10
BDU FSTEC
BDU FSTEC
•added 2019/11/04 12:00 a.m.•14 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability in PDF viewer programs such as Adobe Reader and Document Cloud, as well as in PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability can allow a malicious acto...

4.3CVSS6.2AI score0.02893EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2019/11/04 12:00 a.m.•9 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability in PDF viewer programs such as Adobe Reader and Document Cloud, as well as in PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability can allow a malicious acto...

4.3CVSS6.2AI score0.01995EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2019/11/04 12:00 a.m.•52 views

openSUSE Security Update : chromium / re2 (openSUSE-2019-2420)

This update for chromium, re2 fixes the following issues : Chromium was updated to 78.0.3904.70 boo1154806 : - CVE-2019-13699: Use-after-free in media - CVE-2019-13700: Buffer overrun in Blink - CVE-2019-13701: URL spoof in navigation - CVE-2019-13702: Privilege elevation in Installer -...

8.8CVSS7.2AI score0.06643EPSS
SaveExploits1References22
BDU FSTEC
BDU FSTEC
•added 2019/11/04 12:00 a.m.•10 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability in PDF viewer programs such as Adobe Reader and Document Cloud, as well as in PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, arises due to an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious individua...

5.5CVSS6.2AI score0.01995EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux
•added 2019/11/03 12:00 a.m.•155 views

Security update for chromium, re2 (important)

openSUSE Security Update: Security update for chromium, re2 Announcement ID: openSUSE-SU-2019:2425-1 Rating: important References: 1154806 Cross-References: CVE-2019-13699 CVE-2019-13700 CVE-2019-13701 CVE-2019-13702 CVE-2019-13703 CVE-2019-13704 CVE-2019-13705 CVE-2019-13706 CVE-2019-13707...

8.8CVSS8AI score0.06643EPSS
SaveExploits1References1
OPENSUSE Linux
OPENSUSE Linux
•added 2019/11/03 12:00 a.m.•182 views

Security update for chromium, re2 (important)

openSUSE Security Update: Security update for chromium, re2 Announcement ID: openSUSE-SU-2019:2424-1 Rating: important References: 1154806 Cross-References: CVE-2019-13699 CVE-2019-13700 CVE-2019-13701 CVE-2019-13702 CVE-2019-13703 CVE-2019-13704 CVE-2019-13705 CVE-2019-13706 CVE-2019-13707...

8.8CVSS8AI score0.06643EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2019/11/02 12:00 a.m.•33 views

openSUSE: Security Advisory for chromium, re2 (openSUSE-SU-2019:2420-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS7.6AI score0.06643EPSS
SaveExploits1References2
Kaspersky
Kaspersky
•added 2019/10/30 12:00 a.m.•84 views

KLA11714 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, cause denial of service. Below is a complete list of vulnerabilities: 1. Cross-origin data leak vulnerability can be exploited to arbitrary code executio...

8.8CVSS9.3AI score0.06643EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2019/10/29 12:00 a.m.•27 views

The vulnerability of the libssh2 library, related to writing beyond the buffer boundaries in memory, allows a attacker to cause a service failure, execute arbitrary code, or disclose sensitive information.

The vulnerability of the libssh2 library lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures, execute arbitrary code, or disclose sensitive information...

8.8CVSS6AI score0.03437EPSS
SaveExploits0References10Affected Software13
Rows per page
Query Builder