Lucene search
+L

5864 matches found

BDU FSTEC
BDU FSTEC
•added 2019/10/03 12:00 a.m.•10 views

Vulnerability of the update_read_bitmap_update() function in the RDP client FreeRDP, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the updatereadbitmapupdate function in the RDP client FreeRDP arises from the execution of the operation outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

10CVSS6.2AI score0.08156EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2019/10/01 12:00 a.m.•15 views

The vulnerability in the Firefox web browser relates to the issue of writing operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability in the Firefox web browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.4AI score0.02721EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/09/27 12:00 a.m.•11 views

The vulnerability of the PAN-OS operating system arises from operations that go beyond buffer boundaries in memory. This allows attackers to create Secure Shell Daemons and cause memory corruption.

The vulnerability of the PAN-OS operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to create Secure Shell Daemon messages and cause memory corruption...

10CVSS5.7AI score0.03219EPSS
SaveExploits0References4Affected Software1
FreeBSD
FreeBSD
•added 2019/09/23 12:00 a.m.•33 views

e2fsprogs -- maliciously corrupted file systems can trigger buffer overruns in the quota code used by e2fsck

Ted Y. Ts'o reports: A maliciously corrupted file systems can trigger buffer overruns in the quota code used by e2fsck...

7.5CVSS2.4AI score0.01105EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2019/09/17 12:00 a.m.•10 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

4.2CVSS6.2AI score0.08673EPSS
SaveExploits0References2
Kaspersky
Kaspersky
•added 2019/09/15 12:00 a.m.•73 views

KLA11583 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability can be exploited to execute...

10CVSS8.9AI score0.22886EPSS
SaveExploits12References8
BDU FSTEC
BDU FSTEC
•added 2019/09/13 12:00 a.m.•13 views

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to execute arbitrary code on the target system.

The vulnerability of the DHCP server service for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using specially crafted packets...

7.8CVSS6.5AI score0.06738EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2019/09/11 12:00 a.m.•30 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : curl Vulnerability (NS-SA-2019-0171)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has curl packages installed that are affected by a vulnerability: - curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length ...

10CVSS7.5AI score0.11115EPSS
SaveExploits0References2
NVD
NVD
•added 2019/09/10 6:15 p.m.•16 views

CVE-2019-11467

In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like \t, , it caused buffer overrun as encoded string would be much larger than accounted for, causing indexer service to crash and restart...

7.8CVSS7.6AI score0.01344EPSS
SaveExploits0References1
OSV
OSV
•added 2019/09/10 6:15 p.m.•8 views

CVE-2019-11467

In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like \t, , it caused buffer overrun as encoded string would be much larger than accounted for, causing indexer service to crash and restart...

7.5CVSS7.2AI score0.01344EPSS
SaveExploits0References1
Prion
Prion
•added 2019/09/10 6:15 p.m.•21 views

Buffer overflow

In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like \t, , it caused buffer overrun as encoded string would be much larger than accounted for, causing indexer service to crash and restart...

7.8CVSS7.6AI score0.01344EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/09/10 5:21 p.m.•26 views

CVE-2019-11467

In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like \t, , it caused buffer overrun as encoded string would be much larger than accounted for, causing indexer service to crash and restart...

7.6AI score0.01344EPSS
SaveExploits0References1
CVE
CVE
•added 2019/09/10 5:21 p.m.•93 views

CVE-2019-11467

CVE-2019-11467 affects Couchbase Server 4.6.3 and 5.5.0 where the secondary indexing path encodes entries with collatejson. When index entries contained characters such as tab, , the encoded string could exceed expectations and trigger a buffer overrun, causing the indexer service to crash and re...

7.8CVSS7.5AI score0.01344EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2019/09/09 12:00 a.m.•15 views

Fedora 30 : rdesktop (2019-baff775841)

Update to 1.8.6 release which fixes a bug in 1.8.5. 1.8.5 is a security release to address various buffer overflow and overrun issues in the rdesktop protocol handling. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

5.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/08/30 12:00 a.m.•15 views

The vulnerability of the Windows operating system arises from operations that go beyond buffer boundaries in memory, allowing attackers to trigger a system failure.

The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause a service failure through a specially created application...

5.8CVSS5.7AI score0.04415EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/08/29 12:44 a.m.•33 views

CVE-2017-14202 The shell implementation does not protect against buffer overruns resulting in unpredictable behavior.

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...

7.9AI score0.00566EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/08/22 12:00 a.m.•18 views

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in the Cisco NX-OS network operating system allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in the Cisco NX-OS network operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

8.8CVSS6.4AI score0.01073EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/08/22 12:00 a.m.•15 views

The vulnerabilities of DirectX graphics drivers for NVIDIA GeForce, Quadro, and Tesla allow attackers to cause system failures or execute arbitrary code.

The vulnerability of DirectX graphics driver for NVIDIA GeForce, Quadro, and Tesla lies in the issue of data writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code using a specially crafted shader...

7.8CVSS6.2AI score0.05415EPSS
SaveExploits1References5Affected Software8
BDU FSTEC
BDU FSTEC
•added 2019/08/22 12:00 a.m.•13 views

The vulnerability of the Windows Jet Database Engine database management system allows a hacker to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine database management system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS6.4AI score0.04477EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/08/20 12:00 a.m.•11 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted...

7.8CVSS6.4AI score0.01465EPSS
SaveExploits0References3Affected Software3
Rows per page
Query Builder