Lucene search
+L

326 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•39 views

Siemens JT2Go DXF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF...

7.8CVSS5.2AI score0.0263EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/01/26 12:00 a.m.•18 views

The vulnerability of the Linux operating system’s kernel, related to a pointer dereferencing error, allows attackers to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.6CVSS6.6AI score0.00432EPSS
SaveExploits1References15Affected Software3
NVD
NVD
•added 2021/01/08 3:15 p.m.•27 views

CVE-2021-1064

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which it obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer, which may lead to information disclosure or denial of service. This affects vGPU version 8.x prior to 8....

7.1CVSS6.8AI score0.00349EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/31 12:00 a.m.•4 views

CVE-2020-35860: NULL Pointer Dereference

An issue was discovered in the cbox crate through 2020-03-19 for Rust. The CBox API allows dereferencing raw pointers without a requirement for unsafe code...

9.8CVSS5.9AI score0.01649EPSS
SaveExploits1References2
NVD
NVD
•added 2020/12/11 11:15 p.m.•24 views

CVE-2020-17440

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate that domain names present in the DNS responses have '\0' termination. This results in errors when calculating the offset of the pointer that jumps over domain...

7.5CVSS8AI score0.02794EPSS
SaveExploits0References2
OSV
OSV
•added 2020/12/11 11:15 p.m.•26 views

CVE-2020-17440

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate that domain names present in the DNS responses have '\0' termination. This results in errors when calculating the offset of the pointer that jumps over domain...

7.5CVSS6.9AI score
SaveExploits0References2
Cvelist
Cvelist
•added 2020/12/11 10:27 p.m.•32 views

CVE-2020-17440

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate that domain names present in the DNS responses have '\0' termination. This results in errors when calculating the offset of the pointer that jumps over domain...

8AI score0.02794EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2020/05/19 12:00 a.m.•42 views

(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the user-mode...

7CVSS4.3AI score0.00876EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/05/19 12:00 a.m.•42 views

(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the user-mode...

7CVSS4.3AI score0.00876EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2020/04/29 12:00 a.m.•12 views

The vulnerability of the agroot() function in the Graphviz visualization application, which allows a hacker to cause a service failure

The vulnerability of the agroot function in the Graphviz visualization application is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

9.3CVSS6.6AI score0.04894EPSS
SaveExploits1References7Affected Software3
Positive Technologies
Positive Technologies
•added 2019/12/09 12:00 a.m.•3 views

PT-2019-4491

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.4.7 Description The issue is related to errors in pointer dereferencing in the Linux kernel component drivers/scsi/libsas/sas discover.c. It may allow an attacker to cause a denial of service due to incorrect...

4.7CVSS0.00654EPSS
SaveExploits1
NVD
NVD
•added 2019/07/25 5:15 p.m.•31 views

CVE-2019-2334

Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650...

7.8CVSS7.7AI score0.00817EPSS
SaveExploits0References1
CVE
CVE
•added 2019/07/25 4:33 p.m.•78 views

CVE-2019-2334

CVE-2019-2334 is a null pointer dereference in Snapdragon media handling that can occur when playing a clip with a wrong block group id, affecting a broad set of Qualcomm Snapdragon products (Auto, Compute, IoT, Mobile, Wearables, etc.). The NVD and Red Hat entries rate it as HIGH severity with C...

7.8CVSS7.6AI score0.00817EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/07/25 4:33 p.m.•92 views

CVE-2019-2334

Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650...

7.7AI score0.00817EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/07/11 12:00 a.m.•10 views

The vulnerability of the g_markup_parse_context_end_parse function in the Glib library allows a hacker to trigger a service failure.

The vulnerability of the gmarkupparsecontextendparse function in the Glib library is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

9.8CVSS7.2AI score0.04693EPSS
SaveExploits1References10Affected Software7
BDU FSTEC
BDU FSTEC
•added 2019/04/04 12:00 a.m.•12 views

The vulnerability of the libsolv library, related to pointer dereferencing errors, allows a hacker to trigger a service failure.

The vulnerability of the testcaseread function in the libsolv library is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

7.1CVSS6.4AI score0.02146EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/02/19 12:00 a.m.•19 views

The vulnerability of the LibVNC library, related to pointer dereferencing errors, allows a hacker to trigger a service failure.

The vulnerability of the LibVNC library is related to pointer dereferencing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.0326EPSS
SaveExploits0References5Affected Software2
CNVD
CNVD
•added 2019/02/14 12:00 a.m.•20 views

Eclipse OpenJ9 Buffer Overflow Vulnerability (CNVD-2019-39191)

Eclipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. A security vulnerability exists in the OpenJDK + Eclipse OpenJ9 0.11.0 builds. An attacker can exploit the vulnerability to accept pointer values that are dereferenced ...

9.8CVSS6.8AI score0.01134EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/01/19 12:00 a.m.•13 views

LAquis SCADA LGX Report MemoryReadDouble Untrusted Pointer Dereference Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

8.8CVSS1.3AI score0.02572EPSS
SaveExploits0References1
OSV
OSV
•added 2017/08/07 12:46 p.m.•14 views

SUSE-SU-2017:2076-1 Security update for ncurses

This update for ncurses fixes the following issues: Security issues fixed: - CVE-2017-11112: Illegal address access in appendacs. bsc1047964 - CVE-2017-11113: Dereferencing NULL pointer in ncparseentry. bsc1047965 - CVE-2017-10684, CVE-2017-10685: Add modified upstream fix from ncurses 6.0 to avo...

9.8CVSS6.9AI score0.04876EPSS
SaveExploits1References10
Rows per page
Query Builder